# SOME DESCRIPTIVE TITLE
# Copyright (C) YEAR Red Hat
# This file is distributed under the same license as the sssd-docs package.
#
# Translators:
# Jordi Mas <jmas@softcatala.org>, 2012
# Jordi Mas <jmas@softcatala.org>, 2012
# Jordi Mas <jmas@softcatala.org>, 2014
# muzzol <muzzol@gmail.com>, 2012
# muzzol <muzzol@gmail.com>, 2012
# Robert Antoni Buj i Gelonch, 2013
msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 1.12.2\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
"POT-Creation-Date: 2015-01-08 18:14+0100\n"
"PO-Revision-Date: 2014-06-04 02:04-0400\n"
"Last-Translator: jhrozek <jhrozek@redhat.com>\n"
"Language-Team: Catalan (http://www.transifex.com/projects/p/sssd/language/"
"ca/)\n"
"Language: ca\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=2; plural=(n != 1);\n"
"X-Generator: Zanata 3.5.1\n"

#. type: Content of: <reference><title>
#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
#: sssd-ad.5.xml:5 sssd-sudo.5.xml:5 sssd.8.xml:5 sss_obfuscate.8.xml:5
#: sss_useradd.8.xml:5 sssd-krb5.5.xml:5 sss_groupadd.8.xml:5
#: sss_userdel.8.xml:5 sss_groupdel.8.xml:5 sss_groupshow.8.xml:5
#: sss_usermod.8.xml:5 sss_cache.8.xml:5 sss_debuglevel.8.xml:5
#: sss_seed.8.xml:5 sssd-ifp.5.xml:5 sss_rpcidmapd.5.xml:5
#: sss_ssh_authorizedkeys.1.xml:5 sss_ssh_knownhostsproxy.1.xml:5
msgid "SSSD Manual pages"
msgstr "Pàgines de manual de l'SSSD"

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
msgid "sss_groupmod"
msgstr "sss_groupmod"

#. type: Content of: <reference><refentry><refmeta><manvolnum>
#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
#: sss_debuglevel.8.xml:11 sss_seed.8.xml:11
msgid "8"
msgstr "8"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_groupmod.8.xml:16
msgid "modify a group"
msgstr "modifica un grup"

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_groupmod.8.xml:21
msgid ""
"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
"arg>"
msgstr ""
"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>opcions</"
"replaceable></arg> <arg choice='plain'> <replaceable>GRUP</replaceable></arg>"

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:53
#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
#: sssd-ad.5.xml:21 sssd-sudo.5.xml:21 sssd.8.xml:29 sss_obfuscate.8.xml:30
#: sss_useradd.8.xml:30 sssd-krb5.5.xml:21 sss_groupadd.8.xml:30
#: sss_userdel.8.xml:30 sss_groupdel.8.xml:30 sss_groupshow.8.xml:30
#: sss_usermod.8.xml:30 sss_cache.8.xml:29 sss_debuglevel.8.xml:30
#: sss_seed.8.xml:31 sssd-ifp.5.xml:21 sss_ssh_authorizedkeys.1.xml:30
#: sss_ssh_knownhostsproxy.1.xml:31
msgid "DESCRIPTION"
msgstr "DESCRIPCIÓ"

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_groupmod.8.xml:32
msgid ""
"<command>sss_groupmod</command> modifies the group to reflect the changes "
"that are specified on the command line."
msgstr ""
"<command>sss_groupmod</command> modifica el grup per reflectir els canvis "
"que s'especifiquen a la línia d'ordres."

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_groupmod.8.xml:39 pam_sss.8.xml:60 sssd.8.xml:42 sss_obfuscate.8.xml:58
#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_seed.8.xml:42
#: sss_ssh_authorizedkeys.1.xml:75 sss_ssh_knownhostsproxy.1.xml:62
msgid "OPTIONS"
msgstr "OPCIONS"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
msgid ""
"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
"replaceable>"
msgstr ""
"<option>-a</option>,<option>--append-group</option> <replaceable>GRUPS</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_groupmod.8.xml:48
msgid ""
"Append this group to groups specified by the <replaceable>GROUPS</"
"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
"a comma separated list of group names."
msgstr ""
"Afegiu aquest grup als grups especificats pel paràmetre de "
"<replaceable>GRUPS</replaceable> .  El paràmetre de <replaceable>GRUPS</"
"replaceable> és una llista delimitada per comes dels noms de grup."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
msgid ""
"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
"replaceable>"
msgstr ""
"<option>-r</option>,<option>--remove-group</option> <replaceable>GRUPS</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_groupmod.8.xml:62
msgid ""
"Remove this group from groups specified by the <replaceable>GROUPS</"
"replaceable> parameter."
msgstr ""
"Suprimeix aquest grup dels grups especificats pel paràmetre "
"<replaceable>GRUPS</replaceable>."

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd.conf.5.xml:10 sssd.conf.5.xml:16
msgid "sssd.conf"
msgstr "sssd.conf"

#. type: Content of: <reference><refentry><refmeta><manvolnum>
#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
#: sssd-ipa.5.xml:11 sssd-ad.5.xml:11 sssd-sudo.5.xml:11 sssd-krb5.5.xml:11
#: sssd-ifp.5.xml:11 sss_rpcidmapd.5.xml:27
msgid "5"
msgstr "5"

#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
#: sssd-ipa.5.xml:12 sssd-ad.5.xml:12 sssd-sudo.5.xml:12 sssd-krb5.5.xml:12
#: sssd-ifp.5.xml:12 sss_rpcidmapd.5.xml:28
msgid "File Formats and Conventions"
msgstr "Formats de fitxer i convencions"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd.conf.5.xml:17
msgid "the configuration file for SSSD"
msgstr "l'arxiu de configuració per a SSSD"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:21
msgid "FILE FORMAT"
msgstr "FORMAT DE FITXER"

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd.conf.5.xml:29
#, no-wrap
msgid ""
"                <replaceable>[section]</replaceable>\n"
"                <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
"                <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
"            "
msgstr ""
"                <replaceable>[secció]</replaceable>\n"
"                <replaceable>clau</replaceable> = <replaceable>valor</replaceable>\n"
"                <replaceable>clau2</replaceable> = <replaceable>valor2,valor3</replaceable>\n"
"            "

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:24
msgid ""
"The file has an ini-style syntax and consists of sections and parameters. A "
"section begins with the name of the section in square brackets and continues "
"until the next section begins. An example of section with single and multi-"
"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
"El fitxer utilitza un estil de sintaxi del tipu ini i consisteix en seccions "
"i paràmetres.\n"
"Una secció comença amb el nom de la secció entre claudàtors i continua fins "
"que comença la següent secció. Un exemple de secció amb paràmetres simples i "
"múltiples: <placeholder type=\"programlisting\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:36
msgid ""
"The data types used are string (no quotes needed), integer and bool (with "
"values of <quote>TRUE/FALSE</quote>)."
msgstr ""
"Els tipus de dades utilitzats són cadenes (no es necessiten cometes), enters "
"i booleans (amb valors de <quote>TRUE/FALSE</quote>)."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:41
msgid ""
"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
"(<quote>;</quote>).  Inline comments are not supported."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:47
msgid ""
"All sections can have an optional <replaceable>description</replaceable> "
"parameter. Its function is only as a label for the section."
msgstr ""
"Totes les seccions poden tenir un paràmetre opcional de "
"<replaceable>descripció</replaceable>. Serveix només per etiquetar la secció."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:53
msgid ""
"<filename>sssd.conf</filename> must be a regular file, owned by root and "
"only root may read from or write to the file."
msgstr ""
"<filename>sssd.conf</filename> ha de ser un fitxer normal, amb propietat de "
"root i només l'usuari root ha de poder llegir o escriure a l'arxiu."

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:59
msgid "GENERAL OPTIONS"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:61
msgid "Following options are usable in more than one configuration sections."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:65
msgid "Options usable in all sections"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:69
msgid "debug_level (integer)"
msgstr "debug_level (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:73
msgid "debug_timestamps (bool)"
msgstr "debug_timestamps (bool)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:76
msgid ""
"Add a timestamp to the debug messages.  If journald is enabled for SSSD "
"debug logging this option is ignored."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:81 sssd.conf.5.xml:571 sssd.conf.5.xml:1014
#: sssd-ldap.5.xml:1625 sssd-ldap.5.xml:1722 sssd-ldap.5.xml:1784
#: sssd-ldap.5.xml:2273 sssd-ldap.5.xml:2338 sssd-ldap.5.xml:2356
#: sssd-ipa.5.xml:375 sssd-ipa.5.xml:410 sssd-ad.5.xml:166 sssd-ad.5.xml:250
#: sssd-ad.5.xml:695 sssd-ad.5.xml:784 sssd-krb5.5.xml:490
msgid "Default: true"
msgstr "Per defecte: true"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:86
msgid "debug_microseconds (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:89
msgid ""
"Add microseconds to the timestamp in debug messages.  If journald is enabled "
"for SSSD debug logging this option is ignored."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:94 sssd.conf.5.xml:968 sssd.conf.5.xml:2043
#: sssd-ldap.5.xml:692 sssd-ldap.5.xml:1499 sssd-ldap.5.xml:1518
#: sssd-ldap.5.xml:1694 sssd-ldap.5.xml:2060 sssd-ipa.5.xml:139
#: sssd-ipa.5.xml:205 sssd-ipa.5.xml:540 sssd-krb5.5.xml:257
#: sssd-krb5.5.xml:291 sssd-krb5.5.xml:462
msgid "Default: false"
msgstr "Per defecte: false"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:67 sssd.conf.5.xml:105 sssd-ldap.5.xml:2081
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:103
msgid "Options usable in SERVICE and DOMAIN sections"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:107
msgid "timeout (integer)"
msgstr "timeout (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:110
msgid ""
"Timeout in seconds between heartbeats for this service. This is used to "
"ensure that the process is alive and capable of answering requests."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:115 sssd-ldap.5.xml:1370
msgid "Default: 10"
msgstr "Per defecte: 10"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:125
msgid "SPECIAL SECTIONS"
msgstr "SECCIONS ESPECIALS"

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:128
msgid "The [sssd] section"
msgstr "La secció [sssd]"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
#: sssd.conf.5.xml:137 sssd.conf.5.xml:2127
msgid "Section parameters"
msgstr "Paràmetres de la secció"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:139
msgid "config_file_version (integer)"
msgstr "config_file_version (enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:142
msgid ""
"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
"version 2."
msgstr ""
"Indica quina és la sintaxi de l'arxiu de configuració. L'SSSD 0.6.0 i "
"posteriors fan servir la versió 2."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:148
msgid "services"
msgstr "serveis"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:151
msgid ""
"Comma separated list of services that are started when sssd itself starts."
msgstr ""
"Llista de serveis separats per comes que s'inicien quan s'inicia el propi "
"sssd."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:155
msgid ""
"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
"phrase> <phrase condition=\"with_ifp\">, ifp</phrase>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:165 sssd.conf.5.xml:387
msgid "reconnection_retries (integer)"
msgstr "reconnection_retries (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:168 sssd.conf.5.xml:390
msgid ""
"Number of times services should attempt to reconnect in the event of a Data "
"Provider crash or restart before they give up"
msgstr ""
"Nombre de vegades que els serveis haurien d'intentar reconnectar en cas de "
"caiguda del Proveïdor de Dades o reiniciar abans de donar-se per vençuts"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:173 sssd.conf.5.xml:395
msgid "Default: 3"
msgstr "Per defecte: 3"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:178
msgid "domains"
msgstr "dominis"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:181
msgid ""
"A domain is a database containing user information. SSSD can use more "
"domains at the same time, but at least one must be configured or SSSD won't "
"start.  This parameter described the list of domains in the order you want "
"them to be queried.  A domain name should only consist of alphanumeric ASCII "
"characters, dashes and underscores."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:193 sssd.conf.5.xml:1826
msgid "re_expression (string)"
msgstr "re_expression (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196
msgid ""
"Default regular expression that describes how to parse the string containing "
"user name and domain into these components."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:201
msgid ""
"Each domain can have an individual regular expression configured. For some "
"ID providers there are also default regular expressions.  See DOMAIN "
"SECTIONS for more info on these regular expressions."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:210 sssd.conf.5.xml:1877
msgid "full_name_format (string)"
msgstr "full_name_format (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:213 sssd.conf.5.xml:1880
msgid ""
"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
"manvolnum> </citerefentry>-compatible format that describes how to compose a "
"fully qualified name from user name and domain name components."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:224 sssd.conf.5.xml:1891
msgid "%1$s"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:225 sssd.conf.5.xml:1892
msgid "user name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:228 sssd.conf.5.xml:1895
msgid "%2$s"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:231 sssd.conf.5.xml:1898
msgid "domain name as specified in the SSSD config file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:237 sssd.conf.5.xml:1904
msgid "%3$s"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:240 sssd.conf.5.xml:1907
msgid ""
"domain flat name. Mostly usable for Active Directory domains, both directly "
"configured or discovered via IPA trusts."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:221 sssd.conf.5.xml:1888
msgid ""
"The following expansions are supported: <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:250
msgid ""
"Each domain can have an individual format string configured.  see DOMAIN "
"SECTIONS for more info on this option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:256
msgid "try_inotify (boolean)"
msgstr "try_inotify (booleà)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:259
msgid ""
"SSSD monitors the state of resolv.conf to identify when it needs to update "
"its internal DNS resolver. By default, we will attempt to use inotify for "
"this, and will fall back to polling resolv.conf every five seconds if "
"inotify cannot be used."
msgstr ""
"L'SSSD controla l'estat de resolv.conf per a identificar quan cal "
"actualitzar el seu traductor intern de DNS. Per defecte, s'intentarà "
"utilitzar inotify per a això i recaurà en sondejar el resolv.conf cada cinc "
"segons si inotify no es pot utilitzar."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:267
msgid ""
"There are some limited situations where it is preferred that we should skip "
"even trying to use inotify. In these rare cases, this option should be set "
"to 'false'"
msgstr ""
"Hi ha algunes situacions limitades on és preferit ometre fins i tot "
"d'intentar utilitzar inotify. En aquests casos rars, s'hauria d'establir "
"aquesta opció a 'false'"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:273
msgid ""
"Default: true on platforms where inotify is supported. False on other "
"platforms."
msgstr ""
"Per defecte: true en plataformes on està suportat inotify. Fals en altres "
"plataformes."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:277
msgid ""
"Note: this option will have no effect on platforms where inotify is "
"unavailable. On these platforms, polling will always be used."
msgstr ""
"Nota: aquesta opció no afectarà a plataformes on inotify no està disponible. "
"En aquestes plataformes, sempre s'utilitzarà el sondeig."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:284
msgid "krb5_rcache_dir (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:287
msgid ""
"Directory on the filesystem where SSSD should store Kerberos replay cache "
"files."
msgstr ""
"Directori al sistema de fitxers on el SSSD ha d'emmagatzemar els fitxers cau "
"de Kerberos"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:291
msgid ""
"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
"SSSD to let libkrb5 decide the appropriate location for the replay cache."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:297
msgid ""
"Default: Distribution-specific and specified at build-time. "
"(__LIBKRB5_DEFAULTS__ if not configured)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:304
#, fuzzy
#| msgid "skel_dir (string)"
msgid "user (string)"
msgstr "skel_dir (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:307
msgid ""
"The user to drop the privileges to where appropriate to avoid running as the "
"root user."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:312
msgid "Default: not set, process will run as root"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:317
msgid "default_domain_suffix (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:320
msgid ""
"This string will be used as a default domain name for all names without a "
"domain name component. The main use case is environments where the primary "
"domain is intended for managing host policies and all users are located in a "
"trusted domain.  The option allows those users to log in just with their "
"user name without giving a domain name as well."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:330
msgid ""
"Please note that if this option is set all users from the primary domain "
"have to use their fully qualified name, e.g. user@domain.name, to log in."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:336 sssd-ldap.5.xml:663 sssd-ldap.5.xml:1458
#: sssd-ldap.5.xml:1470 sssd-ldap.5.xml:1552 sssd-ad.5.xml:543
#: sssd-ad.5.xml:608 sssd-krb5.5.xml:401 include/ldap_id_mapping.xml:203
#: include/ldap_id_mapping.xml:214
msgid "Default: not set"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:341
msgid "override_space (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:344
msgid ""
"This parameter will replace spaces (space bar)  with the given character for "
"user and group names.  e.g. (_). User name &quot;john doe&quot; will be "
"&quot;john_doe&quot; This feature was added to help compatibility with shell "
"scripts that have difficulty handling spaces, due to the default field "
"separator in the shell."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:353
msgid ""
"Please note it is a configuration error to use a replacement character that "
"might be used in user or group names. If a name contains the replacement "
"character SSSD tries to return the unmodified name but in general the result "
"of a lookup is undefined."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:361
msgid "Default: not set (spaces will not be replaced)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:130
msgid ""
"Individual pieces of SSSD functionality are provided by special SSSD "
"services that are started and stopped together with SSSD.  The services are "
"managed by a special service frequently called <quote>monitor</quote>. The "
"<quote>[sssd]</quote> section is used to configure the monitor as well as "
"some other important options like the identity domains.  <placeholder type="
"\"variablelist\" id=\"0\"/>"
msgstr ""
"Parts concretes de la funcionalitat de l'SSSD les proveeixen serveis "
"especials que s'inicien i s'aturen juntament amb l'SSSD.  Els serveis es "
"gestionen amb un servei especial anomenat <quote>monitor</quote>. La secció "
"<quote>[sssd]</quote> s'utilitza per configurar el monitor així com altres "
"opcions importants com les identitats de dominies.  <placeholder type="
"\"variablelist\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:372
msgid "SERVICES SECTIONS"
msgstr "SECCIONS DE SERVEIS"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:374
msgid ""
"Settings that can be used to configure different services are described in "
"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
"section, for example, for NSS service, the section would be <quote>[nss]</"
"quote>"
msgstr ""
"Ajustos que es poden utilitzar per configurar diferents serveis que es "
"descriuen en aquesta secció. Han de residir a la secció [<replaceable>$Nom</"
"replaceable>], per exemple, per a servei NSS, la secció seria <quote>[nss]</"
"quote>"

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:381
msgid "General service configuration options"
msgstr "Opcions de configuració del servei general"

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:383
msgid "These options can be used to configure any service."
msgstr "Aquestes opcions es poden utilitzar per a configurar qualsevol servei."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:400
msgid "fd_limit"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:403
msgid ""
"This option specifies the maximum number of file descriptors that may be "
"opened at one time by this SSSD process. On systems where SSSD is granted "
"the CAP_SYS_RESOURCE capability, this will be an absolute setting. On "
"systems without this capability, the resulting value will be the lower value "
"of this or the limits.conf \"hard\" limit."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:412
msgid "Default: 8192 (or limits.conf \"hard\" limit)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:417
msgid "client_idle_timeout"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:420
msgid ""
"This option specifies the number of seconds that a client of an SSSD process "
"can hold onto a file descriptor without communicating on it. This value is "
"limited in order to avoid resource exhaustion on the system."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:427 sssd.conf.5.xml:443 sssd.conf.5.xml:475
#: sssd.conf.5.xml:702 sssd.conf.5.xml:888 sssd.conf.5.xml:1209
#: sssd-ldap.5.xml:1200
msgid "Default: 60"
msgstr "Per defecte: 60"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:432 sssd.conf.5.xml:1198
msgid "force_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:435 sssd.conf.5.xml:1201
msgid ""
"If a service is not responding to ping checks (see the <quote>timeout</"
"quote> option), it is first sent the SIGTERM signal that instructs it to "
"quit gracefully.  If the service does not terminate after "
"<quote>force_timeout</quote> seconds, the monitor will forcibly shut it down "
"by sending a SIGKILL signal."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:448
msgid "offline_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:451
msgid ""
"When SSSD switches to offline mode the amount of time before it tries to go "
"back online will increase based upon the time spent disconnected.  This "
"value is in seconds and calculated by the following:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:458
msgid "offline_timeout + random_offset"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:461
msgid ""
"The random offset can increment up to 30 seconds.  After each unsuccessful "
"attempt to go online, the new interval is recalculated by the following:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:466
msgid "new_interval = old_interval*2 + random_offset"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:469
msgid ""
"Note that the maximum length of each interval is currently limited to one "
"hour. If the calculated length of new_interval is greater than an hour, it "
"will be forced to one hour."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:484
msgid "NSS configuration options"
msgstr "Opcions de configuració d'NSS"

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:486
msgid ""
"These options can be used to configure the Name Service Switch (NSS) service."
msgstr ""
"Aquestes opcions es poden utilitzar per a configurar el servei de canvi de "
"servei de nom (NSS)."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:491
msgid "enum_cache_timeout (integer)"
msgstr "enum_cache_timeout (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:494
msgid ""
"How many seconds should nss_sss cache enumerations (requests for info about "
"all users)"
msgstr ""
"El número de segons que nss_sss emmagatzema a la meòria cau les enumeracions "
"(peticions d'informació sobre tots els usuaris)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:498
msgid "Default: 120"
msgstr "Per defecte: 120"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:503
msgid "entry_cache_nowait_percentage (integer)"
msgstr "entry_cache_nowait_percentage (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:506
msgid ""
"The entry cache can be set to automatically update entries in the background "
"if they are requested beyond a percentage of the entry_cache_timeout value "
"for the domain."
msgstr ""
"El valor de la memòria cau es pot establir per actualitzar a automàticament "
"les entrades en rerefons, si se sol·liciten més enllà d'un percentatge del "
"valor entry_cache_timeout per al domini."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:512
msgid ""
"For example, if the domain's entry_cache_timeout is set to 30s and "
"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
"after 15 seconds past the last cache update will be returned immediately, "
"but the SSSD will go and update the cache on its own, so that future "
"requests will not need to block waiting for a cache update."
msgstr ""
"Per exemple, si s'estableix entry_cache_timeout del domini a 30s i "
"entry_cache_nowait_percentage està establert a 50 (per cent), les entrades "
"que arriben després de 15 segons més enllà de l'última actualització de la "
"memòria cau es retornaran immediatament, però l'SSSD anirà actualitzant la "
"memòria cau pel seu propi compte, de manera que no caldrà bloquejar les "
"peticions que esperen per a una actualització de la memòria cau."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:522
msgid ""
"Valid values for this option are 0-99 and represent a percentage of the "
"entry_cache_timeout for each domain. For performance reasons, this "
"percentage will never reduce the nowait timeout to less than 10 seconds.  (0 "
"disables this feature)"
msgstr ""
"Els valors vàlids per a aquesta opció són 0-99 i representen un percentatge "
"de la entry_cache_timeout per a cada domini. Per raons de rendiment, aquest "
"percentatge mai reduirà el temps d'espera de nowait a menys de 10 segons.  "
"(0 desactiva aquesta característica)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:530
msgid "Default: 50"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:535
msgid "entry_negative_timeout (integer)"
msgstr "entry_negative_timeout (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:538
msgid ""
"Specifies for how many seconds nss_sss should cache negative cache hits "
"(that is, queries for invalid database entries, like nonexistent ones)  "
"before asking the back end again."
msgstr ""
"Especifica quants segons nss_sss hauria d'emmagatzemar els intents de la "
"memòria cau negatius (és a dir, consultes per a les entrades incorrectes de "
"la base de dades, com les inexistents) abans de preguntar al rerefons una "
"altra vegada."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:544 sssd.conf.5.xml:992
msgid "Default: 15"
msgstr "Per defecte: 15"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:549
msgid "filter_users, filter_groups (string)"
msgstr "filter_users, filter_groups (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:552
msgid ""
"Exclude certain users from being fetched from the sss NSS database. This is "
"particularly useful for system accounts. This option can also be set per-"
"domain or include fully-qualified names to filter only users from the "
"particular domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:559
msgid "Default: root"
msgstr "Per defecte: root"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:564
msgid "filter_users_in_groups (bool)"
msgstr "filter_users_in_groups (booleà)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:567
msgid ""
"If you want filtered user still be group members set this option to false."
msgstr ""
"Si voleu que els usuaris filtrats encara siguin membres del grup establiu "
"aquesta opció a false."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:578
msgid "fallback_homedir (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:581
msgid ""
"Set a default template for a user's home directory if one is not specified "
"explicitly by the domain's data provider."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:586
msgid ""
"The available values for this option are the same as for override_homedir."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><programlisting>
#: sssd.conf.5.xml:592
#, no-wrap
msgid ""
"fallback_homedir = /home/%u\n"
"                            "
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: sssd.conf.5.xml:590 include/override_homedir.xml:55
msgid "example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:596
msgid "Default: not set (no substitution for unset home directories)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:602
msgid "override_shell (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:605
msgid ""
"Override the login shell for all users. This option supersedes any other "
"shell options if it takes effect and can be set either in the [nss] section "
"or per-domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:611
msgid "Default: not set (SSSD will use the value retrieved from LDAP)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:617
msgid "allowed_shells (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:620
msgid ""
"Restrict user shell to one of the listed values. The order of evaluation is:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:623
msgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:627
msgid ""
"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
"quote>, use the value of the shell_fallback parameter."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:632
msgid ""
"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
"shells</quote>, a nologin shell is used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:637
#, fuzzy
#| msgid "These options can be used to configure any service."
msgid "The wildcard (*) can be used to allow any shell."
msgstr "Aquestes opcions es poden utilitzar per a configurar qualsevol servei."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:640
msgid ""
"The (*) is useful if you want to use shell_fallback in case that user's "
"shell is not in <quote>/etc/shells</quote> and maintaining list of all "
"allowed shells in allowed_shells would be to much overhead."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:647
msgid "An empty string for shell is passed as-is to libc."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:650
msgid ""
"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
"that a restart of the SSSD is required in case a new shell is installed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:654
msgid "Default: Not set. The user shell is automatically used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:659
msgid "vetoed_shells (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:662
msgid "Replace any instance of these shells with the shell_fallback"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:667
msgid "shell_fallback (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:670
msgid ""
"The default shell to use if an allowed shell is not installed on the machine."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:674
msgid "Default: /bin/sh"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:679
msgid "default_shell"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:682
msgid ""
"The default shell to use if the provider does not return one during lookup. "
"This option can be specified globally in the [nss] section or per-domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:688
msgid ""
"Default: not set (Return NULL if no shell is specified and rely on libc to "
"substitute something sensible when necessary, usually /bin/sh)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:695 sssd.conf.5.xml:881
msgid "get_domains_timeout (int)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:698 sssd.conf.5.xml:884
msgid ""
"Specifies time in seconds for which the list of subdomains will be "
"considered valid."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:707
msgid "memcache_timeout (int)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:710
msgid ""
"Specifies time in seconds for which records in the in-memory cache will be "
"valid"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:714 sssd-ldap.5.xml:706
msgid "Default: 300"
msgstr "Per defecte: 300"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.conf.5.xml:719 sssd-ifp.5.xml:74
msgid "user_attributes (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:722
msgid ""
"Some of the additional NSS responder requests can return more attributes "
"than just the POSIX ones defined by the NSS interface. The list of "
"attributes is controlled by this option. It is handle the same way as the "
"<quote>user_attributes</quote> option of the InfoPipe responder (see "
"<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> for details) but with no default values."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:735
msgid ""
"To make configuration more easy the NSS responder will check the InfoPipe "
"option if it is not set for the NSS responder."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:740
msgid "Default: not set, fallback to InfoPipe option"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:747
msgid "PAM configuration options"
msgstr "Opcions de configuració de PAM"

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:749
msgid ""
"These options can be used to configure the Pluggable Authentication Module "
"(PAM) service."
msgstr ""
"Aquestes opcions s'utilitzen per configurar el servei de Pluggable "
"Authentication Module (PAM)."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:754
msgid "offline_credentials_expiration (integer)"
msgstr "offline_credentials_expiration (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:757
msgid ""
"If the authentication provider is offline, how long should we allow cached "
"logins (in days since the last successful online login)."
msgstr ""
"Si el proveïdor d'autenticació està fora de línia, quant de temps s'haurien "
"de permetre inicis de sessió de la memòria cau (en dies des de l'últim inici "
"de sessió)."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:762 sssd.conf.5.xml:775
msgid "Default: 0 (No limit)"
msgstr "Per defecte: 0 (sense límit)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:768
msgid "offline_failed_login_attempts (integer)"
msgstr "offline_failed_login_attempts (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:771
msgid ""
"If the authentication provider is offline, how many failed login attempts "
"are allowed."
msgstr ""
"Si el proveïdor d'autenticació està fora de línia, quants intents d'accés "
"fallits es permet."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:781
msgid "offline_failed_login_delay (integer)"
msgstr "offline_failed_login_delay (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:784
msgid ""
"The time in minutes which has to pass after offline_failed_login_attempts "
"has been reached before a new login attempt is possible."
msgstr ""
"El temps en minuts que ha de passar després que s'ha assolit "
"offline_failed_login_attempts abans que un nou intent de connexió sigui "
"possible."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:789
msgid ""
"If set to 0 the user cannot authenticate offline if "
"offline_failed_login_attempts has been reached. Only a successful online "
"authentication can enable offline authentication again."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:795 sssd.conf.5.xml:848
msgid "Default: 5"
msgstr "Per defecte: 5"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:801
msgid "pam_verbosity (integer)"
msgstr "pam_verbosity (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:804
msgid ""
"Controls what kind of messages are shown to the user during authentication. "
"The higher the number to more messages are displayed."
msgstr ""
"Controla quin tipus de missatges es mostren a l'usuari durant la "
"autenticació. Com més gran sigui el nombre més missatges es mostren."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:809
msgid "Currently sssd supports the following values:"
msgstr "L'Sssd suporta actualment els següents valors:"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:812
msgid "<emphasis>0</emphasis>: do not show any message"
msgstr "<emphasis>0</emphasis>: no mostris cap missatge"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:815
msgid "<emphasis>1</emphasis>: show only important messages"
msgstr "<emphasis>1</emphasis>: Mostra només missatges importants"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:819
msgid "<emphasis>2</emphasis>: show informational messages"
msgstr "<emphasis>2</emphasis>: Mostra missatges informatius"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:822
msgid "<emphasis>3</emphasis>: show all messages and debug information"
msgstr ""
"<emphasis>3</emphasis>: Mostra tots els missatges i informació de depuració"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:826 sssd.8.xml:63
msgid "Default: 1"
msgstr "Per defecte: 1"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:831
msgid "pam_id_timeout (integer)"
msgstr "pam_id_timeout (Enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:834
msgid ""
"For any PAM request while SSSD is online, the SSSD will attempt to "
"immediately update the cached identity information for the user in order to "
"ensure that authentication takes place with the latest information."
msgstr ""
"Per a qualsevol petició de PAM mentre és en línia, l'SSSD intentarà "
"actualitzar immediatament la informació d'identitat en memòria cau per a "
"l'usuari per tal de garantir que l'autenticació es porta a terme amb "
"l'última informació."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:840
msgid ""
"A complete PAM conversation may perform multiple PAM requests, such as "
"account management and session opening. This option controls (on a per-"
"client-application basis) how long (in seconds) we can cache the identity "
"information to avoid excessive round-trips to the identity provider."
msgstr ""
"Una conversa completa de PAM pot realitzar múltiples peticions de PAM, com "
"ara la gestió del compte i la sessió d'inici. Aquesta opció controla (en "
"base a aplicació per client) quant de temps (en segons) es pot emmagatzemar "
"en memòria cau la informació d'identitat per evitar excessives peticions al "
"proveïdor d'identitat."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:854
msgid "pam_pwd_expiration_warning (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:857 sssd.conf.5.xml:1390
msgid "Display a warning N days before the password expires."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:860
msgid ""
"Please note that the backend server has to provide information about the "
"expiration time of the password.  If this information is missing, sssd "
"cannot display a warning."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:866 sssd.conf.5.xml:1393
msgid ""
"If zero is set, then this filter is not applied, i.e. if the expiration "
"warning was received from backend server, it will automatically be displayed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:871
msgid ""
"This setting can be overridden by setting <emphasis>pwd_expiration_warning</"
"emphasis> for a particular domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:876 sssd.8.xml:79
msgid "Default: 0"
msgstr "Per defecte: 0"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:893
msgid "pam_trusted_users (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:896
msgid ""
"Specifies the comma-separated list of UID values or user names that are "
"allowed to access the PAM responder. User names are resolved to UIDs at "
"startup."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:902
msgid "Default: all (All users are allowed to access the PAM responder)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:906
msgid ""
"Please note that UID 0 is always allowed to access the PAM responder even in "
"case it is not in the pam_trusted_users list."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:913
msgid "pam_public_domains (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:916
msgid ""
"Specifies the comma-separated list of domain names that are accessible even "
"to untrusted users."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:920
msgid "Two special values for pam_public_domains option are defined:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:924
msgid ""
"all (Untrusted users are allowed to access all domains in PAM responder.)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:928
msgid ""
"none (Untrusted users are not allowed to access any domains PAM in "
"responder.)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:932 sssd.conf.5.xml:1192 sssd-ldap.5.xml:1753
msgid "Default: none"
msgstr "Per defecte: none"

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:941
msgid "SUDO configuration options"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:943
msgid ""
"These options can be used to configure the sudo service.  The detailed "
"instructions for configuration of <citerefentry> <refentrytitle>sudo</"
"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to work with "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry> are in the manual page <citerefentry> <refentrytitle>sssd-"
"sudo</refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:960
msgid "sudo_timed (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:963
msgid ""
"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
"that implement time-dependent sudoers entries."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:976
msgid "AUTOFS configuration options"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:978
msgid "These options can be used to configure the autofs service."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:982
msgid "autofs_negative_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:985
msgid ""
"Specifies for how many seconds should the autofs responder negative cache "
"hits (that is, queries for invalid map entries, like nonexistent ones) "
"before asking the back end again."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:1001
msgid "SSH configuration options"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:1003
msgid "These options can be used to configure the SSH service."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1007
msgid "ssh_hash_known_hosts (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1010
msgid ""
"Whether or not to hash host names and addresses in the managed known_hosts "
"file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1019
msgid "ssh_known_hosts_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1022
msgid ""
"How many seconds to keep a host in the managed known_hosts file after its "
"host keys were requested."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1026
msgid "Default: 180"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:1034
msgid "PAC responder configuration options"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:1036
msgid ""
"The PAC responder works together with the authorization data plugin for MIT "
"Kerberos sssd_pac_plugin.so and a sub-domain provider. The plugin sends the "
"PAC data during a GSSAPI authentication to the PAC responder. The sub-domain "
"provider collects domain SID and ID ranges of the domain the client is "
"joined to and of remote trusted domains from the local domain controller.  "
"If the PAC is decoded and evaluated some of the following operations are "
"done:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
#: sssd.conf.5.xml:1045
msgid ""
"If the remote user does not exist in the cache, it is created. The uid is "
"determined with the help of the SID, trusted domains will have UPGs and the "
"gid will have the same value as the uid. The home directory is set based on "
"the subdomain_homedir parameter. The shell will be empty by default, i.e. "
"the system defaults are used, but can be overwritten with the default_shell "
"parameter."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
#: sssd.conf.5.xml:1053
msgid ""
"If there are SIDs of groups from domains sssd knows about, the user will be "
"added to those groups."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:1059
msgid "These options can be used to configure the PAC responder."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1063 sssd-ifp.5.xml:50
msgid "allowed_uids (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1066
msgid ""
"Specifies the comma-separated list of UID values or user names that are "
"allowed to access the PAC responder. User names are resolved to UIDs at "
"startup."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1072
msgid "Default: 0 (only the root user is allowed to access the PAC responder)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1076
msgid ""
"Please note that although the UID 0 is used as the default it will be "
"overwritten with this option. If you still want to allow the root user to "
"access the PAC responder, which would be the typical case, you have to add 0 "
"to the list of allowed UIDs as well."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:1090
msgid "DOMAIN SECTIONS"
msgstr "SECCIONS DE DOMINI"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1097
msgid "min_id,max_id (integer)"
msgstr "min_id, max_id (Enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1100
msgid ""
"UID and GID limits for the domain. If a domain contains an entry that is "
"outside these limits, it is ignored."
msgstr ""
"Els límits UID i GID per al domini. Si un domini conté una entrada que està "
"fora d'aquests límits, s'ignora."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1105
msgid ""
"For users, this affects the primary GID limit. The user will not be returned "
"to NSS if either the UID or the primary GID is outside the range. For non-"
"primary group memberships, those that are in range will be reported as "
"expected."
msgstr ""
"Per a usuaris, això afecta el límit del GID primari. L'usuari no es "
"retornarà a l'NSS si l'UID o el GID primari és fora de l'interval. Per als "
"membres dels grups secundaris, els que estan dins l'interval es comunicaran "
"com s'esperava."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1112
msgid ""
"These ID limits affect even saving entries to cache, not only returning them "
"by name or ID."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1116
msgid "Default: 1 for min_id, 0 (no limit) for max_id"
msgstr "Per defecte: 1 per a min_id, 0 (sense límit) per a max_id"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1122
msgid "enumerate (bool)"
msgstr "enumerate (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1125
msgid ""
"Determines if a domain can be enumerated. This parameter can have one of the "
"following values:"
msgstr ""
"Determina si un domini pot ser enumerat. Aquest paràmetre pot tenir un dels "
"valors següents:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1129
msgid "TRUE = Users and groups are enumerated"
msgstr "TRUE = Els usuaris i grups s'enumeren"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1132
msgid "FALSE = No enumerations for this domain"
msgstr "FALSE = Cap enumeració per a aquest domini"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1135 sssd.conf.5.xml:1367 sssd.conf.5.xml:1476
#: sssd.conf.5.xml:1493
msgid "Default: FALSE"
msgstr "Per defecte: FALSE"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1138
msgid ""
"Note: Enabling enumeration has a moderate performance impact on SSSD while "
"enumeration is running. It may take up to several minutes after SSSD startup "
"to fully complete enumerations.  During this time, individual requests for "
"information will go directly to LDAP, though it may be slow, due to the "
"heavy enumeration processing. Saving a large number of entries to cache "
"after the enumeration completes might also be CPU intensive as the "
"memberships have to be recomputed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1151
msgid ""
"While the first enumeration is running, requests for the complete user or "
"group lists may return no results until it completes."
msgstr ""
"Mentre s'està executant la primera enumeració, les peticions de llistes "
"completes d'usuaris o grups poden no retornar cap resultat fins que aquest "
"finalitzi."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1156
msgid ""
"Further, enabling enumeration may increase the time necessary to detect "
"network disconnection, as longer timeouts are required to ensure that "
"enumeration lookups are completed successfully.  For more information, refer "
"to the man pages for the specific id_provider in use."
msgstr ""
"A més a més, permetre l'enumeració pot augmentar el temps necessari detectar "
"desconnexions de xarxa, ja que temps d'espera més llargs són necessaris per "
"assegurar-se que les cerques de l'enumeració s'han completat amb èxit.  Per "
"a més informació, aneu a les pàgines de manual de l'id_provider específic en "
"ús."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1164
msgid ""
"For the reasons cited above, enabling enumeration is not recommended, "
"especially in large environments."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1172
msgid "subdomain_enumerate (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1179
msgid "all"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1180
msgid "All discovered trusted domains will be enumerated"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1183
msgid "none"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1184
msgid "No discovered trusted domains will be enumerated"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1175
msgid ""
"Whether any of autodetected trusted domains should be enumerated. The "
"supported values are: <placeholder type=\"variablelist\" id=\"0\"/> "
"Optionally, a list of one or more domain names can enable enumeration just "
"for these trusted domains."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1215
msgid "entry_cache_timeout (integer)"
msgstr "entry_cache_timeout (Enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1218
msgid ""
"How many seconds should nss_sss consider entries valid before asking the "
"backend again"
msgstr ""
"Quants segons l'nss_sss hauria de considerar les entrades vàlides abans de "
"demanar al rerefons una altra vegada"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1222
msgid ""
"The cache expiration timestamps are stored as attributes of individual "
"objects in the cache. Therefore, changing the cache timeout only has effect "
"for newly added or expired entries.  You should run the <citerefentry> "
"<refentrytitle>sss_cache</refentrytitle> <manvolnum>8</manvolnum> </"
"citerefentry> tool in order to force refresh of entries that have already "
"been cached."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1235
msgid "Default: 5400"
msgstr "Per defecte: 5400"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1241
msgid "entry_cache_user_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1244
msgid ""
"How many seconds should nss_sss consider user entries valid before asking "
"the backend again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1248 sssd.conf.5.xml:1261 sssd.conf.5.xml:1274
#: sssd.conf.5.xml:1287 sssd.conf.5.xml:1300 sssd.conf.5.xml:1314
#: sssd.conf.5.xml:1328
msgid "Default: entry_cache_timeout"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1254
msgid "entry_cache_group_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1257
msgid ""
"How many seconds should nss_sss consider group entries valid before asking "
"the backend again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1267
msgid "entry_cache_netgroup_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1270
msgid ""
"How many seconds should nss_sss consider netgroup entries valid before "
"asking the backend again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1280
msgid "entry_cache_service_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1283
msgid ""
"How many seconds should nss_sss consider service entries valid before asking "
"the backend again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1293
msgid "entry_cache_sudo_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1296
msgid ""
"How many seconds should sudo consider rules valid before asking the backend "
"again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1306
msgid "entry_cache_autofs_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1309
msgid ""
"How many seconds should the autofs service consider automounter maps valid "
"before asking the backend again"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1320
msgid "entry_cache_ssh_host_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1323
msgid ""
"How many seconds to keep a host ssh key after refresh. IE how long to cache "
"the host key for."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1334
msgid "refresh_expired_interval (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1337
msgid ""
"Specifies how many seconds SSSD has to wait before triggering a background "
"refresh task which will refresh all expired or nearly expired records."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1342
msgid "Currently only refreshing expired netgroups is supported."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1346
msgid "You can consider setting this value to 3/4 * entry_cache_timeout."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1350 sssd-ipa.5.xml:221
msgid "Default: 0 (disabled)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1356
msgid "cache_credentials (bool)"
msgstr "cache_credentials (bool)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1359
msgid "Determines if user credentials are also cached in the local LDB cache"
msgstr ""
"Determina si les credencials d'usuari també són emmagatzemades en la memòria "
"cau local de LDB"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1363
msgid "User credentials are stored in a SHA512 hash, not in plaintext"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1372
msgid "account_cache_expiration (integer)"
msgstr "account_cache_expiration (Enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1375
msgid ""
"Number of days entries are left in cache after last successful login before "
"being removed during a cleanup of the cache. 0 means keep forever.  The "
"value of this parameter must be greater than or equal to "
"offline_credentials_expiration."
msgstr ""
"Nombre de dies que les entrades es queden a la memòria cau després del "
"darrer inici de sessió vàlid abans de ser eliminat durant una neteja de la "
"memòria cau. 0 significa mantenir per sempre.  El valor d'aquest paràmetre "
"ha de ser superior o igual a offline_credentials_expiration."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1382
msgid "Default: 0 (unlimited)"
msgstr "Per defecte: 0 (sense límit)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1387
msgid "pwd_expiration_warning (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1398
msgid ""
"Please note that the backend server has to provide information about the "
"expiration time of the password.  If this information is missing, sssd "
"cannot display a warning. Also an auth provider has to be configured for the "
"backend."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1405
msgid "Default: 7 (Kerberos), 0 (LDAP)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1411
msgid "id_provider (string)"
msgstr "id_provider (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1414
msgid ""
"The identification provider used for the domain.  Supported ID providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1418
msgid "<quote>proxy</quote>: Support a legacy NSS provider"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1421 sssd.conf.5.xml:1539
msgid "<quote>local</quote>: SSSD internal provider for local users"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1425
msgid ""
"<quote>ldap</quote>: LDAP provider. See <citerefentry> <refentrytitle>sssd-"
"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more "
"information on configuring LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1433 sssd.conf.5.xml:1519 sssd.conf.5.xml:1574
#: sssd.conf.5.xml:1627
msgid ""
"<quote>ipa</quote>: FreeIPA and Red Hat Enterprise Identity Management "
"provider. See <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
"FreeIPA."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1442 sssd.conf.5.xml:1528 sssd.conf.5.xml:1583
#: sssd.conf.5.xml:1636
msgid ""
"<quote>ad</quote>: Active Directory provider. See <citerefentry> "
"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring Active Directory."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1453
msgid "use_fully_qualified_names (bool)"
msgstr "use_fully_qualified_names (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1456
msgid ""
"Use the full name and domain (as formatted by the domain's full_name_format) "
"as the user's login name reported to NSS."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1461
msgid ""
"If set to TRUE, all requests to this domain must use fully qualified names. "
"For example, if used in LOCAL domain that contains a \"test\" user, "
"<command>getent passwd test</command> wouldn't find the user while "
"<command>getent passwd test@LOCAL</command> would."
msgstr ""
"Si s'estableix a TRUE, totes les peticions a aquest domini han d'utilitzar "
"noms de domini qualificats. Per exemples, si s'utilitza a un domini LOCAL "
"que conté un usuari \"test\", <command>getent passwd test</command> no "
"trobaria l'usuari mentre que  <command>getent passwd test@LOCAL</command> si."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1469
msgid ""
"NOTE: This option has no effect on netgroup lookups due to their tendency to "
"include nested netgroups without qualified names. For netgroups, all domains "
"will be searched when an unqualified name is requested."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1481
msgid "ignore_group_members (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1484
msgid "Do not return group members for group lookups."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1487
msgid ""
"If set to TRUE, the group membership attribute is not requested from the "
"ldap server, and group members are not returned when processing group lookup "
"calls."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1498
msgid "auth_provider (string)"
msgstr "auth_provider (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1501
msgid ""
"The authentication provider used for the domain.  Supported auth providers "
"are:"
msgstr ""
"El proveïdor d'autenticació utilitzat per al domini.  Els proveïdors "
"d'autenticació suportats són:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1505 sssd.conf.5.xml:1567
msgid ""
"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring LDAP."
msgstr ""
"<quote>ldap</quote> per autenticació nativa LDAP. Vegeu "
"<citerefentry><refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> per a més informació sobre configuració d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1512
msgid ""
"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring Kerberos."
msgstr ""
"<quote>krb5</quote> per a l'autenticació Kerberos. Vegeu "
"<citerefentry><refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> per a més informació sobre configurar Kerberos."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1536
msgid ""
"<quote>proxy</quote> for relaying authentication to some other PAM target."
msgstr ""
"<quote>proxy</quote> per a la autenticació re-enviada a algun altre objectiu "
"de PAM."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1543
msgid "<quote>none</quote> disables authentication explicitly."
msgstr "<quote>none</quote> impossibilita l'autenticació explícitament."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1546
msgid ""
"Default: <quote>id_provider</quote> is used if it is set and can handle "
"authentication requests."
msgstr ""
"Per defecte: <quote>id_provider</quote> s'utilitza si s'ha establert i pot "
"gestionar les sol·licituds d'autenticació."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1552
msgid "access_provider (string)"
msgstr "access_provider (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1555
msgid ""
"The access control provider used for the domain.  There are two built-in "
"access providers (in addition to any included in installed backends)  "
"Internal special providers are:"
msgstr ""
"El proveïdor d'accés de control utilitzat per al domini.  Hi ha dos "
"proveïdors d'accés incorporats (a més de qualsevol dels rerefons "
"instal·lats) Els proveïdors especials interns són:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1561
msgid ""
"<quote>permit</quote> always allow access. It's the only permitted access "
"provider for a local domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1564
msgid "<quote>deny</quote> always deny access."
msgstr "<quote>deny</quote> sempre denega l'accés."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1591
msgid ""
"<quote>simple</quote> access control based on access or deny lists. See "
"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> for more information on configuring the simple "
"access module."
msgstr ""
"<quote>simple</quote> control d'accés basat en llistes d'acceptació o "
"denegació. Vegeu <citerefentry><refentrytitle>sssd-simple</refentrytitle> "
"<manvolnum>5</manvolnum></citerefentry> per a més informació sobre la "
"configuració del mòdul d'accés simple."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1598
msgid "Default: <quote>permit</quote>"
msgstr "Per defecte: <quote>permit</quote>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1603
msgid "chpass_provider (string)"
msgstr "chpass_provider (string)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1606
msgid ""
"The provider which should handle change password operations for the domain.  "
"Supported change password providers are:"
msgstr ""
"El proveïdor que hauria de gestionar les operacions de canvi contrasenya per "
"al domini.  Els proveïdors de canvi de contrasenya compatibles són:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1611
msgid ""
"<quote>ldap</quote> to change a password stored in a LDAP server.  See "
"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> for more information on configuring LDAP."
msgstr ""
"<quote>ldap</quote> per canviar una contrasenya emmagatzemada en un servidor "
"LDAP.  Vegeu <citerefentry><refentrytitle>sssd-ldap</refentrytitle> "
"<manvolnum>5</manvolnum></citerefentry> per a més informació sobre "
"configuració d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1619
msgid ""
"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring Kerberos."
msgstr ""
"<quote>krb5</quote> per canviar la contrasenya Kerberos. Vegeu "
"<citerefentry><refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> per a més informació sobre configurar Kerberos."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1644
msgid ""
"<quote>proxy</quote> for relaying password changes to some other PAM target."
msgstr ""
"<quote>proxy</quote> per al canvi de contrasenya re-enviat a algun altre "
"objectiu de PAM."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1648
msgid "<quote>none</quote> disallows password changes explicitly."
msgstr "<quote>none</quote> rebutja els canvis de contrasenya explícitament."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1651
msgid ""
"Default: <quote>auth_provider</quote> is used if it is set and can handle "
"change password requests."
msgstr ""
"Per defecte: <quote>auth_provider</quote> s'utilitza si s'ha establert i pot "
"gestionar peticions de canvi de contrasenya."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1658
msgid "sudo_provider (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1661
msgid "The SUDO provider used for the domain.  Supported SUDO providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1665
msgid ""
"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1673
msgid ""
"<quote>ipa</quote> the same as <quote>ldap</quote> but with IPA default "
"settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1677
msgid ""
"<quote>ad</quote> the same as <quote>ldap</quote> but with AD default "
"settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1681
msgid "<quote>none</quote> disables SUDO explicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1684 sssd.conf.5.xml:1762 sssd.conf.5.xml:1794
#: sssd.conf.5.xml:1819
msgid "Default: The value of <quote>id_provider</quote> is used if it is set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1688
msgid ""
"The detailed instructions for configuration of sudo_provider are in the "
"manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry>.  There are many configuration "
"options that can be used to adjust the behavior. Please refer to "
"\"ldap_sudo_*\" in <citerefentry> <refentrytitle>sssd-ldap</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1705
msgid "selinux_provider (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1708
msgid ""
"The provider which should handle loading of selinux settings. Note that this "
"provider will be called right after access provider ends.  Supported selinux "
"providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1714
msgid ""
"<quote>ipa</quote> to load selinux settings from an IPA server. See "
"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> for more information on configuring IPA."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1722
msgid "<quote>none</quote> disallows fetching selinux settings explicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1725
msgid ""
"Default: <quote>id_provider</quote> is used if it is set and can handle "
"selinux loading requests."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1731
msgid "subdomains_provider (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1734
msgid ""
"The provider which should handle fetching of subdomains. This value should "
"be always the same as id_provider.  Supported subdomain providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1740
msgid ""
"<quote>ipa</quote> to load a list of subdomains from an IPA server. See "
"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> for more information on configuring IPA."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1749
msgid ""
"<quote>ad</quote> to load a list of subdomains from an Active Directory "
"server. See <citerefentry> <refentrytitle>sssd-ad</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
"the AD provider."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1758
msgid "<quote>none</quote> disallows fetching subdomains explicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1769
msgid "autofs_provider (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1772
msgid ""
"The autofs provider used for the domain.  Supported autofs providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1776
msgid ""
"<quote>ldap</quote> to load maps stored in LDAP. See <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1783
msgid ""
"<quote>ipa</quote> to load maps stored in an IPA server. See <citerefentry> "
"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more information on configuring IPA."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1791
msgid "<quote>none</quote> disables autofs explicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1801
msgid "hostid_provider (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1804
msgid ""
"The provider used for retrieving host identity information.  Supported "
"hostid providers are:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1808
msgid ""
"<quote>ipa</quote> to load host identity stored in an IPA server. See "
"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> for more information on configuring IPA."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1816
msgid "<quote>none</quote> disables hostid explicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1829
msgid ""
"Regular expression for this domain that describes how to parse the string "
"containing user name and domain into these components.  The \"domain\" can "
"match either the SSSD configuration domain name, or, in the case of IPA "
"trust subdomains and Active Directory domains, the flat (NetBIOS) name of "
"the domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1838
msgid ""
"Default for the AD and IPA provider: <quote>(((?P&lt;domain&gt;[^\\\\]+)\\"
"\\(?P&lt;name&gt;.+$))|((?P&lt;name&gt;[^@]+)@(?P&lt;domain&gt;.+$))|(^(?"
"P&lt;name&gt;[^@\\\\]+)$))</quote> which allows three different styles for "
"user names:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd.conf.5.xml:1843
msgid "username"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd.conf.5.xml:1846
msgid "username@domain.name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd.conf.5.xml:1849
msgid "domain\\username"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1852
msgid ""
"While the first two correspond to the general default the third one is "
"introduced to allow easy integration of users from Windows domains."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1857
msgid ""
"Default: <quote>(?P&lt;name&gt;[^@]+)@?(?P&lt;domain&gt;[^@]*$)</quote> "
"which translates to \"the name is everything up to the <quote>@</quote> "
"sign, the domain everything after that\""
msgstr ""
"Per defecte: <quote>(?P&lt;nom&gt;[^@]+)@?(?P&lt;domini&gt;[^@]*$)</quote> "
"que es tradueix per \"el nom és qualsevol cosa fins el símbol <quote>@</"
"quote> , el domini tot el que ve després\""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1863
msgid ""
"PLEASE NOTE: the support for non-unique named subpatterns is not available "
"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
"version 7 or higher can support non-unique named subpatterns."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1870
msgid ""
"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
"P&lt;name&gt;) to label subpatterns."
msgstr ""
"ATENCIÓ SI US PLAU: una versió més antiga de libpcre només suporta la "
"sintaxi Python (?P &lt;name&gt;) a l'etiqueta subpatterns."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1917
msgid "Default: <quote>%1$s@%2$s</quote>."
msgstr "Per defecte: <quote>%1$s@%2$s</quote>."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1923
msgid "lookup_family_order (string)"
msgstr "lookup_family_order (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1926
msgid ""
"Provides the ability to select preferred address family to use when "
"performing DNS lookups."
msgstr ""
"Proporciona la capacitat de seleccionar la família d'adreces preferida en "
"realitzar cerques de DNS."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1930
msgid "Supported values:"
msgstr "Valors admesos:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1933
msgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
msgstr "ipv4_first: Intenta resoldre l'adreça IPv4, si falla, intenta IPv6"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1936
msgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
msgstr "ipv4_only: Intenta resoldre només noms màquina a adreces IPv4."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1939
msgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
msgstr "ipv6_first: Intenta resoldre l'adreça IPv6, si falla, intenta IPv4"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1942
msgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
msgstr "ipv6_only: Intenta resoldre només noms màquina a adreces IPv6."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1945
msgid "Default: ipv4_first"
msgstr "Per defecte: ipv4_first"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1951
msgid "dns_resolver_timeout (integer)"
msgstr "dns_resolver_timeout (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1954
msgid ""
"Defines the amount of time (in seconds) to wait for a reply from the DNS "
"resolver before assuming that it is unreachable. If this timeout is reached, "
"the domain will continue to operate in offline mode."
msgstr ""
"Defineix la quantitat de temps (en segons) per esperar per una resposta de "
"la resolució de DNS abans d'assumir que és inaccessible. Si s'arriba a "
"aquest temps d'espera, el domini seguirà operant en el mode fora de línia."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1960 sssd-ldap.5.xml:1184 sssd-ldap.5.xml:1226
#: sssd-ldap.5.xml:1241 sssd-krb5.5.xml:239
msgid "Default: 6"
msgstr "Per defecte: 6"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1966
msgid "dns_discovery_domain (string)"
msgstr "dns_discovery_domain (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1969
msgid ""
"If service discovery is used in the back end, specifies the domain part of "
"the service discovery DNS query."
msgstr ""
"Si el servei de descobriment s'utilitza en el rerefons, especifica la part "
"del domini de la consulta DNS del servei de descobriment."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1973
msgid "Default: Use the domain part of machine's hostname"
msgstr "Per defecte: Utilitza la part del domini del nom de màquina"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1979
msgid "override_gid (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1982
msgid "Override the primary GID value with the one specified."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1988
msgid "case_sensitive (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1996
msgid "True"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1999
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2005
msgid "False"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2007
msgid "Case insensitive."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2011
msgid "Preserving"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2014
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
"protocol names) are still lowercased in the output."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1991
msgid ""
"Treat user and group names as case sensitive. At the moment, this option is "
"not supported in the local provider. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2026
msgid "Default: True (False for AD provider)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2032
msgid "proxy_fast_alias (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2035
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
"name was an alias. Setting this option to true would cause the SSSD to "
"perform the ID lookup from cache for performance reasons."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2049
msgid "subdomain_homedir (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2060
msgid "%F"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2061
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2052
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust.  See <emphasis>override_homedir</emphasis> for info about "
"possible values. In addition to those, the expansion below can only be used "
"with <emphasis>subdomain_homedir</emphasis>.  <placeholder type="
"\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2066
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2070
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2075
msgid "realmd_tags (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2078
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:1092
msgid ""
"These configuration options can be present in a domain configuration "
"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
"Aquestes opcions de configuració poden ser presents a una secció de "
"configuració de domini anomenada <quote>[domain/<replaceable>NAME</"
"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2091
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2094
msgid "The proxy target PAM proxies to."
msgstr "El servidor intermediari on re-envia PAM."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2097
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here."
msgstr ""
"Per defecte: No està establit per defecte, heu de prendre una configuració "
"de pam existent o crear-ne una de nova i afegir aquí el nom del servei."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2105
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2108
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
"for example _nss_files_getpwent."
msgstr ""
"El nom de la biblioteca NSS per utilitzar en els servidors intermediaris de "
"domini. Les funcions NSS buscades a la biblioteca tenen el format _nss_"
"$(libName)_$(function), per exemple _nss_files_getpwent."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:2087
msgid ""
"Options valid for proxy domains.  <placeholder type=\"variablelist\" id="
"\"0\"/>"
msgstr ""
"Opcions vàlides per a servidors intermediaris de domini.  <placeholder type="
"\"variablelist\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd.conf.5.xml:2120
msgid "The local domain section"
msgstr "La secció de domini local"

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd.conf.5.xml:2122
msgid ""
"This section contains settings for domain that stores users and groups in "
"SSSD native database, that is, a domain that uses "
"<replaceable>id_provider=local</replaceable>."
msgstr ""
"Aquesta secció conté paràmetres per a dominis que emmagatzemen els usuaris i "
"grups a la base de dades SSSD nadiu de, és a dir, un domini que utilitza "
"<replaceable>id_provider = local</replaceable>."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2129
msgid "default_shell (string)"
msgstr "default_shell (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2132
msgid "The default shell for users created with SSSD userspace tools."
msgstr ""
"L'intèrpret d'ordres per defecte per als usuaris creats amb eines SSSD "
"d'espai d'usuari."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2136
msgid "Default: <filename>/bin/bash</filename>"
msgstr "Per defecte: <filename>/bin/bash</filename>"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2141
msgid "base_directory (string)"
msgstr "base_directory (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2144
msgid ""
"The tools append the login name to <replaceable>base_directory</replaceable> "
"and use that as the home directory."
msgstr ""
"Les eines afegeixen el nom d'usuari a <replaceable>base_directory</"
"replaceable> i utilitzen això com el directori d'usuari."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2149
msgid "Default: <filename>/home</filename>"
msgstr "Per defecte: <filename>/home</filename>"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2154
msgid "create_homedir (bool)"
msgstr "create_homedir (booleà)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2157
msgid ""
"Indicate if a home directory should be created by default for new users.  "
"Can be overridden on command line."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2161 sssd.conf.5.xml:2173
msgid "Default: TRUE"
msgstr "Per defecte: TRUE"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2166
msgid "remove_homedir (bool)"
msgstr "remove_homedir (booleà)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2169
msgid ""
"Indicate if a home directory should be removed by default for deleted "
"users.  Can be overridden on command line."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2178
msgid "homedir_umask (integer)"
msgstr "homedir_umask (enter)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2181
msgid ""
"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
"on a newly created home directory."
msgstr ""
"Utilitzat per <citerefentry><refentrytitle>sss_useradd</refentrytitle> "
"<manvolnum>8</manvolnum></citerefentry> per especificar els permisos per "
"defecte en un directori personal acabat de crear."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2189
msgid "Default: 077"
msgstr "Per defecte: 077"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2194
msgid "skel_dir (string)"
msgstr "skel_dir (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2197
msgid ""
"The skeleton directory, which contains files and directories to be copied in "
"the user's home directory, when the home directory is created by "
"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
"manvolnum> </citerefentry>"
msgstr ""
"El directori d'esquelet que conté fitxers i directoris per copiar al "
"directori de personal, quan el directori personal és creat per "
"<citerefentry><refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
"manvolnum></citerefentry>"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2207
msgid "Default: <filename>/etc/skel</filename>"
msgstr "Per defecte: <filename>/etc/skel</filename>"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2212
msgid "mail_dir (string)"
msgstr "mail_dir (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2215
msgid ""
"The mail spool directory. This is needed to manipulate the mailbox when its "
"corresponding user account is modified or deleted.  If not specified, a "
"default value is used."
msgstr ""
"El directori de cua de correu. Això és necessari per manipular la bústia de "
"correu quan el compte d'usuari corresponent és modificat o suprimit.  Si no "
"s'especifica, s'utilitzarà un valor per defecte."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2222
msgid "Default: <filename>/var/mail</filename>"
msgstr "Per defecte: <filename>/var/correu</filename>"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2227
msgid "userdel_cmd (string)"
msgstr "userdel_cmd (cadena)"

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2230
msgid ""
"The command that is run after a user is removed.  The command us passed the "
"username of the user being removed as the first and only parameter. The "
"return code of the command is not taken into account."
msgstr ""
"L'ordre que s'executa després d'eliminar un usuari.  L'ordre passa el nom "
"d'usuari com el primer i únic paràmetre. El codi de retorn de l'ordre no es "
"té en compte."

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:2236
msgid "Default: None, no command is run"
msgstr "Per defecte: Cap, no s'executa cap comanda"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.conf.5.xml:2246 sssd-ldap.5.xml:2518 sssd-simple.5.xml:131
#: sssd-ipa.5.xml:715 sssd-ad.5.xml:821 sssd-krb5.5.xml:519
#: sss_rpcidmapd.5.xml:98
msgid "EXAMPLE"
msgstr "EXEMPLE"

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd.conf.5.xml:2252
#, no-wrap
msgid ""
"[sssd]\n"
"domains = LDAP\n"
"services = nss, pam\n"
"config_file_version = 2\n"
"\n"
"[nss]\n"
"filter_groups = root\n"
"filter_users = root\n"
"\n"
"[pam]\n"
"\n"
"[domain/LDAP]\n"
"id_provider = ldap\n"
"ldap_uri = ldap://ldap.example.com\n"
"ldap_search_base = dc=example,dc=com\n"
"\n"
"auth_provider = krb5\n"
"krb5_server = kerberos.example.com\n"
"krb5_realm = EXAMPLE.COM\n"
"cache_credentials = true\n"
"\n"
"min_id = 10000\n"
"max_id = 20000\n"
"enumerate = False\n"
msgstr ""
"[sssd]\n"
"domains = LDAP\n"
"services = nss, pam\n"
"config_file_version = 2\n"
"\n"
"[nss]\n"
"filter_groups = root\n"
"filter_users = root\n"
"\n"
"[pam]\n"
"\n"
"[domain/LDAP]\n"
"id_provider = ldap\n"
"ldap_uri = ldap://ldap.example.com\n"
"ldap_search_base = dc=example,dc=com\n"
"\n"
"auth_provider = krb5\n"
"krb5_server = kerberos.example.com\n"
"krb5_realm = EXAMPLE.COM\n"
"cache_credentials = true\n"
"\n"
"min_id = 10000\n"
"max_id = 20000\n"
"enumerate = False\n"
"\n"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.conf.5.xml:2248
msgid ""
"The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
"configuring domains for more details.  <placeholder type=\"programlisting\" "
"id=\"0\"/>"
msgstr ""
"El següent exemple mostra una configuració típica d'SSSD. No descriu la "
"configuració dels mateixos dominis - referiu-vos  a la documentació de "
"configuració de dominis per a més detalls.  <placeholder type="
"\"programlisting\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-ldap.5.xml:10 sssd-ldap.5.xml:16
msgid "sssd-ldap"
msgstr "sssd-ldap"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-ldap.5.xml:17
msgid "SSSD LDAP provider"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:23
msgid ""
"This manual page describes the configuration of LDAP domains for "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry>.  Refer to the <quote>FILE FORMAT</quote> section of the "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> manual page for detailed syntax information."
msgstr ""
"Aquesta pàgina del manual descriu la configuració de dominis LDAP per a "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry>. Consulteu la secció <quote>FORMAT DE FITXER</quote> de la "
"pàgina del manual <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry> per obtenir informació detallada de "
"la sintaxi."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:35
msgid "You can configure SSSD to use more than one LDAP domain."
msgstr "Podeu configurar SSSD per utilitzar més d'un domini d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:38
msgid ""
"LDAP back end supports id, auth, access and chpass providers. If you want to "
"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
"over an unencrypted channel.  If the LDAP server is used only as an identity "
"provider, an encrypted channel is not needed. Please refer to "
"<quote>ldap_access_filter</quote> config option for more information about "
"using LDAP as an access provider."
msgstr ""
"El rerefons LDAP suporta proveïdors d'identificació, autenticació, accés i "
"canvi de contrasenya. Si voleu autenticar contra un servidor LDAP s'exigeix "
"TLS/SSL o LDAPS. L'<command>sssd</command> <emphasis>no</emphasis> suporta "
"autenticació sobre un canal sense xifrar.  Si el servidor de LDAP s'utilitza "
"només com a un proveïdor d'identitats, no és necessari un canal xifrat. Si "
"us plau refereiu-vos a l'opció <quote>ldap_access_filter</quote> per a més "
"informació sobre l'ús d'LDAP com un proveïdor d'accés."

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:70 sssd-ad.5.xml:88
#: sssd-krb5.5.xml:63 sssd-ifp.5.xml:44
msgid "CONFIGURATION OPTIONS"
msgstr "OPCIONS DE CONFIGURACIÓ"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:60
msgid "ldap_uri, ldap_backup_uri (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:63
msgid ""
"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
"should connect in the order of preference. Refer to the <quote>FAILOVER</"
"quote> section for more information on failover and server redundancy.  If "
"neither option is specified, service discovery is enabled. For more "
"information, refer to the <quote>SERVICE DISCOVERY</quote> section."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:70
msgid "The format of the URI must match the format defined in RFC 2732:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:73
msgid "ldap[s]://&lt;host&gt;[:port]"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:76
msgid ""
"For explicit IPv6 addresses, &lt;host&gt; must be enclosed in brackets []"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:79
msgid "example: ldap://[fc00::126:25]:389"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:85
msgid "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:88
msgid ""
"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
"should connect in the order of preference to change the password of a user. "
"Refer to the <quote>FAILOVER</quote> section for more information on "
"failover and server redundancy."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:95
msgid "To enable service discovery ldap_chpass_dns_service_name must be set."
msgstr ""
"Per habilitar el servei descobriment s'ha d'establir "
"ldap_chpass_dns_service_name."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:99
msgid "Default: empty, i.e. ldap_uri is used."
msgstr "Per defecte: buit, és a dir, s'utilitza ldap_uri."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:105
msgid "ldap_search_base (string)"
msgstr "ldap_search_base (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:108
msgid "The default base DN to use for performing LDAP user operations."
msgstr ""
"El DN base per defecte a utilitzar per realitzar operacions d'usuari d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:112
msgid ""
"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
"syntax:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:116
msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:119
msgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
msgstr ""

#. type: Content of: <listitem><para>
#: sssd-ldap.5.xml:122 include/ldap_search_bases.xml:18
msgid ""
"The filter must be a valid LDAP search filter as specified by http://www."
"ietf.org/rfc/rfc2254.txt"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:126 sssd-ldap.5.xml:646 sssd-ad.5.xml:212
msgid "Examples:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:129
msgid ""
"ldap_search_base = dc=example,dc=com (which is equivalent to)  "
"ldap_search_base = dc=example,dc=com?subtree?"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:134
msgid ""
"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
"(host=thishost)?dc=example.com?subtree?"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:137
msgid ""
"Note: It is unsupported to have multiple search bases which reference "
"identically-named objects (for example, groups with the same name in two "
"different search bases). This will lead to unpredictable behavior on client "
"machines."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:144
msgid ""
"Default: If not set, the value of the defaultNamingContext or namingContexts "
"attribute from the RootDSE of the LDAP server is used. If "
"defaultNamingContext does not exist or has an empty value namingContexts is "
"used.  The namingContexts attribute must have a single value with the DN of "
"the search base of the LDAP server to make this work. Multiple values are "
"are not supported."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:158
msgid "ldap_schema (string)"
msgstr "ldap_schema (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:161
msgid ""
"Specifies the Schema Type in use on the target LDAP server.  Depending on "
"the selected schema, the default attribute names retrieved from the servers "
"may vary.  The way that some attributes are handled may also differ."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:168
msgid "Four schema types are currently supported:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ldap.5.xml:172
msgid "rfc2307"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ldap.5.xml:177
msgid "rfc2307bis"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ldap.5.xml:182
msgid "IPA"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ldap.5.xml:187
msgid "AD"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:193
msgid ""
"The main difference between these schema types is how group memberships are "
"recorded in the server.  With rfc2307, group members are listed by name in "
"the <emphasis>memberUid</emphasis> attribute.  With rfc2307bis and IPA, "
"group members are listed by DN and stored in the <emphasis>member</emphasis> "
"attribute.  The AD schema type sets the attributes to correspond with Active "
"Directory 2008r2 values."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:203
msgid "Default: rfc2307"
msgstr "Per defecte: rfc2307"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:209
msgid "ldap_default_bind_dn (string)"
msgstr "ldap_default_bind_dn (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:212
msgid "The default bind DN to use for performing LDAP operations."
msgstr ""
"El vincle DN per defecte per utilitzar en realitzar les operacions d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:219
msgid "ldap_default_authtok_type (string)"
msgstr "ldap_default_authtok_type (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:222
msgid "The type of the authentication token of the default bind DN."
msgstr "El tipus de testimoni d'autenticació del vincle DN per defecte."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:226
msgid "The two mechanisms currently supported are:"
msgstr "Els dos mecanismes suportats actualment són:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:229
msgid "password"
msgstr "contrasenya"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:232
msgid "obfuscated_password"
msgstr "obfuscated_password"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:235
msgid "Default: password"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:241
msgid "ldap_default_authtok (string)"
msgstr "ldap_default_authtok (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:244
msgid ""
"The authentication token of the default bind DN.  Only clear text passwords "
"are currently supported."
msgstr ""
"El testimoni de l'autenticació de l'omissió s'uneixen DN.  Només aclarir "
"text contrasenyes estan suportats actualment."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:251
msgid "ldap_user_object_class (string)"
msgstr "ldap_user_object_class (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:254
msgid "The object class of a user entry in LDAP."
msgstr "La classe d'objecte d'una entrada d'usuari a LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:257
msgid "Default: posixAccount"
msgstr "Per defecte: posixAccount"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:263
msgid "ldap_user_name (string)"
msgstr "ldap_user_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:266
msgid "The LDAP attribute that corresponds to the user's login name."
msgstr "L'atribut LDAP que correspon al nom de compte de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:270
msgid "Default: uid"
msgstr "Per defecte: uid"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:276
msgid "ldap_user_uid_number (string)"
msgstr "ldap_user_uid_number (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:279
msgid "The LDAP attribute that corresponds to the user's id."
msgstr ""
"L'atribut LDAP que correspon al númerdo de l'identificador de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:283
msgid "Default: uidNumber"
msgstr "Per defecte: uidNumber"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:289
msgid "ldap_user_gid_number (string)"
msgstr "ldap_user_gid_number (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:292
msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
"L'atribut LDAP que correspon a l'identificador del grup primari de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:296 sssd-ldap.5.xml:844
msgid "Default: gidNumber"
msgstr "Per defecte: gidNumber"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:302
msgid "ldap_user_gecos (string)"
msgstr "ldap_user_gecos (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:305
msgid "The LDAP attribute that corresponds to the user's gecos field."
msgstr "L'atribut LDAP que correspon al camp gecos de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:309
msgid "Default: gecos"
msgstr "Per defecte: gecos"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:315
msgid "ldap_user_home_directory (string)"
msgstr "ldap_user_home_directory (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:318
msgid "The LDAP attribute that contains the name of the user's home directory."
msgstr "L'atribut LDAP que conté el nom del directori personal de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:322
msgid "Default: homeDirectory"
msgstr "Per defecte: homeDirectory"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:328
msgid "ldap_user_shell (string)"
msgstr "ldap_user_shell (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:331
msgid "The LDAP attribute that contains the path to the user's default shell."
msgstr ""
"L'atribut LDAP que conté la ruta a l'intèrpret d'ordres per defecte de "
"l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:335
msgid "Default: loginShell"
msgstr "Per defecte: loginShell"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:341
#, fuzzy
#| msgid "ldap_user_uid_number (string)"
msgid "ldap_user_uuid (string)"
msgstr "ldap_user_uid_number (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:344
#, fuzzy
#| msgid ""
#| "The LDAP attribute that contains the name of the user's home directory."
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr "L'atribut LDAP que conté el nom del directori personal de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:348 sssd-ldap.5.xml:870
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:355
msgid "ldap_user_objectsid (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:358
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP user object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:363 sssd-ldap.5.xml:885
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:370
msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:373 sssd-ldap.5.xml:895 sssd-ldap.5.xml:1100
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
"L'atribut LDAP que conté la data i hora de l'última modificació de l'objecte "
"pare."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:377 sssd-ldap.5.xml:899 sssd-ldap.5.xml:1107
msgid "Default: modifyTimestamp"
msgstr "Per defecte: modifyTimestamp"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:383
msgid "ldap_user_shadow_last_change (string)"
msgstr "ldap_user_shadow_last_change (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:386
msgid ""
"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
"the last password change)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow, aquest paràmetre conté el nom d'un "
"atribut d'LDAP corresponent al seu homòleg "
"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (data de l'últim canvi de contrasenya)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:396
msgid "Default: shadowLastChange"
msgstr "Per defecte: shadowLastChange"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:402
msgid "ldap_user_shadow_min (string)"
msgstr "ldap_user_shadow_min (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:405
msgid ""
"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
"password age)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow, aquest paràmetre conté el nom d'un "
"atribut d'LDAP corresponent al seu homòleg "
"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (edat mínima de la contrasenya)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:414
msgid "Default: shadowMin"
msgstr "Per defecte: shadowMin"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:420
msgid "ldap_user_shadow_max (string)"
msgstr "ldap_user_shadow_max (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:423
msgid ""
"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
"password age)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow, aquest paràmetre conté el nom d'un "
"atribut d'LDAP corresponent al seu homòleg "
"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (edat màxima de la contrasenya)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:432
msgid "Default: shadowMax"
msgstr "Per defecte: shadowMax"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:438
msgid "ldap_user_shadow_warning (string)"
msgstr "ldap_user_shadow_warning (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:441
msgid ""
"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
"(password warning period)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow, aquest paràmetre conté el nom d'un "
"atribut d'LDAP corresponent al seu homòleg "
"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (període d'advertència de contrasenya)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:451
msgid "Default: shadowWarning"
msgstr "Per defecte: shadowWarning"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:457
msgid "ldap_user_shadow_inactive (string)"
msgstr "ldap_user_shadow_inactive (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:460
msgid ""
"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
"(password inactivity period)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow, aquest paràmetre conté el nom d'un "
"atribut d'LDAP corresponent al seu homòleg "
"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (període d'inactivitat de contrasenya)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:470
msgid "Default: shadowInactive"
msgstr "Per defecte: shadowInactive"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:476
msgid "ldap_user_shadow_expire (string)"
msgstr "ldap_user_shadow_expire (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:479
msgid ""
"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
"parameter contains the name of an LDAP attribute corresponding to its "
"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> counterpart (account expiration date)."
msgstr ""
"En utilitzar ldap_pwd_policy=shadow o ldap_account_expire_policy=shadow, "
"aquest paràmetre conté el nom d'un atribut d'LDAP corresponent al seu "
"homòleg <citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry> (data de caducitat del compte)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:489
msgid "Default: shadowExpire"
msgstr "Per defecte: shadowExpire"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:495
msgid "ldap_user_krb_last_pwd_change (string)"
msgstr "ldap_user_krb_last_pwd_change (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:498
msgid ""
"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
"an LDAP attribute storing the date and time of last password change in "
"kerberos."
msgstr ""
"En utilitzar ldap_pwd_policy=mit_kerberos, aquest paràmetre conté el nom "
"d'un atribut d'LDAP que emmagatzema la data i hora del darrer canvi de "
"contrasenya en kerberos."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:504
msgid "Default: krbLastPwdChange"
msgstr "Per defecte: krbLastPwdChange"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:510
msgid "ldap_user_krb_password_expiration (string)"
msgstr "ldap_user_krb_password_expiration (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:513
msgid ""
"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
"an LDAP attribute storing the date and time when current password expires."
msgstr ""
"En utilitzar ldap_pwd_policy=mit_kerberos, aquest paràmetre conté el nom "
"d'un atribut d'LDAP que emmagatzema la data i hora d'expiració de la "
"contrasenya actual."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:519
msgid "Default: krbPasswordExpiration"
msgstr "Per defecte: krbPasswordExpiration"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:525
msgid "ldap_user_ad_account_expires (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:528
msgid ""
"When using ldap_account_expire_policy=ad, this parameter contains the name "
"of an LDAP attribute storing the expiration time of the account."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:533
msgid "Default: accountExpires"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:539
msgid "ldap_user_ad_user_account_control (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:542
msgid ""
"When using ldap_account_expire_policy=ad, this parameter contains the name "
"of an LDAP attribute storing the user account control bit field."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:547
msgid "Default: userAccountControl"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:553
msgid "ldap_ns_account_lock (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:556
msgid ""
"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
"determines if access is allowed or not."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:561
msgid "Default: nsAccountLock"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:567
msgid "ldap_user_nds_login_disabled (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:570
msgid ""
"When using ldap_account_expire_policy=nds, this attribute determines if "
"access is allowed or not."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:574 sssd-ldap.5.xml:588
msgid "Default: loginDisabled"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:580
msgid "ldap_user_nds_login_expiration_time (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:583
msgid ""
"When using ldap_account_expire_policy=nds, this attribute determines until "
"which date access is granted."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:594
msgid "ldap_user_nds_login_allowed_time_map (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:597
msgid ""
"When using ldap_account_expire_policy=nds, this attribute determines the "
"hours of a day in a week when access is granted."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:602
msgid "Default: loginAllowedTimeMap"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:608
msgid "ldap_user_principal (string)"
msgstr "ldap_user_principal (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:611
msgid ""
"The LDAP attribute that contains the user's Kerberos User Principal Name "
"(UPN)."
msgstr ""
"L'atribut LDAP que conté el Nom Principal d'Usuari (UPN) de l'usuari de "
"Kerberos."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:615
msgid "Default: krbPrincipalName"
msgstr "Per defecte: krbPrincipalName"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:621
msgid "ldap_user_extra_attrs (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:624
msgid ""
"Comma-separated list of LDAP attributes that SSSD would fetch along with the "
"usual set of user attributes."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:629
msgid ""
"The list can either contain LDAP attribute names only, or colon-separated "
"tuples of SSSD cache attribute name and LDAP attribute name. In case only "
"LDAP attribute name is specified, the attribute is saved to the cache "
"verbatim.  Using a custom SSSD attribute name might be required by "
"environments that configure several SSSD domains with different LDAP schemas."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:639
msgid ""
"Please note that several attribute names are reserved by SSSD, notably the "
"<quote>name</quote> attribute. SSSD would report an error if any of the "
"reserved attribute names is used as an extra attribute name."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:649
msgid "ldap_user_extra_attrs = telephoneNumber"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:652
msgid ""
"Save the <quote>telephoneNumber</quote> attribute from LDAP as "
"<quote>telephoneNumber</quote> to the cache."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:656
msgid "ldap_user_extra_attrs = phone:telephoneNumber"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:659
msgid ""
"Save the <quote>telephoneNumber</quote> attribute from LDAP as <quote>phone</"
"quote> to the cache."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:669
msgid "ldap_user_ssh_public_key (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:672
msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:676
msgid "Default: sshPublicKey"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:682
msgid "ldap_force_upper_case_realm (boolean)"
msgstr "ldap_force_upper_case_realm (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:685
msgid ""
"Some directory servers, for example Active Directory, might deliver the "
"realm part of the UPN in lower case, which might cause the authentication to "
"fail. Set this option to a non-zero value if you want to use an upper-case "
"realm."
msgstr ""
"Alguns servidors de directori, per exemple Active Directory, podria entregar "
"la part de l'àmbit de l'UPN en minúscules, que podria provocar que "
"l'autenticació fallàs. Definiu aquesta opció a un valor diferent de zero si "
"voleu utilitzar un àmbit en majúscules."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:698
msgid "ldap_enumeration_refresh_timeout (integer)"
msgstr "ldap_enumeration_refresh_timeout (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:701
msgid ""
"Specifies how many seconds SSSD has to wait before refreshing its cache of "
"enumerated records."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:712
msgid "ldap_purge_cache_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:715
msgid ""
"Determine how often to check the cache for inactive entries (such as groups "
"with no members and users who have never logged in) and remove them to save "
"space."
msgstr ""
"Determina la freqüència en comprovar la memòria cau per a entrades inactives "
"(grups sense membres i usuaris que mai no han iniciat una sessió) i eliminar-"
"los per estalviar espai."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:721
msgid "Setting this option to zero will disable the cache cleanup operation."
msgstr "A zero, aquesta opció desactivarà l'operació de neteja de memòria cau."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:725
msgid "Default: 10800 (3 hours)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:731
msgid "ldap_user_fullname (string)"
msgstr "ldap_user_fullname (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:734
msgid "The LDAP attribute that corresponds to the user's full name."
msgstr "L'atribut LDAP que correspon al nom complet de l'usuari."

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:738 sssd-ldap.5.xml:831 sssd-ldap.5.xml:1058
#: sssd-ldap.5.xml:1132 sssd-ldap.5.xml:2102 sssd-ldap.5.xml:2441
#: sssd-ipa.5.xml:588
msgid "Default: cn"
msgstr "Per defecte: cn"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:744
msgid "ldap_user_member_of (string)"
msgstr "ldap_user_member_of (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:747
msgid "The LDAP attribute that lists the user's group memberships."
msgstr "L'atribut LDAP que llista la pertanença a grups de l'usuari."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:751
msgid "Default: memberOf"
msgstr "Per defecte: memberOf"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:757
msgid "ldap_user_authorized_service (string)"
msgstr "ldap_user_authorized_service (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:760
msgid ""
"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
"use the presence of the authorizedService attribute in the user's LDAP entry "
"to determine access privilege."
msgstr ""
"Si access_provider=ldap i ldap_access_order=authorized_service, l'SSSD farà "
"servir la presència de l'atribut authorizedService a l'entrada LDAP de "
"l'usuari per determinar els privilegis d'accés."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:767
msgid ""
"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
"explicit allow (svc) and finally for allow_all (*)."
msgstr ""
"Una denegació explícita (! svc) es resol en primer lloc. En segon lloc, "
"l'SSSD cerca autoritzacions explícites (svc) i, finalment, allow_all (*)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:772
msgid ""
"Please note that the ldap_access_order configuration option <emphasis>must</"
"emphasis> include <quote>authorized_service</quote> in order for the "
"ldap_user_authorized_service option to work."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:779
msgid "Default: authorizedService"
msgstr "Per defecte: authorizedService"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:785
msgid "ldap_user_authorized_host (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:788
msgid ""
"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
"presence of the host attribute in the user's LDAP entry to determine access "
"privilege."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:794
msgid ""
"An explicit deny (!host) is resolved first. Second, SSSD searches for "
"explicit allow (host) and finally for allow_all (*)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:799
msgid ""
"Please note that the ldap_access_order configuration option <emphasis>must</"
"emphasis> include <quote>host</quote> in order for the "
"ldap_user_authorized_host option to work."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:806
msgid "Default: host"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:812
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:815
msgid "The object class of a group entry in LDAP."
msgstr "La classe d'objecte d'una entrada de grup a LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:818
msgid "Default: posixGroup"
msgstr "Per defecte: posixGroup"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:824
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:827
msgid "The LDAP attribute that corresponds to the group name."
msgstr "L'atribut LDAP que es correspon amb el nom del grup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:837
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:840
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "L'atribut LDAP que correspon a l'identificador del grup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:850
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:853
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "L'atribut LDAP que conté els noms dels membres del grup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:857
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Per defecte: memberuid (rfc2307) / member (rfc2307bis)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:863
#, fuzzy
#| msgid "ldap_group_name (string)"
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:866
#, fuzzy
#| msgid "The LDAP attribute that contains the names of the group's members."
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr "L'atribut LDAP que conté els noms dels membres del grup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:877
msgid "ldap_group_objectsid (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:880
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:892
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:905
msgid "ldap_group_type (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:908
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:913
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
"domains."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:919
msgid "Default: groupType in the AD provider, othewise not set"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:926
msgid "ldap_group_nesting_level (integer)"
msgstr "ldap_group_nesting_level (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:929
msgid ""
"If ldap_schema is set to a schema format that supports nested groups (e.g. "
"RFC2307bis), then this option controls how many levels of nesting SSSD will "
"follow. This option has no effect on the RFC2307 schema."
msgstr ""
"Si ldap_schema s'estableix a un format d'esquema que suporta grups niats (p. "
"ex. RFC2307bis), llavors aquest opció controla quants nivells de nidificació "
"seguirà l'SSSD. Aquesta opció no té cap efecte sobre l'esquema RFC2307."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:936
msgid ""
"Note: This option specifies the guaranteed level of nested groups to be "
"processed for any lookup. However, nested groups beyond this limit "
"<emphasis>may be</emphasis> returned if previous lookups already resolved "
"the deeper nesting levels.  Also, subsequent lookups for other groups may "
"enlarge the result set for original lookup if re-queried."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:945
msgid ""
"If ldap_group_nesting_level is set to 0 then no nested groups are processed "
"at all. However, when connected to Active-Directory Server 2008 and later it "
"is furthermore required to disable usage of Token-Groups by setting "
"ldap_use_tokengroups to false."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:952
msgid "Default: 2"
msgstr "Per defecte: 2"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:958
msgid "ldap_groups_use_matching_rule_in_chain"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:961
msgid ""
"This option tells SSSD to take advantage of an Active Directory-specific "
"feature which may speed up group lookup operations on deployments with "
"complex or deep nested groups."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:967
msgid ""
"In most common cases, it is best to leave this option disabled. It generally "
"only provides a performance increase on very complex nestings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:972 sssd-ldap.5.xml:999
msgid ""
"If this option is enabled, SSSD will use it if it detects that the server "
"supports it during initial connection. So \"True\" here essentially means "
"\"auto-detect\"."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:978 sssd-ldap.5.xml:1005
msgid ""
"Note: This feature is currently known to work only with Active Directory "
"2008 R1 and later. See <ulink url=\"http://msdn.microsoft.com/en-us/library/"
"windows/desktop/aa746475%28v=vs.85%29.aspx\"> MSDN(TM) documentation</ulink> "
"for more details."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:984 sssd-ldap.5.xml:1011 sssd-ldap.5.xml:1299
#: sssd-ldap.5.xml:1320 sssd-ldap.5.xml:1826 include/ldap_id_mapping.xml:242
msgid "Default: False"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:990
msgid "ldap_initgroups_use_matching_rule_in_chain"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:993
msgid ""
"This option tells SSSD to take advantage of an Active Directory-specific "
"feature which might speed up initgroups operations (most notably when "
"dealing with complex or deep nested groups)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1017
msgid "ldap_use_tokengroups"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1020
msgid ""
"This options enables or disables use of Token-Groups attribute when "
"performing initgroup for users from Active Directory Server 2008 and later."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1025
msgid "Default: True for AD and IPA otherwise False."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1031
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1034
msgid "The object class of a netgroup entry in LDAP."
msgstr "La classe d'objecte d'una entrada de netgroup a LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1037
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1041
msgid "Default: nisNetgroup"
msgstr "Per defecte: nisNetgroup"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1047
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1050
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "L'atribut LDAP que es correspon amb el nom del netgroup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1054
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1064
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1067
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "L'atribut LDAP que conté els noms dels membres del netgroup."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1071
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1075
msgid "Default: memberNisNetgroup"
msgstr "Per defecte: memberNisNetgroup"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1081
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1084
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
"L'atribut LDAP que conté les tripletes netgroup (maquina, usuari, domini)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1088 sssd-ldap.5.xml:1104
msgid "This option is not available in IPA provider."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1091
msgid "Default: nisNetgroupTriple"
msgstr "Per defecte: nisNetgroupTriple"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1097
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1113
msgid "ldap_service_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1116
msgid "The object class of a service entry in LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1119
msgid "Default: ipService"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1125
msgid "ldap_service_name (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1128
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1138
msgid "ldap_service_port (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1141
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1145
msgid "Default: ipServicePort"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1151
msgid "ldap_service_proto (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1154
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1158
msgid "Default: ipServiceProtocol"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1164
msgid "ldap_service_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1169
msgid "ldap_search_timeout (integer)"
msgstr "ldap_search_timeout (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1172
msgid ""
"Specifies the timeout (in seconds) that ldap searches are allowed to run "
"before they are cancelled and cached results are returned (and offline mode "
"is entered)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1178
msgid ""
"Note: this option is subject to change in future versions of the SSSD. It "
"will likely be replaced at some point by a series of timeouts for specific "
"lookup types."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1190
msgid "ldap_enumeration_search_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1193
msgid ""
"Specifies the timeout (in seconds) that ldap searches for user and group "
"enumerations are allowed to run before they are cancelled and cached results "
"are returned (and offline mode is entered)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1206
msgid "ldap_network_timeout (integer)"
msgstr "ldap_network_timeout (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1209
msgid ""
"Specifies the timeout (in seconds) after which the <citerefentry> "
"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
"manvolnum> </citerefentry> following a <citerefentry> "
"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
"citerefentry> returns in case of no activity."
msgstr ""
"Especifica el temps d'espera (en segons) després que el "
"<citerefentry><refentrytitle>sondeig</refentrytitle> <manvolnum>2</"
"manvolnum></citerefentry>/<citerefentry><refentrytitle>selecció</"
"refentrytitle> <manvolnum>2</manvolnum></citerefentry> seguit d'una "
"<citerefentry><refentrytitle>connexió</refentrytitle> <manvolnum>2</"
"manvolnum></citerefentry> retorna en cas de cap activitat."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1232
msgid "ldap_opt_timeout (integer)"
msgstr "ldap_opt_timeout (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1235
msgid ""
"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
"will abort if no response is received. Also controls the timeout when "
"communicating with the KDC in case of SASL bind."
msgstr ""
"Especifica un temps d'espera (en segons) després que les trucades a les API "
"síncrones de LDAP s'abandonaran si no es rep cap resposta. També controla el "
"temps d'espera en comunicar amb el KDC en cas d'un vincle SASL."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1247
msgid "ldap_connection_expire_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1250
msgid ""
"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
"maintained. After this time, the connection will be re-established. If used "
"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
"the TGT lifetime)  will be used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1258 sssd-ldap.5.xml:2259
msgid "Default: 900 (15 minutes)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1264
msgid "ldap_page_size (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1267
msgid ""
"Specify the number of records to retrieve from LDAP in a single request. "
"Some LDAP servers enforce a maximum limit per-request."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1272
msgid "Default: 1000"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1278
msgid "ldap_disable_paging (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1281
msgid ""
"Disable the LDAP paging control. This option should be used if the LDAP "
"server reports that it supports the LDAP paging control in its RootDSE but "
"it is not enabled or does not behave properly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1287
msgid ""
"Example: OpenLDAP servers with the paging control module installed on the "
"server but not enabled will report it in the RootDSE but be unable to use it."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1293
msgid ""
"Example: 389 DS has a bug where it can only support a one paging control at "
"a time on a single connection. On busy clients, this can result in some "
"requests being denied."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1305
msgid "ldap_disable_range_retrieval (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1308
msgid "Disable Active Directory range retrieval."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1311
msgid ""
"Active Directory limits the number of members to be retrieved in a single "
"lookup using the MaxValRange policy (which defaults to 1500 members). If a "
"group contains more members, the reply would include an AD-specific range "
"extension. This option disables parsing of the range extension, therefore "
"large groups will appear as having no members."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1326
msgid "ldap_sasl_minssf (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1329
msgid ""
"When communicating with an LDAP server using SASL, specify the minimum "
"security level necessary to establish the connection. The values of this "
"option are defined by OpenLDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1335
msgid "Default: Use the system default (usually specified by ldap.conf)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1342
msgid "ldap_deref_threshold (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1345
msgid ""
"Specify the number of group members that must be missing from the internal "
"cache in order to trigger a dereference lookup. If less members are missing, "
"they are looked up individually."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1351
msgid ""
"You can turn off dereference lookups completely by setting the value to 0."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1355
msgid ""
"A dereference lookup is a means of fetching all group members in a single "
"LDAP call.  Different LDAP servers may implement different dereference "
"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
"Directory."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1363
msgid ""
"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
"filter, then the dereference lookup performance enhancement will be disabled "
"regardless of this setting."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1376
msgid "ldap_tls_reqcert (string)"
msgstr "ldap_tls_reqcert (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1379
msgid ""
"Specifies what checks to perform on server certificates in a TLS session, if "
"any. It can be specified as one of the following values:"
msgstr ""
"Especifica quines comprovacions s'han de realitzar sobre els certificats de "
"servidor en una sessió TLS, si s'escau. Es pot especificar com un dels "
"valors següents:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1385
msgid ""
"<emphasis>never</emphasis> = The client will not request or check any server "
"certificate."
msgstr ""
"<emphasis>never</emphasis> = El client no demanarà o comprovarà cap "
"certificat del servidor."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1389
msgid ""
"<emphasis>allow</emphasis> = The server certificate is requested. If no "
"certificate is provided, the session proceeds normally. If a bad certificate "
"is provided, it will be ignored and the session proceeds normally."
msgstr ""
"<emphasis>allow</emphasis> = El certificat del servidor es sol·licitatarà. "
"Si no es proporciona cap certificat, la sessió avança normalment. Si es "
"proporciona un certificat dolent, s'ignorarà i la sessió procedirà "
"normalment."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1396
msgid ""
"<emphasis>try</emphasis> = The server certificate is requested. If no "
"certificate is provided, the session proceeds normally. If a bad certificate "
"is provided, the session is immediately terminated."
msgstr ""
"<emphasis>try</emphasis> = El certificat del servidor es sol·licitatarà. Si "
"no es proporciona cap certificat, la sessió avança normalment. Si es "
"proporciona un certificat dolent, immediatament s'acaba la sessió."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1402
msgid ""
"<emphasis>demand</emphasis> = The server certificate is requested. If no "
"certificate is provided, or a bad certificate is provided, the session is "
"immediately terminated."
msgstr ""
"<emphasis>demand</emphasis> = El certificat del servidor es sol·licitatarà. "
"Si no es proporciona cap certificat, o se'n proporciona un de dolent, "
"immediatament s'acaba la sessió."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1408
msgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
msgstr "<emphasis>hard</emphasis> = Igual que <quote>demand</quote>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1412
msgid "Default: hard"
msgstr "Per defecte: hard"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1418
msgid "ldap_tls_cacert (string)"
msgstr "ldap_tls_cacert (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1421
msgid ""
"Specifies the file that contains certificates for all of the Certificate "
"Authorities that <command>sssd</command> will recognize."
msgstr ""
"Especifica el fitxer que conté els certificats per a totes les Autoritats de "
"Certificació que reconeixerà l'<command>sssd</command>."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1426 sssd-ldap.5.xml:1444 sssd-ldap.5.xml:1485
msgid ""
"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
"conf</filename>"
msgstr ""
"Per defecte: Utilitza els valors per defecte d'OpenLDAP, normalment a "
"<filename>/etc/openldap/ldap.conf</filename>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1433
msgid "ldap_tls_cacertdir (string)"
msgstr "ldap_tls_cacertdir (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1436
msgid ""
"Specifies the path of a directory that contains Certificate Authority "
"certificates in separate individual files. Typically the file names need to "
"be the hash of the certificate followed by '.0'.  If available, "
"<command>cacertdir_rehash</command> can be used to create the correct names."
msgstr ""
"Especifica la ruta d'un directori que conté els certificats d'Entitat "
"Certificadora en arxius separats independents. Normalment els noms de fitxer "
"són el hash del certificat seguit de '. 0 \".  Si està disponible, "
"<command>cacertdir_rehash</command> pot ser utilitzat per crear els noms "
"correctes."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1451
msgid "ldap_tls_cert (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1454
msgid "Specifies the file that contains the certificate for the client's key."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1464
msgid "ldap_tls_key (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1467
msgid "Specifies the file that contains the client's key."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1476
msgid "ldap_tls_cipher_suite (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1479
#, fuzzy
#| msgid ""
#| "<quote>ldap</quote> to change a password stored in a LDAP server.  See "
#| "<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
#| "manvolnum> </citerefentry> for more information on configuring LDAP."
msgid ""
"Specifies acceptable cipher suites.  Typically this is a colon separated "
"list.  See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
"<manvolnum>5</manvolnum></citerefentry> for format."
msgstr ""
"<quote>ldap</quote> per canviar una contrasenya emmagatzemada en un servidor "
"LDAP.  Vegeu <citerefentry><refentrytitle>sssd-ldap</refentrytitle> "
"<manvolnum>5</manvolnum></citerefentry> per a més informació sobre "
"configuració d'LDAP."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1492
msgid "ldap_id_use_start_tls (boolean)"
msgstr "ldap_id_use_start_tls (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1495
msgid ""
"Specifies that the id_provider connection must also use <systemitem class="
"\"protocol\">tls</systemitem> to protect the channel."
msgstr ""
"Especifica que la connexió id_provider també ha d'utilitzar <systemitem "
"class=\"protocol\">tls</systemitem> per a protegir el canal."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1505
msgid "ldap_id_mapping (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1508
msgid ""
"Specifies that SSSD should attempt to map user and group IDs from the "
"ldap_user_objectsid and ldap_group_objectsid attributes instead of relying "
"on ldap_user_uid_number and ldap_group_gid_number."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1514
msgid "Currently this feature supports only ActiveDirectory objectSID mapping."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1524
msgid "ldap_min_id, ldap_max_id (interger)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1527
msgid ""
"In contrast to the SID based ID mapping which is used if ldap_id_mapping is "
"set to true the allowed ID range for ldap_user_uid_number and "
"ldap_group_gid_number is unbound. In a setup with sub/trusted-domains this "
"might lead to ID collisions. To avoid collisions ldap_min_id and ldap_max_id "
"can be set to restrict the allowed range for the IDs which are read directly "
"from the server. Sub-domains can then pick other ranges to map IDs."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1539
msgid "Default: not set (both options are set to 0)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1545
msgid "ldap_sasl_mech (string)"
msgstr "ldap_sasl_mech (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1548
msgid ""
"Specify the SASL mechanism to use.  Currently only GSSAPI is tested and "
"supported."
msgstr ""
"Especifica el mecanisme SASL a utilitzar.  Actualment només GSSAPI és provat "
"i suportat."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1558
msgid "ldap_sasl_authid (string)"
msgstr "ldap_sasl_authid (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1561
msgid ""
"Specify the SASL authorization id to use.  When GSSAPI is used, this "
"represents the Kerberos principal used for authentication to the directory.  "
"This option can either contain the full principal (for example host/"
"myhost@EXAMPLE.COM) or just the principal name (for example host/myhost)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1569
msgid "Default: host/hostname@REALM"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1575
msgid "ldap_sasl_realm (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1578
msgid ""
"Specify the SASL realm to use. When not specified, this option defaults to "
"the value of krb5_realm.  If the ldap_sasl_authid contains the realm as "
"well, this option is ignored."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1584
msgid "Default: the value of krb5_realm."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1590
msgid "ldap_sasl_canonicalize (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1593
msgid ""
"If set to true, the LDAP library would perform a reverse lookup to "
"canonicalize the host name during a SASL bind."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1598
msgid "Default: false;"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1604
msgid "ldap_krb5_keytab (string)"
msgstr "ldap_krb5_keytab (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1607
msgid "Specify the keytab to use when using SASL/GSSAPI."
msgstr "Especifica el fitxer keytab a utilitzar quan s'utilitza SASL/GSSAPI."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1610
msgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
msgstr ""
"Per defecte: Fitxer keytab de sistema, normalment <filename>/etc/krb5."
"keytab</filename>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1616
msgid "ldap_krb5_init_creds (boolean)"
msgstr "ldap_krb5_init_creds (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1619
msgid ""
"Specifies that the id_provider should init Kerberos credentials (TGT).  This "
"action is performed only if SASL is used and the mechanism selected is "
"GSSAPI."
msgstr ""
"Especifica que el id_provider hauria d'iniciar les credencials del Kerberos "
"(TGT).  Aquesta acció es realitza només si s'utilitza SASL i el mecanisme "
"seleccionat és GSSAPI."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1631
msgid "ldap_krb5_ticket_lifetime (integer)"
msgstr "ldap_krb5_ticket_lifetime (enter)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1634
msgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
msgstr "Especifica el temps de vida en segons de la TGT si s'utilitza GSSAPI."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1638 sssd-ad.5.xml:739
msgid "Default: 86400 (24 hours)"
msgstr "Per defecte: 86400 (24 hores)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1644 sssd-krb5.5.xml:74
msgid "krb5_server, krb5_backup_server (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1647
msgid ""
"Specifies the comma-separated list of IP addresses or hostnames of the "
"Kerberos servers to which SSSD should connect in the order of preference. "
"For more information on failover and server redundancy, see the "
"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
"colon) may be appended to the addresses or hostnames.  If empty, service "
"discovery is enabled - for more information, refer to the <quote>SERVICE "
"DISCOVERY</quote> section."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1659 sssd-krb5.5.xml:89
msgid ""
"When using service discovery for KDC or kpasswd servers, SSSD first searches "
"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
"none are found."
msgstr ""
"En utilitzar el servei de descobriment per a servidors KDC o kpasswd, l'SSSD "
"primer cerca les entrades DNS que especifiquen _udp com el protocol i "
"retorna a _tcp si no se'n troba cap."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1664 sssd-krb5.5.xml:94
msgid ""
"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
"While the legacy name is recognized for the time being, users are advised to "
"migrate their config files to use <quote>krb5_server</quote> instead."
msgstr ""
"Aquesta opció s'anomenava <quote>krb5_kdcip</quote> en les primeres versions "
"d'SSSD. Mentre que el nom antic és reconegut de moment, s'aconsella als "
"usuaris que migrain els seus fitxers de configuració per utilitzar "
"<quote>krb5_server</quote>."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1673 sssd-ipa.5.xml:385 sssd-krb5.5.xml:103
msgid "krb5_realm (string)"
msgstr "krb5_realm (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1676
msgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
msgstr "Especifica l'àmbit KERBEROS (per a autenticació SASL/GSSAPI)."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1679
msgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
msgstr ""
"Per defecte: Paràmetres predeterminats del sistema, vegeu <filename>/etc/"
"krb5.conf</filename>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1685 sssd-ipa.5.xml:400 sssd-krb5.5.xml:453
msgid "krb5_canonicalize (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1688
msgid ""
"Specifies if the host principal should be canonicalized when connecting to "
"LDAP server. This feature is available with MIT Kerberos >= 1.7"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1700 sssd-krb5.5.xml:468
msgid "krb5_use_kdcinfo (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1703 sssd-krb5.5.xml:471
msgid ""
"Specifies if the SSSD should instruct the Kerberos libraries what realm and "
"which KDCs to use. This option is on by default, if you disable it, you need "
"to configure the Kerberos library using the <citerefentry> "
"<refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> configuration file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1714 sssd-krb5.5.xml:482
msgid ""
"See the <citerefentry> <refentrytitle>sssd_krb5_locator_plugin</"
"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> manual page for more "
"information on the locator plugin."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1728
msgid "ldap_pwd_policy (string)"
msgstr "ldap_pwd_policy (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1731
msgid ""
"Select the policy to evaluate the password expiration on the client side. "
"The following values are allowed:"
msgstr ""
"Selecciona la política per avaluar la caducitat de la contrasenya en el "
"costat del client. S'admeten els valors següents:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1736
msgid ""
"<emphasis>none</emphasis> - No evaluation on the client side. This option "
"cannot disable server-side password policies."
msgstr ""
"<emphasis>none</emphasis> - Cap avaluació del costat del client. Aquesta "
"opció no inhabilita les polítiques de contrasenya de servidor."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1741
msgid ""
"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
"evaluate if the password has expired."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1747
msgid ""
"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
"to determine if the password has expired. Use chpass_provider=krb5 to update "
"these attributes when the password is changed."
msgstr ""
"<emphasis>mit_kerberos</emphasis> - Usa els atributs utilitzats per MIT "
"Kerberos per determinar si la contrasenya ha caducat. Utilitza "
"chpass_provider=krb5 per actualitzar aquests atributs quan es canvia la "
"contrasenya."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1756
msgid ""
"<emphasis>Note</emphasis>: if a password policy is configured on server "
"side, it always takes precedence over policy set with this option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1764
msgid "ldap_referrals (boolean)"
msgstr "ldap_referrals (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1767
msgid "Specifies whether automatic referral chasing should be enabled."
msgstr ""
"Especifica si el seguiment automàtic del referenciador s'hauria d'habilitar."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1771
msgid ""
"Please note that sssd only supports referral chasing when it is compiled "
"with OpenLDAP version 2.4.13 or higher."
msgstr ""
"Si us plau fixi's que l'sssd només suporta el seguiment del referenciador "
"quan és compilat amb la versió d'OpenLDAP 2.4.13 o superior."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1776
msgid ""
"Chasing referrals may incur a performance penalty in environments that use "
"them heavily, a notable example is Microsoft Active Directory. If your setup "
"does not in fact require the use of referrals, setting this option to false "
"might bring a noticeable performance improvement."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1790
msgid "ldap_dns_service_name (string)"
msgstr "ldap_dns_service_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1793
msgid "Specifies the service name to use when service discovery is enabled."
msgstr ""
"Especifica el nom de servei per utilitzar quan està habilitada la detecció "
"de serveis."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1797
msgid "Default: ldap"
msgstr "Per defecte: ldap"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1803
msgid "ldap_chpass_dns_service_name (string)"
msgstr "ldap_chpass_dns_service_name (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1806
msgid ""
"Specifies the service name to use to find an LDAP server which allows "
"password changes when service discovery is enabled."
msgstr ""
"Especifica el nom de servei a utilitzar per trobar un servidor LDAP que "
"permet canvis de contrasenya quan està habilitada la detecció de serveis."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1811
msgid "Default: not set, i.e. service discovery is disabled"
msgstr ""
"Defecte: no definit, és a dir, el descobriment de serveis està inhabilitat"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1817
msgid "ldap_chpass_update_last_change (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1820
msgid ""
"Specifies whether to update the ldap_user_shadow_last_change attribute with "
"days since the Epoch after a password change operation."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1832
msgid "ldap_access_filter (string)"
msgstr "ldap_access_filter (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1835
msgid ""
"If using access_provider = ldap and ldap_access_order = filter (default), "
"this option is mandatory. It specifies an LDAP search filter criteria that "
"must be met for the user to be granted access on this host. If "
"access_provider = ldap, ldap_access_order = filter and this option is not "
"set, it will result in all users being denied access.  Use access_provider = "
"permit to change this default behavior. Please note that this filter is "
"applied on the LDAP user entry only and thus filtering based on nested "
"groups may not work (e.g. memberOf attribute on AD entries points only to "
"direct parents). If filtering based on nested groups is required, please see "
"<citerefentry> <refentrytitle>sssd-simple</refentrytitle><manvolnum>5</"
"manvolnum> </citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1855
msgid "Example:"
msgstr "Exemple:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ldap.5.xml:1858
#, no-wrap
msgid ""
"access_provider = ldap\n"
"ldap_access_filter = (employeeType=admin)\n"
"                        "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1862
msgid ""
"This example means that access to this host is restricted to users whose "
"employeeType attribute is set to \"admin\"."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1867
msgid ""
"Offline caching for this feature is limited to determining whether the "
"user's last online login was granted access permission. If they were granted "
"access during their last login, they will continue to be granted access "
"while offline and vice-versa."
msgstr ""
"La memòria cau fora de línia per a aquesta característica es limita a "
"determinar si el darrer inici de sessió d'usuari va concedir permís d'accés. "
"Si es var concedir accés durant el seu últim inici de sessió, es continuarà "
"concedint accés en estar fora de línia i viceversa."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1875 sssd-ldap.5.xml:1932
msgid "Default: Empty"
msgstr "Per defecte: Buit"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1881
msgid "ldap_account_expire_policy (string)"
msgstr "ldap_account_expire_policy (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1884
msgid ""
"With this option a client side evaluation of access control attributes can "
"be enabled."
msgstr ""
"Amb aquesta opció es pot habilitar una avaluació del costat de client "
"d'atributs de control d'accés."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1888
msgid ""
"Please note that it is always recommended to use server side access control, "
"i.e. the LDAP server should deny the bind request with a suitable error code "
"even if the password is correct."
msgstr ""
"Si us plau, tingueu en compte que sempre és recomanable utilitzar el control "
"d'accés del costat de servidor, és a dir, el servidor d'LDAP hauria de "
"denegar la petició de vincle amb un codi d'error adequat fins i tot si la "
"contrasenya és correcta."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1895
msgid "The following values are allowed:"
msgstr "S'admeten els valors següents:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1898
msgid ""
"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
"determine if the account is expired."
msgstr ""
"<emphasis>shadow</emphasis>: utilitza el valor ldap_user_shadow_expire per "
"determinar si el compte ha caducat."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1903
msgid ""
"<emphasis>ad</emphasis>: use the value of the 32bit field "
"ldap_user_ad_user_account_control and allow access if the second bit is not "
"set. If the attribute is missing access is granted. Also the expiration time "
"of the account is checked."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1910
msgid ""
"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
"emphasis>: use the value of ldap_ns_account_lock to check if access is "
"allowed or not."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1916
msgid ""
"<emphasis>nds</emphasis>: the values of "
"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
"If both attributes are missing access is granted."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1925
msgid ""
"Please note that the ldap_access_order configuration option <emphasis>must</"
"emphasis> include <quote>expire</quote> in order for the "
"ldap_account_expire_policy option to work."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1938
msgid "ldap_access_order (string)"
msgstr "ldap_access_order (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1941
msgid "Comma separated list of access control options.  Allowed values are:"
msgstr ""
"Llista separada per comes d'opcions de control d'accés.  Els valors permesos "
"són:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1945
msgid "<emphasis>filter</emphasis>: use ldap_access_filter"
msgstr "<emphasis>filter</emphasis>: utilitza ldap_access_filter"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1948
msgid ""
"<emphasis>lockout</emphasis>: use account locking.  If set, this option "
"denies access in case that ldap attribute 'pwdAccountLockedTime' is present "
"and has value of '000001010000Z'. Please see the option ldap_pwdlockout_dn.  "
"Please note that 'access_provider = ldap' must be set for this feature to "
"work."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1958
msgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
msgstr "<emphasis>expire</emphasis>: utilitza ldap_account_expire_policy"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1962
msgid ""
"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
"to determine access"
msgstr ""
"<emphasis>authorized_service</emphasis>: utilitza l'atribut "
"authorizedService per determinar l'accés"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1967
msgid "<emphasis>host</emphasis>: use the host attribute to determine access"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1971
msgid "Default: filter"
msgstr "Per defecte: filter"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1974
msgid ""
"Please note that it is a configuration error if a value is used more than "
"once."
msgstr ""
"Si us plau, tingueu en compte que és un error de configuració si un valor "
"s'utilitza més d'una vegada."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:1981
msgid "ldap_pwdlockout_dn (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1984
msgid ""
"This option specifies the DN of password policy entry on LDAP server. Please "
"note that absence of this option in sssd.conf in case of enabled account "
"lockout checking will yield access denied as ppolicy attributes on LDAP "
"server cannot be checked properly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1992
msgid "Example: cn=ppolicy,ou=policies,dc=example,dc=com"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:1995
msgid "Default: cn=ppolicy,ou=policies,$ldap_search_base"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2001
msgid "ldap_deref (string)"
msgstr "ldap_deref (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2004
msgid ""
"Specifies how alias dereferencing is done when performing a search. The "
"following options are allowed:"
msgstr ""
"Especifica com la eliminació de referències d'àlies es fa en realitzar una "
"cerca. S'admeten les opcions següents:"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2009
msgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
msgstr ""
"<emphasis>never</emphasis>: les referències dels àlies mai són eliminades."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2013
msgid ""
"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
"the base object, but not in locating the base object of the search."
msgstr ""
"<emphasis>searching</emphasis>: les referències dels àlies són eliminades en "
"subordinats de l'objecte base, però no en la localització de l'objecte base "
"de la cerca."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2018
msgid ""
"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
"the base object of the search."
msgstr ""
"<emphasis>finding</emphasis>: les referències dels àlies són eliminades "
"només en localitzar l'objecte base de la cerca."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2023
msgid ""
"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
"in locating the base object of the search."
msgstr ""
"<emphasis>always</emphasis>: les referències dels àlies són eliminades tant "
"en la recerca i en la localització de l'objecte base de la cerca."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2028
msgid ""
"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
"client libraries)"
msgstr ""
"Per defecte: Buit (això es tractarà com <emphasis>never</emphasis> per les "
"llibreries client d'LDAP)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2036
msgid "ldap_rfc2307_fallback_to_local_users (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2039
msgid ""
"Allows to retain local users as members of an LDAP group for servers that "
"use the RFC2307 schema."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2043
msgid ""
"In some environments where the RFC2307 schema is used, local users are made "
"members of LDAP groups by adding their names to the memberUid attribute.  "
"The self-consistency of the domain is compromised when this is done, so SSSD "
"would normally remove the \"missing\" users from the cached group "
"memberships as soon as nsswitch tries to fetch information about the user "
"via getpw*() or initgroups() calls."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2054
msgid ""
"This option falls back to checking if local users are referenced, and caches "
"them so that later initgroups() calls will augment the local users with the "
"additional LDAP groups."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:51
msgid ""
"All of the common configuration options that apply to SSSD domains also "
"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> manual page for full details.  <placeholder type="
"\"variablelist\" id=\"0\"/>"
msgstr ""
"Totes les opcions comunes de configuració que s'apliquen als dominis SSD "
"també s'apliquen als dominis LDAP. Referiu-vos a la secció <quote>SECCIONS "
"DE DOMINI</quote> de la pàgina de manual de <citerefentry> "
"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> per a tots els detalls.  <placeholder type=\"variablelist\" id="
"\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2070
msgid "SUDO OPTIONS"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2072
msgid ""
"The detailed instructions for configuration of sudo_provider are in the "
"manual page <citerefentry> <refentrytitle>sssd-sudo</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2083
msgid "ldap_sudorule_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2086
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2089
msgid "Default: sudoRole"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2095
msgid "ldap_sudorule_name (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2098
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2108
msgid "ldap_sudorule_command (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2111
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2115
msgid "Default: sudoCommand"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2121
msgid "ldap_sudorule_host (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2124
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2129
msgid "Default: sudoHost"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2135
msgid "ldap_sudorule_user (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2138
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2142
msgid "Default: sudoUser"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2148
msgid "ldap_sudorule_option (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2151
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2155
msgid "Default: sudoOption"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2161
msgid "ldap_sudorule_runasuser (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2164
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2168
msgid "Default: sudoRunAsUser"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2174
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2177
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2181
msgid "Default: sudoRunAsGroup"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2187
msgid "ldap_sudorule_notbefore (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2190
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2194
msgid "Default: sudoNotBefore"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2200
msgid "ldap_sudorule_notafter (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2203
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2208
msgid "Default: sudoNotAfter"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2214
msgid "ldap_sudorule_order (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2217
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2221
msgid "Default: sudoOrder"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2227
msgid "ldap_sudo_full_refresh_interval (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2230
msgid ""
"How many seconds SSSD will wait between executing a full refresh of sudo "
"rules (which downloads all rules that are stored on the server)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2235
msgid ""
"The value must be greater than <emphasis>ldap_sudo_smart_refresh_interval </"
"emphasis>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2240
msgid "Default: 21600 (6 hours)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2246
msgid "ldap_sudo_smart_refresh_interval (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2249
msgid ""
"How many seconds SSSD has to wait before executing a smart refresh of sudo "
"rules (which downloads all rules that have USN higher than the highest USN "
"of cached rules)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2255
msgid ""
"If USN attributes are not supported by the server, the modifyTimestamp "
"attribute is used instead."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2265
msgid "ldap_sudo_use_host_filter (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2268
msgid ""
"If true, SSSD will download only rules that are applicable to this machine "
"(using the IPv4 or IPv6 host/network addresses and hostnames)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2279
msgid "ldap_sudo_hostnames (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2282
msgid ""
"Space separated list of hostnames or fully qualified domain names that "
"should be used to filter the rules."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2287
msgid ""
"If this option is empty, SSSD will try to discover the hostname and the "
"fully qualified domain name automatically."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2292 sssd-ldap.5.xml:2315 sssd-ldap.5.xml:2333
#: sssd-ldap.5.xml:2351
msgid ""
"If <emphasis>ldap_sudo_use_host_filter</emphasis> is <emphasis>false</"
"emphasis> then this option has no effect."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2297 sssd-ldap.5.xml:2320
msgid "Default: not specified"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2303
msgid "ldap_sudo_ip (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2306
msgid ""
"Space separated list of IPv4 or IPv6 host/network addresses that should be "
"used to filter the rules."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2311
msgid ""
"If this option is empty, SSSD will try to discover the addresses "
"automatically."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2326
msgid "ldap_sudo_include_netgroups (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2329
msgid ""
"If true then SSSD will download every rule that contains a netgroup in "
"sudoHost attribute."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2344
msgid "ldap_sudo_include_regexp (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2347
msgid ""
"If true then SSSD will download every rule that contains a wildcard in "
"sudoHost attribute."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2363
msgid ""
"This manual page only describes attribute name mapping.  For detailed "
"explanation of sudo related attribute semantics, see <citerefentry> "
"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
"citerefentry>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2373
msgid "AUTOFS OPTIONS"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2375
msgid ""
"Please note that the default values correspond to the default schema which "
"is RFC2307."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2381
msgid "ldap_autofs_map_master_name (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2384
msgid "The name of the automount master map in LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2387
msgid "Default: auto.master"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2394
msgid "ldap_autofs_map_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2397 sssd-ldap.5.xml:2423
msgid "The object class of an automount map entry in LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2400 sssd-ldap.5.xml:2427
msgid "Default: automountMap"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2407
msgid "ldap_autofs_map_name (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2410
msgid "The name of an automount map entry in LDAP."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2413
msgid "Default: ou"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2420
msgid "ldap_autofs_entry_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2434
msgid "ldap_autofs_entry_key (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2437 sssd-ldap.5.xml:2451
msgid ""
"The key of an automount entry in LDAP. The entry usually corresponds to a "
"mount point."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2448
msgid "ldap_autofs_entry_value (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:2455
msgid "Default: automountInformation"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2379
msgid ""
"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
"\"variablelist\" id=\"4\"/> <placeholder type=\"variablelist\" id=\"5\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2465
msgid "ADVANCED OPTIONS"
msgstr "OPCIONS AVANÇADES"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2472
msgid "ldap_netgroup_search_base (string)"
msgstr "ldap_netgroup_search_base (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2477
msgid "ldap_user_search_base (string)"
msgstr "ldap_user_search_base (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2482
msgid "ldap_group_search_base (string)"
msgstr "ldap_group_search_base (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><note>
#: sssd-ldap.5.xml:2487
msgid "<note>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><note><para>
#: sssd-ldap.5.xml:2489
msgid ""
"If the option <quote>ldap_use_tokengroups</quote> is enabled. The searches "
"against Active Directory will not be restricted and return all groups "
"memberships, even with no gid mapping. It is recommended to disable this "
"feature, if group names are not being displayed correctly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist>
#: sssd-ldap.5.xml:2496
msgid "</note>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2498
msgid "ldap_sudo_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ldap.5.xml:2503
msgid "ldap_autofs_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2467
#, fuzzy
#| msgid ""
#| "These options are supported by LDAP domains, but they should be used with "
#| "caution. Please include them in your configuration only if you know what "
#| "you are doing.  <placeholder type=\"variablelist\" id=\"0\"/>"
msgid ""
"These options are supported by LDAP domains, but they should be used with "
"caution. Please include them in your configuration only if you know what you "
"are doing.  <placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
"\"variablelist\" id=\"1\"/>"
msgstr ""
"Aquestes opcions són suportades pels dominis LDAP però s'haurien de fer "
"servir amb cura. Si us plau, afegiu-les a la vostra configuració només si "
"sabeu el que estau fent.  <placeholder type=\"variablelist\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2520
msgid ""
"The following example assumes that SSSD is correctly configured and LDAP is "
"set to one of the domains in the <replaceable>[domains]</replaceable> "
"section."
msgstr ""
"L'exemple següent presuposa que l'SSSD està correctament configurat i l'LDAP "
"està definit com a un dels dominis a la secció <replaceable>[domains]</"
"replaceable>."

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ldap.5.xml:2526
#, no-wrap
msgid ""
"    [domain/LDAP]\n"
"    id_provider = ldap\n"
"    auth_provider = ldap\n"
"    ldap_uri = ldap://ldap.mydomain.org\n"
"    ldap_search_base = dc=mydomain,dc=org\n"
"    ldap_tls_reqcert = demand\n"
"    cache_credentials = true\n"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: sssd-ldap.5.xml:2525 sssd-ldap.5.xml:2543 sssd-simple.5.xml:139
#: sssd-ipa.5.xml:723 sssd-ad.5.xml:829 sssd-sudo.5.xml:56 sssd-sudo.5.xml:98
#: sssd-krb5.5.xml:528 include/ldap_id_mapping.xml:105
msgid "<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "<placeholder type=\"programlisting\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2537
msgid "LDAP ACCESS FILTER EXAMPLE"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2539
#, fuzzy
#| msgid ""
#| "The following example assumes that SSSD is correctly configured and LDAP "
#| "is set to one of the domains in the <replaceable>[domains]</replaceable> "
#| "section."
msgid ""
"The following example assumes that SSSD is correctly configured and to use "
"the ldap_access_order=lockout."
msgstr ""
"L'exemple següent presuposa que l'SSSD està correctament configurat i l'LDAP "
"està definit com a un dels dominis a la secció <replaceable>[domains]</"
"replaceable>."

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ldap.5.xml:2544
#, no-wrap
msgid ""
"    [domain/LDAP]\n"
"    id_provider = ldap\n"
"    auth_provider = ldap\n"
"    access_provider = ldap\n"
"    ldap_access_order = lockout\n"
"    ldap_pwdlockout_dn = cn=ppolicy,ou=policies,dc=mydomain,dc=org\n"
"    ldap_uri = ldap://ldap.mydomain.org\n"
"    ldap_search_base = dc=mydomain,dc=org\n"
"    ldap_tls_reqcert = demand\n"
"    cache_credentials = true\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ldap.5.xml:2559 sssd_krb5_locator_plugin.8.xml:61
#: sssd-simple.5.xml:148 sssd-ad.5.xml:844 sssd.8.xml:195 sss_seed.8.xml:163
msgid "NOTES"
msgstr "NOTES"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ldap.5.xml:2561
msgid ""
"The descriptions of some of the configuration options in this manual page "
"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
"distribution."
msgstr ""
"Les descripcions d'algunes de les opcions de configuració en aquesta pàgina "
"del manual es basen en la pàgina del manual <citerefentry>de "
"<refentrytitle>ldap.conf</refentrytitle> <manvolnum>5</manvolnum></"
"citerefentry> de la distribució de OpenLDAP 2.4."

#. type: Content of: <refentryinfo>
#: pam_sss.8.xml:8 include/upstream.xml:2
msgid ""
"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
"fedorahosted.org/sssd</orgname>"
msgstr ""
"<productname>SSSD</productname> <orgname>La font de l'SSSD - http://"
"fedorahosted.org/sssd</orgname>"

#. type: Content of: <reference><refentry><refnamediv><refname>
#: pam_sss.8.xml:13 pam_sss.8.xml:18
msgid "pam_sss"
msgstr "pam_sss"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: pam_sss.8.xml:19
msgid "PAM module for SSSD"
msgstr "Mòdul de PAM per SSSD"

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: pam_sss.8.xml:24
msgid ""
"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
"arg> <arg choice='opt'> <replaceable>ignore_unknown_user</replaceable> </"
"arg> <arg choice='opt'> <replaceable>ignore_authinfo_unavail</replaceable> </"
"arg> <arg choice='opt'> <replaceable>domains=X</replaceable> </arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:54
msgid ""
"<command>pam_sss.so</command> is the PAM interface to the System Security "
"Services daemon (SSSD). Errors and results are logged through "
"<command>syslog(3)</command> with the LOG_AUTHPRIV facility."
msgstr ""
"<command>pam_sss.so</command> és la interfície PAM pel System Security "
"Services daemon  (SSSD). Els errors i els resultats es registren a través de "
"<command>syslog(3)</command> amb el canal LOG_AUTHPRIV."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:64
msgid "<option>quiet</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:67
msgid "Suppress log messages for unknown users."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:72
msgid "<option>forward_pass</option>"
msgstr "<option>forward_pass</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:75
msgid ""
"If <option>forward_pass</option> is set the entered password is put on the "
"stack for other PAM modules to use."
msgstr ""
"Si s'estableix <option>forward_pass</option> contrasenya introduïda és posa "
"a la pila per tal que altres mòduls PAM l'utilitzin."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:82
msgid "<option>use_first_pass</option>"
msgstr "<option>use_first_pass</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:85
msgid ""
"The argument use_first_pass forces the module to use a previous stacked "
"modules password and will never prompt the user - if no password is "
"available or the password is not appropriate, the user will be denied access."
msgstr ""
"L'argument use_first_pass força al mòdul a utilitzar una contrasenya apliada "
"als mòduls anteriors i mai demanarà l'usuari - si no hi ha cap contrasenya o "
"la contrasenya no és correcte, se li negarà l'accés a l'usuari."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:93
msgid "<option>use_authtok</option>"
msgstr "<option>use_authtok</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:96
msgid ""
"When password changing enforce the module to set the new password to the one "
"provided by a previously stacked password module."
msgstr ""
"Quan el canvi de contrasenya força al mòdul a establir la contrasenya nova a "
"la proporcionada per un mòdul de contrasenya prèviament apilat."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:103
msgid "<option>retry=N</option>"
msgstr "<option>retry=N</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:106
msgid ""
"If specified the user is asked another N times for a password if "
"authentication fails. Default is 0."
msgstr ""
"Si s'especifica l'usuari serà demanat N vegades més per una contrasenya en "
"cas de fallar l'autenticació. Per defecte és 0."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:108
msgid ""
"Please note that this option might not work as expected if the application "
"calling PAM handles the user dialog on its own. A typical example is "
"<command>sshd</command> with <option>PasswordAuthentication</option>."
msgstr ""
"Si us plau, tingueu en compte que aquesta opció podria no funcionar com "
"s'espera si l'aplicació que crida PAM gestiona pel seu compte el diàleg amb "
"l'usuari. Un exemple típic és <command>sshd</command> amb "
"<option>PasswordAuthentication</option>."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:117
msgid "<option>ignore_unknown_user</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:120
msgid ""
"If this option is specified and the user does not exist, the PAM module will "
"return PAM_IGNORE. This causes the PAM framework to ignore this module."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:127
msgid "<option>ignore_authinfo_unavail</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:131
msgid ""
"Specifies that the PAM module should return PAM_IGNORE if it cannot contact "
"the SSSD daemon. This causes the PAM framework to ignore this module."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: pam_sss.8.xml:138
msgid "<option>domains</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:142
msgid ""
"Allows the administrator to restrict the domains a particular PAM service is "
"allowed to authenticate against. The format is a comma-separated list of "
"SSSD domain names, as specified in the sssd.conf file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: pam_sss.8.xml:148
msgid ""
"NOTE: Must be used in conjunction with the <quote>pam_trusted_users</quote> "
"and <quote>pam_public_domains</quote> options.  Please see the "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> manual page for more information on these two PAM "
"responder options."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: pam_sss.8.xml:164
msgid "MODULE TYPES PROVIDED"
msgstr "MÒDUL TIPUS PROPORCIONATS"

#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:165
msgid ""
"All module types (<option>account</option>, <option>auth</option>, "
"<option>password</option> and <option>session</option>) are provided."
msgstr ""
"S'ofereixen tots els tipus de mòdul (<option>compte</option>, <option>auth</"
"option>, <option>contrasenya</option> i <option>sessió</option>)."

#. type: Content of: <reference><refentry><refsect1><title>
#: pam_sss.8.xml:171
msgid "FILES"
msgstr "FITXERS"

#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:172
msgid ""
"If a password reset by root fails, because the corresponding SSSD provider "
"does not support password resets, an individual message can be displayed. "
"This message can e.g. contain instructions about how to reset a password."
msgstr ""
"Si una contrasenya reinicialitzada per root falla, degut a que el proveïdor "
"SSSD corresponent no suporta reinicialitzar contrasenyes, es pot mostrar un "
"missatge concret. Aquest missatge pot contenir, per exemple, instruccions "
"sobre com restaurar una contrasenya."

#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:177
msgid ""
"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
"filename> where LOC stands for a locale string returned by <citerefentry> "
"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
"citerefentry>. If there is no matching file the content of "
"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
"the owner of the files and only root may have read and write permissions "
"while all other users must have only read permissions."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: pam_sss.8.xml:187
msgid ""
"These files are searched in the directory <filename>/etc/sssd/customize/"
"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
"displayed."
msgstr ""
"Aquests fitxers són buscat al directori <filename>/etc/sssd/customize/"
"NOM_DE_DOMINI/</filename>. Si no es troba cap fitxer coincident es mostrarà "
"un missatge genèric."

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
msgid "sssd_krb5_locator_plugin"
msgstr "sssd_krb5_locator_plugin"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd_krb5_locator_plugin.8.xml:16
msgid "Kerberos locator plugin"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:22
msgid ""
"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
"libraries what Realm and which KDC to use.  Typically this is done in "
"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
"To simplify the configuration the Realm and the KDC can be defined in "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> as described in <citerefentry> "
"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:48
msgid ""
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry> puts the Realm and the name or IP address of the KDC into "
"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively.  "
"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
"libraries it reads and evaluates these variables and returns them to the "
"libraries."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:63
msgid ""
"Not all Kerberos implementations support the use of plugins. If "
"<command>sssd_krb5_locator_plugin</command> is not available on your system "
"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
msgstr ""
"No totes les implementacions Kerberos suporten l'ús d'afegitons. Si "
"<command>sssd_krb5_locator_plugin</command> no està disponible al seu "
"sistema heu d'editar /etc/krb5.conf per reflectir la seva configuració de "
"Kerberos."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd_krb5_locator_plugin.8.xml:69
msgid ""
"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
"debug messages will be sent to stderr."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
msgid "sssd-simple"
msgstr "sssd-simple"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-simple.5.xml:17
msgid "the configuration file for SSSD's 'simple' access-control provider"
msgstr ""
"el fitxer de configuració per al proveïdor 'simple' de control d'accés d'SSSD"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:24
msgid ""
"This manual page describes the configuration of the simple access-control "
"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
"<manvolnum>8</manvolnum> </citerefentry>.  For a detailed syntax reference, "
"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> manual page."
msgstr ""
"Aquesta pàgina del manual descriu la configuració del proveïdor senzill de "
"control d'accés per <citerefentry> <refentrytitle>sssd</refentrytitle> "
"<manvolnum>8</manvolnum></citerefentry>.  Per una referència detallada de la "
"sintaxi, aneu a la secció de <quote>FORMAT DE FITXER</quote> de la pàgina "
"del manual <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry>."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:38
msgid ""
"The simple access provider grants or denies access based on an access or "
"deny list of user or group names. The following rules apply:"
msgstr ""
"El proveïdor d'accés simple accepta o nega l'accés basat en una llista "
"d'accés o denegació de noms d'usuari grups. S'apliquen les regles següents:"

#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
#: sssd-simple.5.xml:43
msgid "If all lists are empty, access is granted"
msgstr "Si totes les llistes estan buides, s'accepta l'accés"

#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
#: sssd-simple.5.xml:47
msgid ""
"If any list is provided, the order of evaluation is allow,deny. This means "
"that any matching deny rule will supersede any matched allow rule."
msgstr ""
"Si es proporciona alguna llista, l'ordre d'avaluació és accpetar, denegar. "
"Això significa que qualsevol regla de denegació explícita substituirà "
"qualsevol regla d'accés."

#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
#: sssd-simple.5.xml:54
msgid ""
"If either or both \"allow\" lists are provided, all users are denied unless "
"they appear in the list."
msgstr ""
"Si es proporcionen una o ambdues llistes d'acceptació tots els usuaris són "
"denegats excepte els que apareixen a la llista."

#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
#: sssd-simple.5.xml:60
msgid ""
"If only \"deny\" lists are provided, all users are granted access unless "
"they appear in the list."
msgstr ""
"Si només es proporcionen llistes de \"denegació\" tots els usuaris tenen "
"accés excepte els que apareixen a la llista."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-simple.5.xml:78
msgid "simple_allow_users (string)"
msgstr "simple_allow_users (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-simple.5.xml:81
msgid "Comma separated list of users who are allowed to log in."
msgstr "Llista separada per comes d'usuaris amb permís per iniciar sessió."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-simple.5.xml:88
msgid "simple_deny_users (string)"
msgstr "simple_deny_users (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-simple.5.xml:91
msgid "Comma separated list of users who are explicitly denied access."
msgstr ""
"Llista separada per comes d'usuaris amb denegació explícita per iniciar "
"sessió."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-simple.5.xml:97
msgid "simple_allow_groups (string)"
msgstr "simple_allow_groups (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-simple.5.xml:100
msgid ""
"Comma separated list of groups that are allowed to log in. This applies only "
"to groups within this SSSD domain. Local groups are not evaluated."
msgstr ""
"Llista separada per comes de grups que se'ls permet l'entrada. Això s'aplica "
"només a grups d'aquest domini SSSD. No s'avaluen els grups locals."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-simple.5.xml:108
msgid "simple_deny_groups (string)"
msgstr "simple_deny_groups (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-simple.5.xml:111
msgid ""
"Comma separated list of groups that are explicitly denied access. This "
"applies only to groups within this SSSD domain. Local groups are not "
"evaluated."
msgstr ""
"Llista separada per comes de grups que tenen l'accés explícitament denegat. "
"Això s'aplica només a grups d'aquest domini SSSD. No s'avaluen els grups "
"locals."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:70 sssd-ipa.5.xml:71 sssd-ad.5.xml:89
msgid ""
"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> manual page for details on the configuration of an SSSD "
"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
"Consulteu la secció <quote>SECCIONS DE DOMINI</quote> de la pàgina del "
"manual <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> per a més informació sobre la configuració d'un "
"domini SSSD.  <placeholder type=\"variablelist\" id=\"0\"/>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:120
msgid ""
"Specifying no values for any of the lists is equivalent to skipping it "
"entirely. Beware of this while generating parameters for the simple provider "
"using automated scripts."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:125
msgid ""
"Please note that it is an configuration error if both, simple_allow_users "
"and simple_deny_users, are defined."
msgstr ""
"Si us plau, tingueu en compte que és un error de configuració si es "
"defineixen alhora simple_allow_users i simple_deny_users."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:133
msgid ""
"The following example assumes that SSSD is correctly configured and example."
"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
"This examples shows only the simple access provider-specific options."
msgstr ""
"L'exemple següent pressuposa que l'SSSD està configurat correctament i "
"example.com és un dels dominis de la secció <replaceable>[sssd]</"
"replaceable>. Aquest exemple mostra només les opcions d'accés simple "
"específiques del proveïdor."

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-simple.5.xml:140
#, no-wrap
msgid ""
"    [domain/example.com]\n"
"    access_provider = simple\n"
"    simple_allow_users = user1, user2\n"
msgstr ""
"    [domain/example.com]\n"
"    access_provider = simple\n"
"    simple_allow_users = user1, user2\n"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-simple.5.xml:150
msgid ""
"The complete group membership hierarchy is resolved before the access check, "
"thus even nested groups can be included in the access lists.  Please be "
"aware that the <quote>ldap_group_nesting_level</quote> option may impact the "
"results and should be set to a sufficient value.  (<citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
"citerefentry>) option."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-ipa.5.xml:10 sssd-ipa.5.xml:16
msgid "sssd-ipa"
msgstr "sssd-ipa"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-ipa.5.xml:17
msgid "SSSD IPA provider"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:23
msgid ""
"This manual page describes the configuration of the IPA provider for "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
msgstr ""
"Aquesta pàgina del manual descriu la configuració del proveïdor IPA per "
"<citerefentry><refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum></"
"citerefentry>.  Per una referència detallada sintaxi, aneu a la secció de "
"<quote>FORMAT DE FITXER</quote> de la pàgina del manual "
"<citerefentry>d'<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry>."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:36
msgid ""
"The IPA provider is a back end used to connect to an IPA server.  (Refer to "
"the freeipa.org web site for information about IPA servers.)  This provider "
"requires that the machine be joined to the IPA domain; configuration is "
"almost entirely self-discovered and obtained directly from the server."
msgstr ""
"El proveïdor d'IPA és un back-end utilitzat per connectar a un servidor "
"d'IPA.  (Consuleteu el lloc web freeipa.org per obtenir informació sobre "
"servidors IPA).  Aquest proveïdor requereix afegir la màquina al domini "
"d'IPA; la configuració s'auto-detecta gairebé totalment i s'obté directament "
"des del servidor."

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:43
msgid ""
"The IPA provider accepts the same options used by the <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
"provider with some exceptions described below."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:55
msgid ""
"However, it is neither necessary nor recommended to set these options.  IPA "
"provider can also be used as an access and chpass provider. As an access "
"provider it uses HBAC (host-based access control) rules. Please refer to "
"freeipa.org for more information about HBAC. No configuration of access "
"provider is required on the client side."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:62
msgid ""
"The IPA provider will use the PAC responder if the Kerberos tickets of users "
"from trusted realms contain a PAC. To make configuration easier the PAC "
"responder is started automatically if the IPA ID provider is configured."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:78
msgid "ipa_domain (string)"
msgstr "ipa_domain (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:81
msgid ""
"Specifies the name of the IPA domain.  This is optional. If not provided, "
"the configuration domain name is used."
msgstr ""
"Especifica el nom del domini IPA.  Això és opcional. Si no s'especifica "
"s'utilitza el nom de domini de la configuració."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:89
msgid "ipa_server, ipa_backup_server (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:92
msgid ""
"The comma-separated list of IP addresses or hostnames of the IPA servers to "
"which SSSD should connect in the order of preference. For more information "
"on failover and server redundancy, see the <quote>FAILOVER</quote> section.  "
"This is optional if autodiscovery is enabled.  For more information on "
"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:105
msgid "ipa_hostname (string)"
msgstr "ipa_hostname (cadeba)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:108
msgid ""
"Optional. May be set on machines where the hostname(5) does not reflect the "
"fully qualified name used in the IPA domain to identify this host."
msgstr ""
"Opcional. Es pot definir en màquines on el hostname(5) no reflecteix el nom "
"complet utilitzat en el domini d'IPA per identificar aquest amfitrió."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:116 sssd-ad.5.xml:676
msgid "dyndns_update (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:119
msgid ""
"Optional. This option tells SSSD to automatically update the DNS server "
"built into FreeIPA v2 with the IP address of this client. The update is "
"secured using GSS-TSIG. The IP address of the IPA LDAP connection is used "
"for the updates, if it is not otherwise specified by using the "
"<quote>dyndns_iface</quote> option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:128 sssd-ad.5.xml:690
msgid ""
"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
"the default Kerberos realm must be set properly in /etc/krb5.conf"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:133
msgid ""
"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_update</"
"emphasis> option, users should migrate to using <emphasis>dyndns_update</"
"emphasis> in their config file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:145 sssd-ad.5.xml:701
msgid "dyndns_ttl (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:148 sssd-ad.5.xml:704
msgid ""
"The TTL to apply to the client DNS record when updating it.  If "
"dyndns_update is false this has no effect. This will override the TTL "
"serverside if set by an administrator."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:153
msgid ""
"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_ttl</"
"emphasis> option, users should migrate to using <emphasis>dyndns_ttl</"
"emphasis> in their config file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:159
msgid "Default: 1200 (seconds)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:165 sssd-ad.5.xml:715
msgid "dyndns_iface (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:168 sssd-ad.5.xml:718
msgid ""
"Optional. Applicable only when dyndns_update is true. Choose the interface "
"whose IP address should be used for dynamic DNS updates."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:173
msgid ""
"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_iface</"
"emphasis> option, users should migrate to using <emphasis>dyndns_iface</"
"emphasis> in their config file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:179
msgid "Default: Use the IP address of the IPA LDAP connection"
msgstr "Per defecte: Utilitzar l'adreça IP de la connexió LDAP d'IPA"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:185
msgid "ipa_enable_dns_sites (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:188 sssd-ad.5.xml:152
msgid "Enables DNS sites - location based service discovery."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:192
msgid ""
"If true and service discovery (see Service Discovery paragraph at the bottom "
"of the man page)  is enabled, then the SSSD will first attempt location "
"based discovery using a query that contains \"_location.hostname.example.com"
"\" and then fall back to traditional SRV discovery. If the location based "
"discovery succeeds, the IPA servers located with the location based "
"discovery are treated as primary servers and the IPA servers located using "
"the traditional SRV discovery are used as back up servers"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:211 sssd-ad.5.xml:729
msgid "dyndns_refresh_interval (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:214 sssd-ad.5.xml:732
msgid ""
"How often should the back end perform periodic DNS update in addition to the "
"automatic update performed when the back end goes online.  This option is "
"optional and applicable only when dyndns_update is true."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:227 sssd-ad.5.xml:745
msgid "dyndns_update_ptr (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:230 sssd-ad.5.xml:748
msgid ""
"Whether the PTR record should also be explicitly updated when updating the "
"client's DNS records.  Applicable only when dyndns_update is true."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:235
msgid ""
"This option should be False in most IPA deployments as the IPA server "
"generates the PTR records automatically when forward records are changed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:241
msgid "Default: False (disabled)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:247 sssd-ad.5.xml:759
msgid "dyndns_force_tcp (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:250 sssd-ad.5.xml:762
msgid ""
"Whether the nsupdate utility should default to using TCP for communicating "
"with the DNS server."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:254 sssd-ad.5.xml:766
msgid "Default: False (let nsupdate choose the protocol)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:260
msgid "ipa_hbac_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:263
msgid "Optional. Use the given string as search base for HBAC related objects."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:267
msgid "Default: Use base DN"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:273
msgid "ipa_host_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:276
msgid "Optional. Use the given string as search base for host objects."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:280 sssd-ipa.5.xml:299 sssd-ipa.5.xml:318 sssd-ipa.5.xml:337
#: sssd-ipa.5.xml:356
msgid ""
"See <quote>ldap_search_base</quote> for information about configuring "
"multiple search bases."
msgstr ""

#. type: Content of: <listitem><para>
#: sssd-ipa.5.xml:285 sssd-ipa.5.xml:304 include/ldap_search_bases.xml:27
msgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
msgstr "Per defecte: el valor de <emphasis>ldap_search_base</emphasis>"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:292
msgid "ipa_selinux_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:295
msgid "Optional. Use the given string as search base for SELinux user maps."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:311
msgid "ipa_subdomains_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:314
msgid "Optional. Use the given string as search base for trusted domains."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:323
msgid "Default: the value of <emphasis>cn=trusts,%basedn</emphasis>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:330
msgid "ipa_master_domain_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:333
msgid "Optional. Use the given string as search base for master domain object."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:342
msgid "Default: the value of <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:349
msgid "ipa_views_search_base (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:352
msgid "Optional. Use the given string as search base for views containers."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:361
msgid "Default: the value of <emphasis>cn=views,cn=accounts,%basedn</emphasis>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:368 sssd-krb5.5.xml:245
msgid "krb5_validate (boolean)"
msgstr "krb5_validate (booleà)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:371
msgid ""
"Verify with the help of krb5_keytab that the TGT obtained has not been "
"spoofed."
msgstr ""
"Comproveu amb l'ajuda de krb5_keytab que la TGT obtinguda no ha sigut "
"suplantada."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:378 sssd-ad.5.xml:787
msgid ""
"Note that this default differs from the traditional Kerberos provider back "
"end."
msgstr ""
"Tingueu en compte que aquesta opció per defecte difereix del tradicional "
"proveïdor Kerberos."

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:388
msgid ""
"The name of the Kerberos realm. This is optional and defaults to the value "
"of <quote>ipa_domain</quote>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:392
msgid ""
"The name of the Kerberos realm has a special meaning in IPA - it is "
"converted into the base DN to use for performing LDAP operations."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:403
msgid ""
"Specifies if the host and user principal should be canonicalized when "
"connecting to IPA LDAP and also for AS requests. This feature is available "
"with MIT Kerberos >= 1.7"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:416 sssd-krb5.5.xml:407
msgid "krb5_use_fast (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:419 sssd-krb5.5.xml:410
msgid ""
"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
"authentication. The following options are supported:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:424
msgid "<emphasis>never</emphasis> use FAST."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:427
msgid ""
"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
"continue the authentication without it. This is equivalent to not setting "
"this option at all."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:433 sssd-krb5.5.xml:424
msgid ""
"<emphasis>demand</emphasis> to use FAST. The authentication fails if the "
"server does not require fast."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:438
msgid "Default: try"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:441 sssd-krb5.5.xml:435
msgid ""
"NOTE: SSSD supports FAST only with MIT Kerberos version 1.8 and later. If "
"SSSD is used with an older version of MIT Kerberos, using this option is a "
"configuration error."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:450 sssd-ad.5.xml:794
#, fuzzy
#| msgid "krb5_realm (string)"
msgid "krb5_confd_path (string)"
msgstr "krb5_realm (cadena)"

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:453 sssd-ad.5.xml:797
msgid ""
"Absolute path of a directory where SSSD should place Kerberos configuration "
"snippets."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:457 sssd-ad.5.xml:801
msgid ""
"To disable the creation of the configuration snippets set the parameter to "
"'none'."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:461 sssd-ad.5.xml:805
msgid ""
"Default: not set (krb5.include.d subdirectory of SSSD's pubconf directory)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:468
msgid "ipa_hbac_refresh (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:471
msgid ""
"The amount of time between lookups of the HBAC rules against the IPA server. "
"This will reduce the latency and load on the IPA server if there are many "
"access-control requests made in a short period."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:478 sssd-ipa.5.xml:494 sssd-ad.5.xml:330
msgid "Default: 5 (seconds)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:484
msgid "ipa_hbac_selinux (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:487
msgid ""
"The amount of time between lookups of the SELinux maps against the IPA "
"server. This will reduce the latency and load on the IPA server if there are "
"many user login requests made in a short period."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:500
msgid "ipa_hbac_treat_deny_as (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:503
msgid ""
"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
"client will support two modes of operation during this transition period:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:512
msgid ""
"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
"users will be denied access."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:517
msgid ""
"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
"careful with this option, as it may result in opening unintended access."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:522
msgid "Default: DENY_ALL"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:528
msgid "ipa_server_mode (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:531
msgid "This option should only be set by the IPA installer."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:535
msgid ""
"The option denotes that the SSSD is running on IPA server and should perform "
"lookups of users and groups from trusted domains differently."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:546
msgid "ipa_automount_location (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:549
msgid "The automounter location this IPA client will be using"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:552
msgid "Default: The location named \"default\""
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sssd-ipa.5.xml:560
msgid "VIEWS AND OVERRIDES"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:569
msgid "ipa_view_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:572
msgid "Objectclass of the view container."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:575
msgid "Default: nsContainer"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:581
msgid "ipa_view_name (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:584
msgid "Name of the attribute holding the name of the view."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:594
msgid "ipa_overide_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:597
msgid "Objectclass of the override objects."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:600
msgid "Default: ipaOverrideAnchor"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:606
msgid "ipa_anchor_uuid (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:609
msgid ""
"Name of the attribute containing the reference to the original object in a "
"remote domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:613
msgid "Default: ipaAnchorUUID"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:619
msgid "ipa_user_override_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:622
msgid ""
"Name of the objectclass for user overrides. It is used to determine if the "
"found override object is related to a user or a group."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:627
msgid "User overrides can contain attributes given by"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:630
msgid "ldap_user_name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:633
msgid "ldap_user_uid_number"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:636
msgid "ldap_user_gid_number"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:639
msgid "ldap_user_gecos"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:642
msgid "ldap_user_home_directory"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:645
msgid "ldap_user_shell"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:648
msgid "ldap_user_ssh_public_key"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:653
msgid "Default: ipaUserOverride"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
#: sssd-ipa.5.xml:659
msgid "ipa_group_override_object_class (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:662
msgid ""
"Name of the objectclass for group overrides. It is used to determine if the "
"found override object is related to a user or a group."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:667
msgid "Group overrides can contain attributes given by"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:670
msgid "ldap_group_name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ipa.5.xml:673
msgid "ldap_group_gid_number"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:678
msgid "Default: ipaGroupOverride"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sssd-ipa.5.xml:562
msgid ""
"SSSD can handle views and overrides which are offered by FreeIPA 4.1 and "
"later version. Since all paths and objectclasses are fixed on the server "
"side there is basically no need to configure anything. For completeness the "
"related options are listed here with their default values.  <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-ipa.5.xml:688
msgid "SUBDOMAINS PROVIDER"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:690
msgid ""
"The IPA subdomains provider behaves slightly differently if it is configured "
"explicitly or implicitly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:694
msgid ""
"If the option 'subdomains_provider = ipa' is found in the domain section of "
"sssd.conf, the IPA subdomains provider is configured explicitly, and all "
"subdomain requests are sent to the IPA server if necessary."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:700
msgid ""
"If the option 'subdomains_provider' is not set in the domain section of sssd."
"conf but there is the option 'id_provider = ipa', the IPA subdomains "
"provider is configured implicitly. In this case, if a subdomain request "
"fails and indicates that the server does not support subdomains, i.e. is not "
"configured for trusts, the IPA subdomains provider is disabled. After an "
"hour or after the IPA provider goes online, the subdomains provider is "
"enabled again."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ipa.5.xml:717
msgid ""
"The following example assumes that SSSD is correctly configured and example."
"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
"This examples shows only the ipa provider-specific options."
msgstr ""
"L'exemple següent pressuposa que l'SSD està configurat correctament i "
"example.com és un dels dominis de la secció <replaceable>[sssd]</"
"replaceable>. Aquest exemple mostra només opcions específiques del proveïdor "
"IPA."

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ipa.5.xml:724
#, no-wrap
msgid ""
"    [domain/example.com]\n"
"    id_provider = ipa\n"
"    ipa_server = ipaserver.example.com\n"
"    ipa_hostname = myhost.example.com\n"
msgstr ""
"    [domain/example.com]\n"
"    id_provider = ipa\n"
"    ipa_server = ipaserver.example.com\n"
"    ipa_hostname = myhost.example.com\n"

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-ad.5.xml:10 sssd-ad.5.xml:16
msgid "sssd-ad"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-ad.5.xml:17
msgid "SSSD Active Directory provider"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:23
msgid ""
"This manual page describes the configuration of the AD provider for "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:36
msgid ""
"The AD provider is a back end used to connect to an Active Directory server. "
"This provider requires that the machine be joined to the AD domain and a "
"keytab is available."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:41
msgid ""
"The AD provider supports connecting to Active Directory 2008 R2 or later. "
"Earlier versions may work, but are unsupported."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:45
msgid ""
"The AD provider is able to provide identity information and authentication "
"for entities from trusted domains as well. Currently only trusted domains in "
"the same forest are recognized."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:50
msgid ""
"The AD provider accepts the same options used by the <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
"provider with some exceptions described below."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:62
msgid ""
"However, it is neither necessary nor recommended to set these options. The "
"AD provider can also be used as an access, chpass and sudo provider. No "
"configuration of the access provider is required on the client side."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:74
#, no-wrap
msgid ""
"ldap_id_mapping = False\n"
"            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:68
msgid ""
"By default, the AD provider will map UID and GID values from the objectSID "
"parameter in Active Directory. For details on this, see the <quote>ID "
"MAPPING</quote> section below. If you want to disable ID mapping and instead "
"rely on POSIX attributes defined in Active Directory, you should set "
"<placeholder type=\"programlisting\" id=\"0\"/> In order to retrieve users "
"and groups using POSIX attributes from trusted domains, the AD administrator "
"must make sure that the POSIX attributes are replicated to the Global "
"Catalog."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:81
msgid ""
"Users, groups and other entities served by SSSD are always treated as case-"
"insensitive in the AD provider for compatibility with Active Directory's "
"LDAP implementation."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:96
msgid "ad_domain (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:99
msgid ""
"Specifies the name of the Active Directory domain.  This is optional. If not "
"provided, the configuration domain name is used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:104
msgid ""
"For proper operation, this option should be specified as the lower-case "
"version of the long version of the Active Directory domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:109
msgid ""
"The short domain name (also known as the NetBIOS or the flat name) is "
"autodetected by the SSSD."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:116
msgid "ad_server, ad_backup_server (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:119
msgid ""
"The comma-separated list of hostnames of the AD servers to which SSSD should "
"connect in order of preference. For more information on failover and server "
"redundancy, see the <quote>FAILOVER</quote> section.  This is optional if "
"autodiscovery is enabled.  For more information on service discovery, refer "
"to the <quote>SERVICE DISCOVERY</quote> section."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:132
msgid "ad_hostname (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:135
msgid ""
"Optional. May be set on machines where the hostname(5) does not reflect the "
"fully qualified name used in the Active Directory domain to identify this "
"host."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:141
msgid ""
"This field is used to determine the host principal in use in the keytab. It "
"must match the hostname for which the keytab was issued."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:149
msgid "ad_enable_dns_sites (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:156
msgid ""
"If true and service discovery (see Service Discovery paragraph at the bottom "
"of the man page)  is enabled, the SSSD will first attempt to discover the "
"Active Directory server to connect to using the Active Directory Site "
"Discovery and fall back to the DNS SRV records if no AD site is found. The "
"DNS SRV configuration, including the discovery domain, is used during site "
"discovery as well."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:172
msgid "ad_access_filter (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:175
msgid ""
"This option specifies LDAP access control filter that the user must match in "
"order to be allowed access. Please note that the <quote>access_provider</"
"quote> option must be explicitly set to <quote>ad</quote> in order for this "
"option to have an effect."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:183
msgid ""
"The option also supports specifying different filters per domain or forest. "
"This extended filter would consist of: <quote>KEYWORD:NAME:FILTER</quote>.  "
"The keyword can be either <quote>DOM</quote>, <quote>FOREST</quote> or "
"missing."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:191
msgid ""
"If the keyword equals to <quote>DOM</quote> or is missing, then <quote>NAME</"
"quote> specifies the domain or subdomain the filter applies to.  If the "
"keyword equals to <quote>FOREST</quote>, then the filter equals to all "
"domains from the forest specified by <quote>NAME</quote>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:199
msgid ""
"Multiple filters can be separated with the <quote>?</quote> character, "
"similarly to how search bases work."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:204
msgid ""
"The most specific match is always used. For example, if the option specified "
"filter for a domain the user is a member of and a global filter, the per-"
"domain filter would be applied.  If there are more matches with the same "
"specification, the first one is used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
#: sssd-ad.5.xml:215
#, no-wrap
msgid ""
"# apply filter on domain called dom1 only:\n"
"dom1:(memberOf=cn=admins,ou=groups,dc=dom1,dc=com)\n"
"\n"
"# apply filter on domain called dom2 only:\n"
"DOM:dom2:(memberOf=cn=admins,ou=groups,dc=dom2,dc=com)\n"
"\n"
"# apply filter on forest called EXAMPLE.COM only:\n"
"FOREST:EXAMPLE.COM:(memberOf=cn=admins,ou=groups,dc=example,dc=com)\n"
"                        "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:225
msgid "Default: Not set"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:231
msgid "ad_enable_gc (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:234
msgid ""
"By default, the SSSD connects to the Global Catalog first to retrieve users "
"from trusted domains and uses the LDAP port to retrieve group memberships or "
"as a fallback. Disabling this option makes the SSSD only connect to the LDAP "
"port of the current AD server."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:242
msgid ""
"Please note that disabling Global Catalog support does not disable "
"retrieving users from trusted domains. The SSSD would connect to the LDAP "
"port of trusted domains instead. However, Global Catalog must be used in "
"order to resolve cross-domain group memberships."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:256
msgid "ad_gpo_access_control (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:259
msgid ""
"This option specifies the operation mode for GPO-based access control "
"functionality: whether it operates in disabled mode, enforcing mode, or "
"permissive mode. Please note that the <quote>access_provider</quote> option "
"must be explicitly set to <quote>ad</quote> in order for this option to have "
"an effect."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:268
msgid ""
"GPO-based access control functionality uses GPO policy settings to determine "
"whether or not a particular user is allowed to logon to a particular host."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:274
msgid ""
"NOTE: If the operation mode is set to enforcing, it is possible that users "
"that were previously allowed logon access will now be denied logon access "
"(as dictated by the GPO policy settings). In order to facilitate a smooth "
"transition for administrators, a permissive mode is available that will not "
"enforce the access control rules, but will evaluate them and will output a "
"syslog message if access would have been denied. By examining the logs, "
"administrators can then make the necessary changes before setting the mode "
"to enforcing."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:287
msgid "There are three supported values for this option:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:291
msgid ""
"disabled: GPO-based access control rules are neither evaluated nor enforced."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:297
msgid "enforcing: GPO-based access control rules are evaluated and enforced."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:303
msgid ""
"permissive: GPO-based access control rules are evaluated, but not enforced.  "
"Instead, a syslog message will be emitted indicating that the user would "
"have been denied access if this option's value were set to enforcing."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:314
msgid "Default: permissive"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:320
msgid "ad_gpo_cache_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:323
msgid ""
"The amount of time between lookups of GPO policy files against the AD "
"server. This will reduce the latency and load on the AD server if there are "
"many access-control requests made in a short period."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:336
msgid "ad_gpo_map_interactive (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:339
msgid ""
"A comma-separated list of PAM service names for which GPO-based access "
"control is evaluated based on the InteractiveLogonRight and "
"DenyInteractiveLogonRight policy settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:345
msgid ""
"Note: Using the Group Policy Management Editor this value "
"InteractiveLogonRight is called \"Allow log on locally\" and \"Deny log on "
"locally\"."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:359
#, no-wrap
msgid ""
"                              ad_gpo_map_interactive = +my_pam_service, -login\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:350
msgid ""
"It is possible to add another PAM service name to the default set by using "
"<quote>+service_name</quote> or to explicitly remove a PAM service name from "
"the default set by using <quote>-service_name</quote>.  For example, in "
"order to replace a default PAM service name for this logon right (e.g. "
"<quote>login</quote>)  with a custom pam service name (e.g. "
"<quote>my_pam_service</quote>), you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:363 sssd-ad.5.xml:434 sssd-ad.5.xml:469 sssd-ad.5.xml:509
#: sssd-ad.5.xml:570
msgid "Default: the default set of PAM service names includes:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:367
msgid "login"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:372
msgid "su"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:377
msgid "su-l"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:382
msgid "gdm-fingerprint"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:387
msgid "gdm-password"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:392
msgid "gdm-smartcard"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:397
msgid "kdm"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:406
msgid "ad_gpo_map_remote_interactive (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:409
msgid ""
"A comma-separated list of PAM service names for which GPO-based access "
"control is evaluated based on the RemoteInteractiveLogonRight and "
"DenyRemoteInteractiveLogonRight policy settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:415
msgid ""
"Note: Using the Group Policy Management Editor this value is called \"Allow "
"log on through Remote Desktop Services\" and \"Deny log on through Remote "
"Desktop Services\"."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:430
#, no-wrap
msgid ""
"                              ad_gpo_map_remote_interactive = +my_pam_service, -sshd\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:421
msgid ""
"It is possible to add another PAM service name to the default set by using "
"<quote>+service_name</quote> or to explicitly remove a PAM service name from "
"the default set by using <quote>-service_name</quote>.  For example, in "
"order to replace a default PAM service name for this logon right (e.g. "
"<quote>sshd</quote>)  with a custom pam service name (e.g. "
"<quote>my_pam_service</quote>), you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:438
msgid "sshd"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:447
msgid "ad_gpo_map_network (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:450
msgid ""
"A comma-separated list of PAM service names for which GPO-based access "
"control is evaluated based on the NetworkLogonRight and "
"DenyNetworkLogonRight policy settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:465
#, no-wrap
msgid ""
"                              ad_gpo_map_network = +my_pam_service, -ftp\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:456
msgid ""
"It is possible to add another PAM service name to the default set by using "
"<quote>+service_name</quote> or to explicitly remove a PAM service name from "
"the default set by using <quote>-service_name</quote>.  For example, in "
"order to replace a default PAM service name for this logon right (e.g. "
"<quote>ftp</quote>)  with a custom pam service name (e.g. "
"<quote>my_pam_service</quote>), you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:473
msgid "ftp"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:478
msgid "samba"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:487
msgid "ad_gpo_map_batch (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:490
msgid ""
"A comma-separated list of PAM service names for which GPO-based access "
"control is evaluated based on the BatchLogonRight and DenyBatchLogonRight "
"policy settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:505
#, no-wrap
msgid ""
"                              ad_gpo_map_batch = +my_pam_service, -crond\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:496
msgid ""
"It is possible to add another PAM service name to the default set by using "
"<quote>+service_name</quote> or to explicitly remove a PAM service name from "
"the default set by using <quote>-service_name</quote>.  For example, in "
"order to replace a default PAM service name for this logon right (e.g. "
"<quote>crond</quote>)  with a custom pam service name (e.g. "
"<quote>my_pam_service</quote>), you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:513
msgid "crond"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:522
msgid "ad_gpo_map_service (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:525
msgid ""
"A comma-separated list of PAM service names for which GPO-based access "
"control is evaluated based on the ServiceLogonRight and "
"DenyServiceLogonRight policy settings."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:539
#, no-wrap
msgid ""
"                              ad_gpo_map_service = +my_pam_service\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:531 sssd-ad.5.xml:596
msgid ""
"It is possible to add a PAM service name to the default set by using <quote>"
"+service_name</quote>.  Since the default set is empty, it is not possible "
"to remove a PAM service name from the default set.  For example, in order to "
"add a custom pam service name (e.g. <quote>my_pam_service</quote>), you "
"would use the following configuration: <placeholder type=\"programlisting\" "
"id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:549
msgid "ad_gpo_map_permit (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:552
msgid ""
"A comma-separated list of PAM service names for which GPO-based access is "
"always granted, regardless of any GPO Logon Rights."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:566
#, no-wrap
msgid ""
"                              ad_gpo_map_permit = +my_pam_service, -sudo\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:557
msgid ""
"It is possible to add another PAM service name to the default set by using "
"<quote>+service_name</quote> or to explicitly remove a PAM service name from "
"the default set by using <quote>-service_name</quote>.  For example, in "
"order to replace a default PAM service name for unconditionally permitted "
"access (e.g. <quote>sudo</quote>)  with a custom pam service name (e.g. "
"<quote>my_pam_service</quote>), you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:574
msgid "sudo"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:579
msgid "sudo-i"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:588
msgid "ad_gpo_map_deny (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:591
msgid ""
"A comma-separated list of PAM service names for which GPO-based access is "
"always denied, regardless of any GPO Logon Rights."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ad.5.xml:604
#, no-wrap
msgid ""
"                              ad_gpo_map_deny = +my_pam_service\n"
"                            "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:614
msgid "ad_gpo_default_right (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:617
msgid ""
"This option defines how access control is evaluated for PAM service names "
"that are not explicitly listed in one of the ad_gpo_map_* options. This "
"option can be set in two different manners. First, this option can be set to "
"use a default logon right. For example, if this option is set to "
"'interactive', it means that unmapped PAM service names will be processed "
"based on the InteractiveLogonRight and DenyInteractiveLogonRight policy "
"settings. Alternatively, this option can be set to either always permit or "
"always deny access for unmapped PAM service names."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:630
msgid "Supported values for this option include:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:634
msgid "interactive"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:639
msgid "remote_interactive"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:644
msgid "network"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:649
msgid "batch"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:654
msgid "service"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:659
msgid "permit"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
#: sssd-ad.5.xml:664
msgid "deny"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:670
msgid "Default: deny"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:679
msgid ""
"Optional. This option tells SSSD to automatically update the Active "
"Directory DNS server with the IP address of this client. The update is "
"secured using GSS-TSIG. As a consequence, the Active Directory administrator "
"only needs to allow secure updates for the DNS zone. The IP address of the "
"AD LDAP connection is used for the updates, if it is not otherwise specified "
"by using the <quote>dyndns_iface</quote> option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:709
msgid "Default: 3600 (seconds)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:723
msgid "Default: Use the IP address of the AD LDAP connection"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:753 sss_rpcidmapd.5.xml:76
msgid "Default: True"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-ad.5.xml:775 sssd-krb5.5.xml:496
msgid "krb5_use_enterprise_principal (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ad.5.xml:778 sssd-krb5.5.xml:499
msgid ""
"Specifies if the user principal should be treated as enterprise principal. "
"See section 5 of RFC 6806 for more details about enterprise principals."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:823
msgid ""
"The following example assumes that SSSD is correctly configured and example."
"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
"This example shows only the AD provider-specific options."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:830
#, no-wrap
msgid ""
"[domain/EXAMPLE]\n"
"id_provider = ad\n"
"auth_provider = ad\n"
"access_provider = ad\n"
"chpass_provider = ad\n"
"\n"
"ad_server = dc1.example.com\n"
"ad_hostname = client.example.com\n"
"ad_domain = example.com\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-ad.5.xml:850
#, no-wrap
msgid ""
"access_provider = ldap\n"
"ldap_access_order = expire\n"
"ldap_account_expire_policy = ad\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:846
msgid ""
"The AD access control provider checks if the account is expired.  It has the "
"same effect as the following configuration of the LDAP provider: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ad.5.xml:856
msgid ""
"However, unless the <quote>ad</quote> access control provider is explicitly "
"configured, the default access provider is <quote>permit</quote>. Please "
"note that if you configure an access provider other than <quote>ad</quote>, "
"you need to set all the connection parameters (such as LDAP URIs and "
"encryption details) manually."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-sudo.5.xml:10 sssd-sudo.5.xml:16
msgid "sssd-sudo"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-sudo.5.xml:17
msgid "Configuring sudo with the SSSD back end"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:23
msgid ""
"This manual page describes how to configure <citerefentry> "
"<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </citerefentry> "
"to work with <citerefentry> <refentrytitle>sssd</refentrytitle> "
"<manvolnum>8</manvolnum> </citerefentry> and how SSSD caches sudo rules."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-sudo.5.xml:36
msgid "Configuring sudo to cooperate with SSSD"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:38
msgid ""
"To enable SSSD as a source for sudo rules, add <emphasis>sss</emphasis> to "
"the <emphasis>sudoers</emphasis> entry in <citerefentry> "
"<refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:47
msgid ""
"For example, to configure sudo to first lookup rules in the standard "
"<citerefentry> <refentrytitle>sudoers</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> file (which should contain rules that apply to "
"local users) and then in SSSD, the nsswitch.conf file should contain the "
"following line:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-sudo.5.xml:57
#, no-wrap
msgid "sudoers: files sss\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:61
msgid ""
"More information about configuring the sudoers search order from the "
"nsswitch.conf file as well as information about the LDAP schema that is used "
"to store sudo rules in the directory can be found in <citerefentry> "
"<refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:70
msgid ""
"<emphasis>Note</emphasis>: in order to use netgroups or IPA hostgroups in "
"sudo rules, you also need to correctly set <citerefentry> "
"<refentrytitle>nisdomainname</refentrytitle> <manvolnum>1</manvolnum> </"
"citerefentry> to your NIS domain name (which equals to IPA domain name when "
"using hostgroups)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-sudo.5.xml:82
msgid "Configuring SSSD to fetch sudo rules"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:84
msgid ""
"All configuration that is needed on SSSD side is to extend the list of "
"<emphasis>services</emphasis> with \"sudo\" in [sssd] section of "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry>. To speed up the LDAP lookups, you can also set "
"search base for sudo rules using <emphasis>ldap_sudo_search_base</emphasis> "
"option."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:94
msgid ""
"The following example shows how to configure SSSD to download sudo rules "
"from an LDAP server."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-sudo.5.xml:99
#, no-wrap
msgid ""
"[sssd]\n"
"config_file_version = 2\n"
"services = nss, pam, sudo\n"
"domains = EXAMPLE\n"
"\n"
"[domain/EXAMPLE]\n"
"id_provider = ldap\n"
"sudo_provider = ldap\n"
"ldap_uri = ldap://example.com\n"
"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:112
msgid ""
"When the SSSD is configured to use IPA as the ID provider, the sudo provider "
"is automatically enabled. The sudo search base is configured to use the "
"compat tree (ou=sudoers,$DC)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd-sudo.5.xml:119
msgid "The SUDO rule caching mechanism"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:121
msgid ""
"The biggest challenge, when developing sudo support in SSSD, was to ensure "
"that running sudo with SSSD as the data source provides the same user "
"experience and is as fast as sudo but keeps providing the most current set "
"of rules as possible. To satisfy these requirements, SSSD uses three kinds "
"of updates. They are referred to as full refresh, smart refresh and rules "
"refresh."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:129
msgid ""
"The <emphasis>smart refresh</emphasis> periodically downloads rules that are "
"new or were modified after the last update. Its primary goal is to keep the "
"database growing by fetching only small increments that do not generate "
"large amounts of network traffic."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:135
msgid ""
"The <emphasis>full refresh</emphasis> simply deletes all sudo rules stored "
"in the cache and replaces them with all rules that are stored on the server. "
"This is used to keep the cache consistent by removing every rule which was "
"deleted from the server. However, full refresh may produce a lot of traffic "
"and thus it should be run only occasionally depending on the size and "
"stability of the sudo rules."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:143
msgid ""
"The <emphasis>rules refresh</emphasis> ensures that we do not grant the user "
"more permission than defined. It is triggered each time the user runs sudo. "
"Rules refresh will find all rules that apply to this user, check their "
"expiration time and redownload them if expired.  In the case that any of "
"these rules are missing on the server, the SSSD will do an out of band full "
"refresh because more rules (that apply to other users) may have been deleted."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:152
msgid ""
"If enabled, SSSD will store only rules that can be applied to this machine. "
"This means rules that contain one of the following values in "
"<emphasis>sudoHost</emphasis> attribute:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:159
msgid "keyword ALL"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:164
msgid "wildcard"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:169
msgid "netgroup (in the form \"+netgroup\")"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:174
msgid "hostname or fully qualified domain name of this machine"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:179
msgid "one of the IP addresses of this machine"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
#: sssd-sudo.5.xml:184
msgid "one of the IP addresses of the network (in the form \"address/mask\")"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-sudo.5.xml:190
msgid ""
"There are many configuration options that can be used to adjust the "
"behavior. Please refer to \"ldap_sudo_*\" in <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> and \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd.8.xml:10 sssd.8.xml:15
msgid "sssd"
msgstr "sssd"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd.8.xml:16
msgid "System Security Services Daemon"
msgstr "Dimoni de Serveis de Seguretat de Sistema"

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sssd.8.xml:21
msgid ""
"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg>"
msgstr ""
"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:31
msgid ""
"<command>SSSD</command> provides a set of daemons to manage access to remote "
"directories and authentication mechanisms. It provides an NSS and PAM "
"interface toward the system and a pluggable backend system to connect to "
"multiple different account sources as well as D-Bus interface. It is also "
"the basis to provide client auditing and policy services for projects like "
"FreeIPA. It provides a more robust database to store local users as well as "
"extended user data."
msgstr ""
"L'<command>SSSD</command> proporciona un conjunt de dimonis per gestionar "
"l'accés a directoris remots i mecanismes d'autenticació. Proporciona una "
"interfície NSS i PAM cap el sistema i un mètode d'afegitons per connectar a "
"múltiples fonts de comptes diferents així com a l'interfície D-Bus. També és "
"la base per proporcionar auditació de clients i polítiques de serveis per a "
"projectes com FreeIPA. Proporciona una base de dades més robusta on "
"emmagatzemar usuaris locals, així com dades addicionals d'usuari."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:46
msgid ""
"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
"replaceable>"
msgstr ""
"<option>-d</option>,<option>--debug-level</option> <replaceable>NIVELL</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:53
msgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:57
msgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:60
msgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:69
msgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:73
msgid ""
"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:76
msgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:85
msgid "<option>-f</option>,<option>--debug-to-files</option>"
msgstr "<option>-f</option>,<option>--debug-to-files</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:89
msgid ""
"Send the debug output to files instead of stderr. By default, the log files "
"are stored in <filename>/var/log/sssd</filename> and there are separate log "
"files for every SSSD service and domain."
msgstr ""
"Envia la sortida de depuració a fitxers en comptes d'stderr. Per defecte els "
"fitxers de registre s'emmagatzemen a <filename>/var/log/sssd</filename> i hi "
"ha fitxers de registre separats per a cada servei d'SSSD i domini."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:97
msgid "<option>-D</option>,<option>--daemon</option>"
msgstr "<option>-D</option>,<option>--daemon</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:101
msgid "Become a daemon after starting up."
msgstr "Esdevé un dimoni després d'iniciar-se."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:107 sss_seed.8.xml:136
msgid "<option>-i</option>,<option>--interactive</option>"
msgstr "<option>-i</option>,<option>--interactive</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:111
msgid "Run in the foreground, don't become a daemon."
msgstr "Executa en primer pla, no esdevenir un dimoni."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:117 sss_debuglevel.8.xml:42
msgid "<option>-c</option>,<option>--config</option>"
msgstr "<option>-c</option>,<option>--config</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:121 sss_debuglevel.8.xml:46
msgid ""
"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
"conf</filename>. For reference on the config file syntax and options, "
"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry> manual page."
msgstr ""
"Especifi un fitxer de configuració direfent al per defecte. Per defecte és "
"<filename>/etc/sssd/sssd.conf</filename>. Per consultar a la sintaxi del "
"fitxer de configuració i les opcions, aneu a la pàgina del manual "
"<citerefentry>d'<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry>."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:135
msgid "<option>--version</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:139
msgid "Print version number and exit."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sssd.8.xml:147
msgid "Signals"
msgstr "Senyals"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:150
msgid "SIGTERM/SIGINT"
msgstr "SIGTERM/SIGINT"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:153
msgid ""
"Informs the SSSD to gracefully terminate all of its child processes and then "
"shut down the monitor."
msgstr ""
"Informa l'SSSD per finalitzar elegantment tots els seus processos fil i "
"llavors apagar el monitor."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:159
msgid "SIGHUP"
msgstr "SIGHUP"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:162
msgid ""
"Tells the SSSD to stop writing to its current debug file descriptors and to "
"close and reopen them. This is meant to facilitate log rolling with programs "
"like logrotate."
msgstr ""
"Diu a l'SSSD que deixi d'escriure als actual descriptors de fitxers de "
"depuració i que els tanqui i els reobri. Això intenta facilitar la rotació "
"dels registres amb programes com logrotate."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:170
msgid "SIGUSR1"
msgstr "SIGUSR1"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:173
msgid ""
"Tells the SSSD to simulate offline operation for the duration of the "
"<quote>offline_timeout</quote> parameter. This is useful for testing. The "
"signal can be sent to either the sssd process or any sssd_be process "
"directly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sssd.8.xml:182
msgid "SIGUSR2"
msgstr "SIGUSR2"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd.8.xml:185
msgid ""
"Tells the SSSD to go online immediately. This is useful for testing. The "
"signal can be sent to either the sssd process or any sssd_be process "
"directly."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd.8.xml:197
msgid ""
"If the environment variable SSS_NSS_USE_MEMCACHE is set to \"NO\", client "
"applications will not use the fast in memory cache."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
msgid "sss_obfuscate"
msgstr "sss_obfuscate"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_obfuscate.8.xml:16
msgid "obfuscate a clear text password"
msgstr "ofusca una contrasenya de text clar"

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_obfuscate.8.xml:21
msgid ""
"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
"replaceable></arg>"
msgstr ""
"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>opcions</"
"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
"replaceable></arg>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_obfuscate.8.xml:32
msgid ""
"<command>sss_obfuscate</command> converts a given password into human-"
"unreadable format and places it into appropriate domain section of the SSSD "
"config file."
msgstr ""
"<command>sss_obfuscate</command> converteix una contrasenya especificada en "
"un format illegible per humans i la col·loca a la secció de domini adequada "
"de l'arxiu de configuració d'SSSD."

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_obfuscate.8.xml:37
msgid ""
"The cleartext password is read from standard input or entered "
"interactively.  The obfuscated password is put into "
"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
"<quote>ldap_default_authtok_type</quote> parameter is set to "
"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry> for more details on these parameters."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_obfuscate.8.xml:49
msgid ""
"Please note that obfuscating the password provides <emphasis>no real "
"security benefit</emphasis> as it is still possible for an attacker to "
"reverse-engineer the password back. Using better authentication mechanisms "
"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
"advised."
msgstr ""
"Si us plau fixi's que ofuscar contrasenyes <emphasis>no proporciona cap "
"benefici real de seguretat</emphasis> ja que un atacant encara podria "
"extreure la contrasenya amb enginyeria inversa. Es recomana "
"<emphasis>aferrissadament</emphasis> l'ús de mecanismes d'autenticació "
"millors com certificats de client o GSSAPI."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_obfuscate.8.xml:63
msgid "<option>-s</option>,<option>--stdin</option>"
msgstr "<option>-s</option>,<option>--stdin</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_obfuscate.8.xml:67
msgid "The password to obfuscate will be read from standard input."
msgstr "La contrasenya per ofuscar es llegirà de l'entrada estàndard."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:79
#: sss_ssh_knownhostsproxy.1.xml:78
msgid ""
"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
"replaceable>"
msgstr ""
"<option>-d</option>,<option>--domain</option> <replaceable>DOMINI</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_obfuscate.8.xml:79
msgid ""
"The SSSD domain to use the password in. The default name is <quote>default</"
"quote>."
msgstr ""
"El domini SSSD on utilitzar la contrasenya. El nom per defecte és "
"<quote>default</quote>."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_obfuscate.8.xml:86
msgid ""
"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
msgstr ""
"<option>-f</option>,<option>--file</option> <replaceable>FITXER</replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_obfuscate.8.xml:91
msgid "Read the config file specified by the positional parameter."
msgstr ""
"Llegeix el fitxer de configuració especificat pel paràmetre de posició."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_obfuscate.8.xml:95
msgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
msgstr "Per defecte: <filename>/etc/sssd/sssd.conf</filename>"

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
msgid "sss_useradd"
msgstr "sss_useradd"

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_useradd.8.xml:16
msgid "create a new user"
msgstr "crea un usuari nou"

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_useradd.8.xml:21
msgid ""
"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
"arg>"
msgstr ""
"<command>sss_useradd</command> <arg choice='opt'> <replaceable>OPCIONS</"
"replaceable></arg> <arg choice='plain'> <replaceable>INICI DE SESSIÓ</"
"replaceable></arg>"

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_useradd.8.xml:32
msgid ""
"<command>sss_useradd</command> creates a new user account using the values "
"specified on the command line plus the default values from the system."
msgstr ""
"<command>sss_useradd</command> crea un nou compte d'usuari utilitzant els "
"valors especificats a la línia d'ordres més els valors per defecte del "
"sistema."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:43 sss_seed.8.xml:76
msgid ""
"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
msgstr ""
"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:48
msgid ""
"Set the UID of the user to the value of <replaceable>UID</replaceable>.  If "
"not given, it is chosen automatically."
msgstr ""
"Especifica l'UID de l'usuari al valor d'<replaceable>UID</replaceable>.  Si "
"no es dóna, és seleccionat automàticament."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:55 sss_usermod.8.xml:43 sss_seed.8.xml:100
msgid ""
"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
"replaceable>"
msgstr ""
"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENTARI</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:60 sss_usermod.8.xml:48 sss_seed.8.xml:105
msgid ""
"Any text string describing the user. Often used as the field for the user's "
"full name."
msgstr ""
"Qualsevol cadena de text que descriu a l'usuari. Sovint s'utilitza com el "
"camp pel nom i cognoms de l'usuari."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:67 sss_usermod.8.xml:55 sss_seed.8.xml:112
msgid ""
"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
"replaceable>"
msgstr ""
"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:72
msgid ""
"The home directory of the user account.  The default is to append the "
"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
"that as the home directory.  The base that is prepended before "
"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
"baseDirectory</quote> setting in sssd.conf."
msgstr ""
"El directori personal del compte d'usuari.  Per defecte s'afegeix el "
"<replaceable>NOM D'USUARI</replaceable> a <filename>/ home</filename> i "
"s'utilitza allò com el directori personal.  La base que s'afegeix abans del "
"<replaceable>NOM D'USUARI</replaceable> és personalitzable amb el paràmetre "
"<quote>user_defaults/baseDirectory</quote> de l'sssd.conf."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:82 sss_usermod.8.xml:66 sss_seed.8.xml:124
msgid ""
"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
msgstr ""
"<option>-s</option>,<option>--shell</option> <replaceable>INTÈRPRET "
"D'ORDRES</replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:87
msgid ""
"The user's login shell. The default is currently <filename>/bin/bash</"
"filename>.  The default can be changed with <quote>user_defaults/"
"defaultShell</quote> setting in sssd.conf."
msgstr ""
"L'intèrpret d'ordres de l'usuari. Per defecte és <filename>/bin/bash</"
"filename>.  Es pot canviar el valor per defecte amb el paràmetre "
"<quote>user_defaults/defaultShell</quote> de l'sssd.conf."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:96
msgid ""
"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
"replaceable>"
msgstr ""
"<option>-G</option>,<option>--groups</option> <replaceable>GRUPS</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:101
msgid "A list of existing groups this user is also a member of."
msgstr "Una llista dels grups existents on n'és també membre aquest usuari."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:107
msgid "<option>-m</option>,<option>--create-home</option>"
msgstr "<option>-m</option>,<option>--create-home</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:111
msgid ""
"Create the user's home directory if it does not exist. The files and "
"directories contained in the skeleton directory (which can be defined with "
"the -k option or in the config file) will be copied to the home directory."
msgstr ""
"Crea el directori personal de l'usuari si no existeix. Al directori personal "
"es copiaran els fitxers i directoris continguts en el directori esquelet "
"(que es pot definir amb l'opció -k o en el fitxer de configuració)."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:121
msgid "<option>-M</option>,<option>--no-create-home</option>"
msgstr "<option>-M</option>,<option>--no-create-home</option>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:125
msgid ""
"Do not create the user's home directory. Overrides configuration settings."
msgstr ""
"No crea el directori personal de l'usuari. Invalida els paràmetres de "
"configuració."

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:132
msgid ""
"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
"replaceable>"
msgstr ""
"<option>-k</option>,<option>--skel</option> <replaceable>DIRECTORI ESQUELET</"
"replaceable>"

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:137
msgid ""
"The skeleton directory, which contains files and directories to be copied in "
"the user's home directory, when the home directory is created by "
"<command>sss_useradd</command>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:143
msgid ""
"Special files (block devices, character devices, named pipes and unix "
"sockets) will not be copied."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:147
msgid ""
"This option is only valid if the <option>-m</option> (or <option>--create-"
"home</option>) option is specified, or creation of home directories is set "
"to TRUE in the configuration."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_useradd.8.xml:156 sss_usermod.8.xml:124
msgid ""
"<option>-Z</option>,<option>--selinux-user</option> "
"<replaceable>SELINUX_USER</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_useradd.8.xml:161
msgid ""
"The SELinux user for the user's login. If not specified, the system default "
"will be used."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-krb5.5.xml:10 sssd-krb5.5.xml:16
msgid "sssd-krb5"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-krb5.5.xml:17
msgid "SSSD Kerberos provider"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:23
msgid ""
"This manual page describes the configuration of the Kerberos 5 "
"authentication backend for <citerefentry> <refentrytitle>sssd</"
"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>.  For a detailed "
"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> manual page."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:36
msgid ""
"The Kerberos 5 authentication backend contains auth and chpass providers. It "
"must be paired with an identity provider in order to function properly (for "
"example, id_provider = ldap). Some information required by the Kerberos 5 "
"authentication backend must be provided by the identity provider, such as "
"the user's Kerberos Principal Name (UPN). The configuration of the identity "
"provider should have an entry to specify the UPN. Please refer to the man "
"page for the applicable identity provider for details on how to configure "
"this."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:47
msgid ""
"This backend also provides access control based on the .k5login file in the "
"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
"Please note that an empty .k5login file will deny all access to this user. "
"To activate this feature, use 'access_provider = krb5' in your SSSD "
"configuration."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:55
msgid ""
"In the case where the UPN is not available in the identity backend, "
"<command>sssd</command> will construct a UPN using the format "
"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:77
msgid ""
"Specifies the comma-separated list of IP addresses or hostnames of the "
"Kerberos servers to which SSSD should connect, in the order of preference. "
"For more information on failover and server redundancy, see the "
"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
"colon) may be appended to the addresses or hostnames.  If empty, service "
"discovery is enabled; for more information, refer to the <quote>SERVICE "
"DISCOVERY</quote> section."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:106
msgid ""
"The name of the Kerberos realm. This option is required and must be "
"specified."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:113
msgid "krb5_kpasswd, krb5_backup_kpasswd (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:116
msgid ""
"If the change password service is not running on the KDC, alternative "
"servers can be defined here. An optional port number (preceded by a colon) "
"may be appended to the addresses or hostnames."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:122
msgid ""
"For more information on failover and server redundancy, see the "
"<quote>FAILOVER</quote> section.  NOTE: Even if there are no more kpasswd "
"servers to try, the backend is not switched to operate offline if "
"authentication against the KDC is still possible."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:129
msgid "Default: Use the KDC"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:135
msgid "krb5_ccachedir (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:138
msgid ""
"Directory to store credential caches. All the substitution sequences of "
"krb5_ccname_template can be used here, too, except %d and %P.  The directory "
"is created as private and owned by the user, with permissions set to 0700."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:145
msgid "Default: /tmp"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:151
msgid "krb5_ccname_template (string)"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:165 include/override_homedir.xml:11
msgid "%u"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:166 include/override_homedir.xml:12
msgid "login name"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:169 include/override_homedir.xml:15
msgid "%U"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:170
msgid "login UID"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:173
msgid "%p"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:174
msgid "principal name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:178
msgid "%r"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:179
msgid "realm name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:182
msgid "%h"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:183 sssd-ifp.5.xml:108
msgid "home directory"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:187 include/override_homedir.xml:19
msgid "%d"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:188
msgid "value of krb5_ccachedir"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:193 include/override_homedir.xml:27
msgid "%P"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:194
msgid "the process ID of the SSSD client"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:199 include/override_homedir.xml:45
msgid "%%"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:200 include/override_homedir.xml:46
msgid "a literal '%'"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:154
msgid ""
"Location of the user's credential cache. Three credential cache types are "
"currently supported: <quote>FILE</quote>, <quote>DIR</quote> and "
"<quote>KEYRING:persistent</quote>. The cache can be specified either as "
"<replaceable>TYPE:RESIDUAL</replaceable>, or as an absolute path, which "
"implies the <quote>FILE</quote> type. In the template, the following "
"sequences are substituted: <placeholder type=\"variablelist\" id=\"0\"/> If "
"the template ends with 'XXXXXX' mkstemp(3) is used to create a unique "
"filename in a safe way."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:208
msgid ""
"When using KEYRING types, the only supported mechanism is <quote>KEYRING:"
"persistent:%U</quote>, which uses the Linux kernel keyring to store "
"credentials on a per-UID basis. This is also the recommended choice, as it "
"is the most secure and predictable method."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:216
msgid ""
"The default value for the credential cache name is sourced from the profile "
"stored in the system wide krb5.conf configuration file in the [libdefaults] "
"section. The option name is default_ccache_name.  See krb5.conf(5)'s "
"PARAMETER EXPANSION paragraph for additional information on the expansion "
"format defined by krb5.conf."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:225
msgid "Default: (from libkrb5)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:231
msgid "krb5_auth_timeout (integer)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:234
msgid ""
"Timeout in seconds after an online authentication request or change password "
"request is aborted. If possible, the authentication request is continued "
"offline."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:248
msgid ""
"Verify with the help of krb5_keytab that the TGT obtained has not been "
"spoofed. The keytab is checked for entries sequentially, and the first entry "
"with a matching realm is used for validation. If no entry matches the realm, "
"the last entry in the keytab is used. This process can be used to validate "
"environments using cross-realm trust by placing the appropriate keytab entry "
"as the last entry or the only entry in the keytab file."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:263
msgid "krb5_keytab (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:266
msgid ""
"The location of the keytab to use when validating credentials obtained from "
"KDCs."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:270
msgid "Default: /etc/krb5.keytab"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:276
msgid "krb5_store_password_if_offline (boolean)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:279
msgid ""
"Store the password of the user if the provider is offline and use it to "
"request a TGT when the provider comes online again."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:284
msgid ""
"NOTE: this feature is only available on Linux.  Passwords stored in this way "
"are kept in plaintext in the kernel keyring and are potentially accessible "
"by the root user (with difficulty)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:297
msgid "krb5_renewable_lifetime (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:300
msgid ""
"Request a renewable ticket with a total lifetime, given as an integer "
"immediately followed by a time unit:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:305 sssd-krb5.5.xml:339 sssd-krb5.5.xml:376
msgid "<emphasis>s</emphasis> for seconds"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:308 sssd-krb5.5.xml:342 sssd-krb5.5.xml:379
msgid "<emphasis>m</emphasis> for minutes"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:311 sssd-krb5.5.xml:345 sssd-krb5.5.xml:382
msgid "<emphasis>h</emphasis> for hours"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:314 sssd-krb5.5.xml:348 sssd-krb5.5.xml:385
msgid "<emphasis>d</emphasis> for days."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:317 sssd-krb5.5.xml:388
msgid "If there is no unit given, <emphasis>s</emphasis> is assumed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:321 sssd-krb5.5.xml:392
msgid ""
"NOTE: It is not possible to mix units.  To set the renewable lifetime to one "
"and a half hours, use '90m' instead of '1h30m'."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:326
msgid "Default: not set, i.e. the TGT is not renewable"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:332
msgid "krb5_lifetime (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:335
msgid ""
"Request ticket with a lifetime, given as an integer immediately followed by "
"a time unit:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:351
msgid "If there is no unit given <emphasis>s</emphasis> is assumed."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:355
msgid ""
"NOTE: It is not possible to mix units.  To set the lifetime to one and a "
"half hours please use '90m' instead of '1h30m'."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:360
msgid ""
"Default: not set, i.e. the default ticket lifetime configured on the KDC."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:367
msgid "krb5_renew_interval (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:370
msgid ""
"The time in seconds between two checks if the TGT should be renewed. TGTs "
"are renewed if about half of their lifetime is exceeded, given as an integer "
"immediately followed by a time unit:"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:397
msgid "If this option is not set or is 0 the automatic renewal is disabled."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:415
msgid ""
"<emphasis>never</emphasis> use FAST. This is equivalent to not setting this "
"option at all."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:419
msgid ""
"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
"continue the authentication without it."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:429
msgid "Default: not set, i.e. FAST is not used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:432
msgid "NOTE: a keytab is required to use FAST."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd-krb5.5.xml:444
msgid "krb5_fast_principal (string)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:447
msgid "Specifies the server principal to use for FAST."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:456
msgid ""
"Specifies if the host and user principal should be canonicalized. This "
"feature is available with MIT Kerberos 1.7 and later versions."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-krb5.5.xml:505
msgid "Default: false (AD provider: true)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:65
msgid ""
"If the auth-module krb5 is used in an SSSD domain, the following options "
"must be used. See the <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page, section "
"<quote>DOMAIN SECTIONS</quote>, for details on the configuration of an SSSD "
"domain.  <placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-krb5.5.xml:521
msgid ""
"The following example assumes that SSSD is correctly configured and FOO is "
"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
"example shows only configuration of Kerberos authentication; it does not "
"include any identity provider."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sssd-krb5.5.xml:529
#, no-wrap
msgid ""
"    [domain/FOO]\n"
"    auth_provider = krb5\n"
"    krb5_server = 192.168.1.1\n"
"    krb5_realm = EXAMPLE.COM\n"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
msgid "sss_groupadd"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_groupadd.8.xml:16
msgid "create a new group"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_groupadd.8.xml:21
msgid ""
"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_groupadd.8.xml:32
msgid ""
"<command>sss_groupadd</command> creates a new group. These groups are "
"compatible with POSIX groups, with the additional feature that they can "
"contain other groups as members."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_groupadd.8.xml:43 sss_seed.8.xml:88
msgid ""
"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_groupadd.8.xml:48
msgid ""
"Set the GID of the group to the value of <replaceable>GID</replaceable>.  If "
"not given, it is chosen automatically."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
msgid "sss_userdel"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_userdel.8.xml:16
msgid "delete a user account"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_userdel.8.xml:21
msgid ""
"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_userdel.8.xml:32
msgid ""
"<command>sss_userdel</command> deletes a user identified by login name "
"<replaceable>LOGIN</replaceable> from the system."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_userdel.8.xml:44
msgid "<option>-r</option>,<option>--remove</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_userdel.8.xml:48
msgid ""
"Files in the user's home directory will be removed along with the home "
"directory itself and the user's mail spool. Overrides the configuration."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_userdel.8.xml:56
msgid "<option>-R</option>,<option>--no-remove</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_userdel.8.xml:60
msgid ""
"Files in the user's home directory will NOT be removed along with the home "
"directory itself and the user's mail spool. Overrides the configuration."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_userdel.8.xml:68
msgid "<option>-f</option>,<option>--force</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_userdel.8.xml:72
msgid ""
"This option forces <command>sss_userdel</command> to remove the user's home "
"directory and mail spool, even if they are not owned by the specified user."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_userdel.8.xml:80
msgid "<option>-k</option>,<option>--kick</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_userdel.8.xml:84
msgid "Before actually deleting the user, terminate all his processes."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
msgid "sss_groupdel"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_groupdel.8.xml:16
msgid "delete a group"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_groupdel.8.xml:21
msgid ""
"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_groupdel.8.xml:32
msgid ""
"<command>sss_groupdel</command> deletes a group identified by its name "
"<replaceable>GROUP</replaceable> from the system."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
msgid "sss_groupshow"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_groupshow.8.xml:16
msgid "print properties of a group"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_groupshow.8.xml:21
msgid ""
"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_groupshow.8.xml:32
msgid ""
"<command>sss_groupshow</command> displays information about a group "
"identified by its name <replaceable>GROUP</replaceable>. The information "
"includes the group ID number, members of the group and the parent group."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_groupshow.8.xml:43
msgid "<option>-R</option>,<option>--recursive</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_groupshow.8.xml:47
msgid ""
"Also print indirect group members in a tree-like hierarchy.  Note that this "
"also affects printing parent groups - without <option>R</option>, only the "
"direct parent will be printed."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
msgid "sss_usermod"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_usermod.8.xml:16
msgid "modify a user account"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_usermod.8.xml:21
msgid ""
"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_usermod.8.xml:32
msgid ""
"<command>sss_usermod</command> modifies the account specified by "
"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
"on the command line."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:60
msgid "The home directory of the user account."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:71
msgid "The user's login shell."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:82
msgid ""
"Append this user to groups specified by the <replaceable>GROUPS</"
"replaceable> parameter.  The <replaceable>GROUPS</replaceable> parameter is "
"a comma separated list of group names."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:96
msgid ""
"Remove this user from groups specified by the <replaceable>GROUPS</"
"replaceable> parameter."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_usermod.8.xml:103
msgid "<option>-l</option>,<option>--lock</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:107
msgid "Lock the user account. The user won't be able to log in."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_usermod.8.xml:114
msgid "<option>-u</option>,<option>--unlock</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:118
msgid "Unlock the user account."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:129
msgid "The SELinux user for the user's login."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_usermod.8.xml:135
msgid "<option>--addattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:140
msgid "Add an attribute/value pair. The format is attrname=value."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_usermod.8.xml:147
msgid "<option>--setattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:152
msgid ""
"Set an attribute to a name/value pair. The format is attrname=value. For "
"multi-valued attributes, the command replaces the values already present"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_usermod.8.xml:160
msgid "<option>--delattr</option> <replaceable>ATTR_NAME_VAL</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_usermod.8.xml:165
msgid "Delete an attribute/value pair. The format is attrname=value."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_cache.8.xml:10 sss_cache.8.xml:15
msgid "sss_cache"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_cache.8.xml:16
msgid "perform cache cleanup"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_cache.8.xml:21
msgid ""
"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_cache.8.xml:31
msgid ""
"<command>sss_cache</command> invalidates records in SSSD cache.  Invalidated "
"records are forced to be reloaded from server as soon as related SSSD "
"backend is online."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:42
msgid "<option>-E</option>,<option>--everything</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:46
msgid "Invalidate all cached entries except for sudo rules."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:52
msgid ""
"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:57
msgid "Invalidate specific user."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:63
msgid "<option>-U</option>,<option>--users</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:67
msgid ""
"Invalidate all user records. This option overrides invalidation of specific "
"user if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:74
msgid ""
"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:79
msgid "Invalidate specific group."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:85
msgid "<option>-G</option>,<option>--groups</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:89
msgid ""
"Invalidate all group records. This option overrides invalidation of specific "
"group if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:96
msgid ""
"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:101
msgid "Invalidate specific netgroup."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:107
msgid "<option>-N</option>,<option>--netgroups</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:111
msgid ""
"Invalidate all netgroup records. This option overrides invalidation of "
"specific netgroup if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:118
msgid ""
"<option>-s</option>,<option>--service</option> <replaceable>service</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:123
msgid "Invalidate specific service."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:129
msgid "<option>-S</option>,<option>--services</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:133
msgid ""
"Invalidate all service records. This option overrides invalidation of "
"specific service if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:140
msgid ""
"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:145
msgid "Invalidate specific autofs maps."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:151
msgid "<option>-A</option>,<option>--autofs-maps</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:155
msgid ""
"Invalidate all autofs maps. This option overrides invalidation of specific "
"map if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:162
msgid ""
"<option>-h</option>,<option>--ssh-host</option> <replaceable>hostname</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:167
msgid "Invalidate SSH public keys of a specific host."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:173
msgid "<option>-H</option>,<option>--ssh-hosts</option>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:177
msgid ""
"Invalidate SSH public keys of all hosts. This option overrides invalidation "
"of SSH public keys of specific host if it was also set."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_cache.8.xml:185
msgid ""
"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_cache.8.xml:190
msgid "Restrict invalidation process only to a particular domain."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
msgid "sss_debuglevel"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_debuglevel.8.xml:16
msgid "change debug level while SSSD is running"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_debuglevel.8.xml:21
msgid ""
"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
"replaceable></arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_debuglevel.8.xml:32
msgid ""
"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
"running."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_debuglevel.8.xml:59
msgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_seed.8.xml:10 sss_seed.8.xml:15
msgid "sss_seed"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_seed.8.xml:16
msgid "seed the SSSD cache with a user"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_seed.8.xml:21
msgid ""
"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
"arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_seed.8.xml:33
msgid ""
"<command>sss_seed</command> seeds the SSSD cache with a user entry and "
"temporary password. If a user entry is already present in the SSSD cache "
"then the entry is updated with the temporary password."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_seed.8.xml:46
msgid ""
"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:51
msgid ""
"Provide the name of the domain in which the user is a member of. The domain "
"is also used to retrieve user information. The domain must be configured in "
"sssd.conf. The <replaceable>DOMAIN</replaceable> option must be provided.  "
"Information retrieved from the domain overrides what is provided in the "
"options."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_seed.8.xml:63
msgid ""
"<option>-n</option>,<option>--username</option> <replaceable>USER</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:68
msgid ""
"The username of the entry to be created or modified in the cache. The "
"<replaceable>USER</replaceable> option must be provided."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:81
msgid "Set the UID of the user to <replaceable>UID</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:93
msgid "Set the GID of the user to <replaceable>GID</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:117
msgid ""
"Set the home directory of the user to <replaceable>HOME_DIR</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:129
msgid "Set the login shell of the user to <replaceable>SHELL</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:140
msgid ""
"Interactive mode for entering user information. This option will only prompt "
"for information not provided in the options or retrieved from the domain."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_seed.8.xml:148
msgid ""
"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
"replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_seed.8.xml:153
msgid ""
"Specify file to read user's password from. (if not specified password is "
"prompted for)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_seed.8.xml:165
msgid ""
"The length of the password (or the size of file specified with -p or --"
"password-file option) must be less than or equal to PASS_MAX bytes (64 bytes "
"on systems with no globally-defined PASS_MAX value)."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sssd-ifp.5.xml:10 sssd-ifp.5.xml:16
msgid "sssd-ifp"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sssd-ifp.5.xml:17
msgid "SSSD InfoPipe responder"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ifp.5.xml:23
msgid ""
"This manual page describes the configuration of the InfoPipe responder for "
"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
"</citerefentry>.  For a detailed syntax reference, refer to the <quote>FILE "
"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ifp.5.xml:36
msgid ""
"The InfoPipe responder provides a public D-Bus interface accessible over the "
"system bus. The interface allows the user to query information about remote "
"users and groups over the system bus."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sssd-ifp.5.xml:46
msgid "These options can be used to configure the InfoPipe responder."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:53
msgid ""
"Specifies the comma-separated list of UID values or user names that are "
"allowed to access the InfoPipe responder. User names are resolved to UIDs at "
"startup."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:59
msgid ""
"Default: 0 (only the root user is allowed to access the InfoPipe responder)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:63
msgid ""
"Please note that although the UID 0 is used as the default it will be "
"overwritten with this option. If you still want to allow the root user to "
"access the InfoPipe responder, which would be the typical case, you have to "
"add 0 to the list of allowed UIDs as well."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:77
msgid "Specifies the comma-separated list of white or blacklisted attributes."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:91
msgid "name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:92
msgid "user's login name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:95
msgid "uidNumber"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:96
msgid "user ID"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:99
msgid "gidNumber"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:100
msgid "primary group ID"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:103
msgid "gecos"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:104
msgid "user information, typically full name"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:107
msgid "homeDirectory"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
#: sssd-ifp.5.xml:111
msgid "loginShell"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:112
msgid "user shell"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:81
msgid ""
"By default, the InfoPipe responder only allows the default set of POSIX "
"attributes to be requested. This set is the same as returned by "
"<citerefentry> <refentrytitle>getpwnam</refentrytitle> <manvolnum>3</"
"manvolnum> </citerefentry> and includes: <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><programlisting>
#: sssd-ifp.5.xml:125
#, no-wrap
msgid ""
"user_attributes = +telephoneNumber, -loginShell\n"
"                        "
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:117
msgid ""
"It is possible to add another attribute to this set by using <quote>"
"+attr_name</quote> or explicitly remove an attribute using <quote>-"
"attr_name</quote>. For example, to allow <quote>telephoneNumber</quote> but "
"deny <quote>loginShell</quote>, you would use the following configuration: "
"<placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sssd-ifp.5.xml:129
msgid "Default: not set. Only the default set of POSIX attributes is allowed."
msgstr ""

#. type: Content of: <reference><refentry><refentryinfo>
#: sss_rpcidmapd.5.xml:8
msgid ""
"<productname>sss rpc.idmapd plugin</productname> <author> <firstname>Noam</"
"firstname> <surname>Meltzer</surname> <affiliation> <orgname>Primary Data "
"Inc.</orgname> </affiliation> <contrib>Developer (2013-2014)</contrib> </"
"author> <author> <firstname>Noam</firstname> <surname>Meltzer</surname> "
"<contrib>Developer (2014-)</contrib> <email>tsnoam@gmail.com</email> </"
"author>"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_rpcidmapd.5.xml:26 sss_rpcidmapd.5.xml:32
msgid "sss_rpcidmapd"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_rpcidmapd.5.xml:33
msgid "sss plugin configuration directives for rpc.idmapd"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_rpcidmapd.5.xml:37
msgid "CONFIGURATION FILE"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_rpcidmapd.5.xml:39
msgid ""
"rpc.idmapd configuration file is usually found at <emphasis>/etc/idmapd."
"conf</emphasis>. See <citerefentry> <refentrytitle>idmapd.conf</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more information."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_rpcidmapd.5.xml:49
msgid "SSS CONFIGURATION EXTENSION"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sss_rpcidmapd.5.xml:51
msgid "Enable SSS plugin"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sss_rpcidmapd.5.xml:53
msgid ""
"In section <quote>[Translation]</quote>, modify/set <quote>Method</quote> "
"attribute to contain <emphasis>sss</emphasis>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><title>
#: sss_rpcidmapd.5.xml:59
msgid "[sss] config section"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><para>
#: sss_rpcidmapd.5.xml:61
msgid ""
"In order to change the default of one of the configuration attributes of the "
"<emphasis>sss</emphasis> plugin listed below you will need to create a "
"config section for it, named <quote>[sss]</quote>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
#: sss_rpcidmapd.5.xml:67
msgid "Configuration attributes"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sss_rpcidmapd.5.xml:69
msgid "memcache (bool)"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sss_rpcidmapd.5.xml:72
msgid "Indicates whether or not to use memcache optimisation technique."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_rpcidmapd.5.xml:85
msgid "SSSD INTEGRATION"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_rpcidmapd.5.xml:87
msgid ""
"The sss plugin requires the <emphasis>NSS Responder</emphasis> to be enabled "
"in sssd."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_rpcidmapd.5.xml:91
msgid ""
"The attribute <quote>use_fully_qualified_names</quote> must be enabled on "
"all domains (NFSv4 clients expect a fully qualified name to be sent on the "
"wire)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sss_rpcidmapd.5.xml:103
#, no-wrap
msgid ""
"[General]\n"
"Verbosity = 2\n"
"# domain must be synced between NFSv4 server and clients\n"
"# Solaris/Illumos/AIX use \"localdomain\" as default!\n"
"Domain = default\n"
"\n"
"[Mapping]\n"
"Nobody-User = nfsnobody\n"
"Nobody-Group = nfsnobody\n"
"\n"
"[Translation]\n"
"Method = sss\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_rpcidmapd.5.xml:100
msgid ""
"The following example shows a minimal idmapd.conf which makes use of the sss "
"plugin.  <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <refsect1><title>
#: sss_rpcidmapd.5.xml:120 include/seealso.xml:2
msgid "SEE ALSO"
msgstr "VEGEU TAMBÉ"

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_rpcidmapd.5.xml:122
msgid ""
"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>idmapd.conf</refentrytitle> "
"<manvolnum>5</manvolnum> </citerefentry>"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
msgid "sss_ssh_authorizedkeys"
msgstr ""

#. type: Content of: <reference><refentry><refmeta><manvolnum>
#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
msgid "1"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_ssh_authorizedkeys.1.xml:16
msgid "get OpenSSH authorized keys"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_ssh_authorizedkeys.1.xml:21
msgid ""
"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
"<replaceable>options</replaceable> </arg> <arg "
"choice='plain'><replaceable>USER</replaceable></arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_authorizedkeys.1.xml:32
msgid ""
"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
"citerefentry> for more information)."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_authorizedkeys.1.xml:41
msgid ""
"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
"command> for public key user authentication if it is compiled with support "
"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
"<manvolnum>5</manvolnum></citerefentry> options."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sss_ssh_authorizedkeys.1.xml:58
#, no-wrap
msgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_authorizedkeys.1.xml:51
msgid ""
"If <quote>AuthorizedKeysCommand</quote> is supported, "
"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
"citerefentry> can be configured to use it by putting the following directive "
"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sss_ssh_authorizedkeys.1.xml:69
#, no-wrap
msgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_authorizedkeys.1.xml:62
msgid ""
"If <quote>PubkeyAgent</quote> is supported, "
"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
"citerefentry> can be configured to use it by using the following directive "
"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
"\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_ssh_authorizedkeys.1.xml:84
msgid ""
"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><title>
#: sss_ssh_authorizedkeys.1.xml:93 sss_ssh_knownhostsproxy.1.xml:92
msgid "EXIT STATUS"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_authorizedkeys.1.xml:95 sss_ssh_knownhostsproxy.1.xml:94
msgid ""
"In case of success, an exit value of 0 is returned. Otherwise, 1 is returned."
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refname>
#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
msgid "sss_ssh_knownhostsproxy"
msgstr ""

#. type: Content of: <reference><refentry><refnamediv><refpurpose>
#: sss_ssh_knownhostsproxy.1.xml:16
msgid "get OpenSSH host keys"
msgstr ""

#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
#: sss_ssh_knownhostsproxy.1.xml:21
msgid ""
"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
"<replaceable>options</replaceable> </arg> <arg "
"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_knownhostsproxy.1.xml:33
msgid ""
"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
"manvolnum></citerefentry> for more information)  <filename>/var/lib/sss/"
"pubconf/known_hosts</filename> and estabilishes connection to the host."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_knownhostsproxy.1.xml:43
msgid ""
"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
"create the connection to the host instead of opening a socket."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para><programlisting>
#: sss_ssh_knownhostsproxy.1.xml:55
#, no-wrap
msgid ""
"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><para>
#: sss_ssh_knownhostsproxy.1.xml:48
msgid ""
"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
"command> for host key authentication by using the following directives for "
"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
#: sss_ssh_knownhostsproxy.1.xml:66
msgid ""
"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_ssh_knownhostsproxy.1.xml:71
msgid ""
"Use port <replaceable>PORT</replaceable> to connect to the host.  By "
"default, port 22 is used."
msgstr ""

#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
#: sss_ssh_knownhostsproxy.1.xml:83
msgid ""
"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
msgstr ""

#. type: Content of: <refsect1><title>
#: include/service_discovery.xml:2
msgid "SERVICE DISCOVERY"
msgstr ""

#. type: Content of: <refsect1><para>
#: include/service_discovery.xml:4
msgid ""
"The service discovery feature allows back ends to automatically find the "
"appropriate servers to connect to using a special DNS query. This feature is "
"not supported for backup servers."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/service_discovery.xml:9 include/ldap_id_mapping.xml:99
msgid "Configuration"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/service_discovery.xml:11
msgid ""
"If no servers are specified, the back end automatically uses service "
"discovery to try to find a server. Optionally, the user may choose to use "
"both fixed server addresses and service discovery by inserting a special "
"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
"preference is maintained. This feature is useful if, for example, the user "
"prefers to use service discovery whenever possible, and fall back to a "
"specific server when no servers can be discovered using DNS."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/service_discovery.xml:23
msgid "The domain name"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/service_discovery.xml:25
msgid ""
"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry> manual page for more details."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/service_discovery.xml:35
msgid "The protocol"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/service_discovery.xml:37
msgid ""
"The queries usually specify _tcp as the protocol. Exceptions are documented "
"in respective option description."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/service_discovery.xml:42
msgid "See Also"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/service_discovery.xml:44
msgid ""
"For more information on the service discovery mechanism, refer to RFC 2782."
msgstr ""

#. type: Content of: outside any tag (error?)
#: include/upstream.xml:1
msgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
msgstr ""

#. type: Content of: <refsect1><title>
#: include/failover.xml:2
msgid "FAILOVER"
msgstr ""

#. type: Content of: <refsect1><para>
#: include/failover.xml:4
msgid ""
"The failover feature allows back ends to automatically switch to a different "
"server if the current server fails."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/failover.xml:8
msgid "Failover Syntax"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/failover.xml:10
msgid ""
"The list of servers is given as a comma-separated list; any number of spaces "
"is allowed around the comma. The servers are listed in order of preference. "
"The list can contain any number of servers."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/failover.xml:16
msgid ""
"For each failover-enabled config option, two variants exist: "
"<emphasis>primary</emphasis> and <emphasis>backup</emphasis>.  The idea is "
"that servers in the primary list are preferred and backup servers are only "
"searched if no primary servers can be reached. If a backup server is "
"selected, a timeout of 31 seconds is set. After this timeout SSSD will "
"periodically try to reconnect to one of the primary servers. If it succeeds, "
"it will replace the current active (backup) server."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/failover.xml:27
msgid "The Failover Mechanism"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/failover.xml:29
msgid ""
"The failover mechanism distinguishes between a machine and a service. The "
"back end first tries to resolve the hostname of a given machine; if this "
"resolution attempt fails, the machine is considered offline. No further "
"attempts are made to connect to this machine for any other service. If the "
"resolution attempt succeeds, the back end tries to connect to a service on "
"this machine. If the service connection attempt fails, then only this "
"particular service is considered offline and the back end automatically "
"switches over to the next service.  The machine is still considered online "
"and might still be tried for another service."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/failover.xml:42
msgid ""
"Further connection attempts are made to machines or services marked as "
"offline after a specified period of time; this is currently hard coded to 30 "
"seconds."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/failover.xml:47
msgid ""
"If there are no more machines to try, the back end as a whole switches to "
"offline mode, and then attempts to reconnect every 30 seconds."
msgstr ""

#. type: Content of: <refsect1><title>
#: include/ldap_id_mapping.xml:2
msgid "ID MAPPING"
msgstr ""

#. type: Content of: <refsect1><para>
#: include/ldap_id_mapping.xml:4
msgid ""
"The ID-mapping feature allows SSSD to act as a client of Active Directory "
"without requiring administrators to extend user attributes to support POSIX "
"attributes for user and group identifiers."
msgstr ""

#. type: Content of: <refsect1><para>
#: include/ldap_id_mapping.xml:9
msgid ""
"NOTE: When ID-mapping is enabled, the uidNumber and gidNumber attributes are "
"ignored. This is to avoid the possibility of conflicts between automatically-"
"assigned and manually-assigned values. If you need to use manually-assigned "
"values, ALL values must be manually-assigned."
msgstr ""

#. type: Content of: <refsect1><para>
#: include/ldap_id_mapping.xml:16
msgid ""
"Please note that changing the ID mapping related configuration options will "
"cause user and group IDs to change. At the moment, SSSD does not support "
"changing IDs, so the SSSD database must be removed. Because cached passwords "
"are also stored in the database, removing the database should only be "
"performed while the authentication servers are reachable, otherwise users "
"might get locked out. In order to cache the password, an authentication must "
"be performed. It is not sufficient to use <citerefentry> "
"<refentrytitle>sss_cache</refentrytitle> <manvolnum>8</manvolnum> </"
"citerefentry> to remove the database, rather the process consists of:"
msgstr ""

#. type: Content of: <refsect1><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:33
msgid "Making sure the remote servers are reachable"
msgstr ""

#. type: Content of: <refsect1><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:38
msgid "Stopping the SSSD service"
msgstr ""

#. type: Content of: <refsect1><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:43
msgid "Removing the database"
msgstr ""

#. type: Content of: <refsect1><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:48
msgid "Starting the SSSD service"
msgstr ""

#. type: Content of: <refsect1><para>
#: include/ldap_id_mapping.xml:52
msgid ""
"Moreover, as the change of IDs might necessitate the adjustment of other "
"system properties such as file and directory ownership, it's advisable to "
"plan ahead and test the ID mapping configuration thoroughly."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/ldap_id_mapping.xml:59
msgid "Mapping Algorithm"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:61
msgid ""
"Active Directory provides an objectSID for every user and group object in "
"the directory. This objectSID can be broken up into components that "
"represent the Active Directory domain identity and the relative identifier "
"(RID) of the user or group object."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:67
msgid ""
"The SSSD ID-mapping algorithm takes a range of available UIDs and divides it "
"into equally-sized component sections - called \"slices\"-. Each slice "
"represents the space available to an Active Directory domain."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:73
msgid ""
"When a user or group entry for a particular domain is encountered for the "
"first time, the SSSD allocates one of the available slices for that domain. "
"In order to make this slice-assignment repeatable on different client "
"machines, we select the slice based on the following algorithm:"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:80
msgid ""
"The SID string is passed through the murmurhash3 algorithm to convert it to "
"a 32-bit hashed value. We then take the modulus of this value with the total "
"number of available slices to pick the slice."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:86
msgid ""
"NOTE: It is possible to encounter collisions in the hash and subsequent "
"modulus. In these situations, we will select the next available slice, but "
"it may not be possible to reproduce the same exact set of slices on other "
"machines (since the order that they are encountered will determine their "
"slice). In this situation, it is recommended to either switch to using "
"explicit POSIX attributes in Active Directory (disabling ID-mapping) or "
"configure a default domain to guarantee that at least one is always "
"consistent. See <quote>Configuration</quote> for details."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:101
msgid ""
"Minimum configuration (in the <quote>[domain/DOMAINNAME]</quote> section):"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><programlisting>
#: include/ldap_id_mapping.xml:106
#, no-wrap
msgid ""
"ldap_id_mapping = True\n"
"ldap_schema = ad\n"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:111
msgid ""
"The default configuration results in configuring 10,000 slices, each capable "
"of holding up to 200,000 IDs, starting from 10,001 and going up to "
"2,000,100,000. This should be sufficient for most deployments."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><title>
#: include/ldap_id_mapping.xml:117
msgid "Advanced Configuration"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:120
msgid "ldap_idmap_range_min (integer)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:123
msgid ""
"Specifies the lower bound of the range of POSIX IDs to use for mapping "
"Active Directory user and group SIDs."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:127
msgid ""
"NOTE: This option is different from <quote>min_id</quote> in that "
"<quote>min_id</quote> acts to filter the output of requests to this domain, "
"whereas this option controls the range of ID assignment. This is a subtle "
"distinction, but the good general advice would be to have <quote>min_id</"
"quote> be less-than or equal to <quote>ldap_idmap_range_min</quote>"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:137 include/ldap_id_mapping.xml:189
msgid "Default: 200000"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:142
msgid "ldap_idmap_range_max (integer)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:145
msgid ""
"Specifies the upper bound of the range of POSIX IDs to use for mapping "
"Active Directory user and group SIDs."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:149
msgid ""
"NOTE: This option is different from <quote>max_id</quote> in that "
"<quote>max_id</quote> acts to filter the output of requests to this domain, "
"whereas this option controls the range of ID assignment. This is a subtle "
"distinction, but the good general advice would be to have <quote>max_id</"
"quote> be greater-than or equal to <quote>ldap_idmap_range_max</quote>"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:159
msgid "Default: 2000200000"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:164
msgid "ldap_idmap_range_size (integer)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:167
msgid ""
"Specifies the number of IDs available for each slice.  If the range size "
"does not divide evenly into the min and max values, it will create as many "
"complete slices as it can."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:173
msgid ""
"NOTE: The value of this option must be at least as large as the highest user "
"RID planned for use on the Active Directory server. User lookups and login "
"will fail for any user whose RID is greater than this value."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:179
msgid ""
"For example, if your most recently-added Active Directory user has "
"objectSid=S-1-5-21-2153326666-2176343378-3404031434-1107, "
"<quote>ldap_idmap_range_size</quote> must be at least 1107."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:184
msgid ""
"It is important to plan ahead for future expansion, as changing this value "
"will result in changing all of the ID mappings on the system, leading to "
"users with different local IDs than they previously had."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:194
msgid "ldap_idmap_default_domain_sid (string)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:197
msgid ""
"Specify the domain SID of the default domain. This will guarantee that this "
"domain will always be assigned to slice zero in the ID map, bypassing the "
"murmurhash algorithm described above."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:208
msgid "ldap_idmap_default_domain (string)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:211
msgid "Specify the name of the default domain."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
#: include/ldap_id_mapping.xml:219
msgid "ldap_idmap_autorid_compat (boolean)"
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:222
msgid ""
"Changes the behavior of the ID-mapping algorithm to behave more similarly to "
"winbind's <quote>idmap_autorid</quote> algorithm."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:227
msgid ""
"When this option is configured, domains will be allocated starting with "
"slice zero and increasing monatomically with each additional domain."
msgstr ""

#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: include/ldap_id_mapping.xml:232
msgid ""
"NOTE: This algorithm is non-deterministic (it depends on the order that "
"users and groups are requested). If this mode is required for compatibility "
"with machines running winbind, it is recommended to also use the "
"<quote>ldap_idmap_default_domain_sid</quote> option to guarantee that at "
"least one domain is consistently allocated to slice zero."
msgstr ""

#. type: Content of: <refsect1><refsect2><title>
#: include/ldap_id_mapping.xml:251
msgid "Well-Known SIDs"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:253
msgid ""
"SSSD supports to look up the names of Well-Known SIDs, i.e. SIDs with a "
"special hardcoded meaning. Since the generic users and groups related to "
"those Well-Known SIDs have no equivalent in a Linux/UNIX environment no "
"POSIX IDs are available for those objects."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:259
msgid ""
"The SID name space is organized in authorities which can be seen as "
"different domains. The authorities for the Well-Known SIDs are"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:262
msgid "Null Authority"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:263
msgid "World Authority"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:264
msgid "Local Authority"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:265
msgid "Creator Authority"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:266
msgid "NT Authority"
msgstr ""

#. type: Content of: <refsect1><refsect2><para><itemizedlist><listitem><para>
#: include/ldap_id_mapping.xml:267
msgid "Built-in"
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:269
msgid ""
"The capitalized version of these names are used as domain names when "
"returning the fully qualified name of a Well-Known SID."
msgstr ""

#. type: Content of: <refsect1><refsect2><para>
#: include/ldap_id_mapping.xml:273
msgid ""
"Since some utilities allow to modify SID based access control information "
"with the help of a name instead of using the SID directly SSSD supports to "
"look up the SID by the name as well. To avoid collisions only the fully "
"qualified names can be used to look up Well-Known SIDs. As a result the "
"domain names <quote>NULL AUTHORITY</quote>, <quote>WORLD AUTHORITY</quote>, "
"<quote> LOCAL AUTHORITY</quote>, <quote>CREATOR AUTHORITY</quote>, <quote>NT "
"AUTHORITY</quote> and <quote>BUILTIN</quote> should not be used as domain "
"names in <filename>sssd.conf</filename>."
msgstr ""

#. type: Content of: <varlistentry><term>
#: include/param_help.xml:3
msgid "<option>-?</option>,<option>--help</option>"
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/param_help.xml:7 include/param_help_py.xml:7
msgid "Display help message and exit."
msgstr ""

#. type: Content of: <varlistentry><term>
#: include/param_help_py.xml:3
msgid "<option>-h</option>,<option>--help</option>"
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:3
msgid ""
"SSSD supports two representations for specifying the debug level. The "
"simplest is to specify a decimal value from 0-9, which represents enabling "
"that level and all lower-level debug messages. The more comprehensive option "
"is to specify a hexadecimal bitmask to enable or disable specific levels "
"(such as if you wish to suppress a level)."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:10
msgid "Currently supported debug levels:"
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:13
msgid ""
"<emphasis>0</emphasis>, <emphasis>0x0010</emphasis>: Fatal failures. "
"Anything that would prevent SSSD from starting up or causes it to cease "
"running."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:19
msgid ""
"<emphasis>1</emphasis>, <emphasis>0x0020</emphasis>: Critical failures. An "
"error that doesn't kill the SSSD, but one that indicates that at least one "
"major feature is not going to work properly."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:26
msgid ""
"<emphasis>2</emphasis>, <emphasis>0x0040</emphasis>: Serious failures. An "
"error announcing that a particular request or operation has failed."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:31
msgid ""
"<emphasis>3</emphasis>, <emphasis>0x0080</emphasis>: Minor failures. These "
"are the errors that would percolate down to cause the operation failure of 2."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:36
msgid ""
"<emphasis>4</emphasis>, <emphasis>0x0100</emphasis>: Configuration settings."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:40
msgid "<emphasis>5</emphasis>, <emphasis>0x0200</emphasis>: Function data."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:44
msgid ""
"<emphasis>6</emphasis>, <emphasis>0x0400</emphasis>: Trace messages for "
"operation functions."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:48
msgid ""
"<emphasis>7</emphasis>, <emphasis>0x1000</emphasis>: Trace messages for "
"internal control functions."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:53
msgid ""
"<emphasis>8</emphasis>, <emphasis>0x2000</emphasis>: Contents of function-"
"internal variables that may be interesting."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:58
msgid ""
"<emphasis>9</emphasis>, <emphasis>0x4000</emphasis>: Extremely low-level "
"tracing information."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:62
msgid ""
"To log required bitmask debug levels, simply add their numbers together as "
"shown in following examples:"
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:66
msgid ""
"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
"serious failures and function data use 0x0270."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:70
msgid ""
"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
"function data, trace messages for internal control functions use 0x1310."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:75
msgid ""
"<emphasis>Note</emphasis>: The bitmask format of debug levels was introduced "
"in 1.7.0."
msgstr ""

#. type: Content of: <listitem><para>
#: include/debug_levels.xml:79
msgid "<emphasis>Default</emphasis>: 0"
msgstr ""

#. type: Content of: outside any tag (error?)
#: include/experimental.xml:1
msgid ""
"<emphasis> This is an experimental feature, please use http://fedorahosted."
"org/sssd to report any issues.  </emphasis>"
msgstr ""

#. type: Content of: <refsect1><title>
#: include/local.xml:2
msgid "THE LOCAL DOMAIN"
msgstr ""

#. type: Content of: <refsect1><para>
#: include/local.xml:4
msgid ""
"In order to function correctly, a domain with <quote>id_provider=local</"
"quote> must be created and the SSSD must be running."
msgstr ""

#. type: Content of: <refsect1><para>
#: include/local.xml:9
msgid ""
"The administrator might want to use the SSSD local users instead of "
"traditional UNIX users in cases where the group nesting (see <citerefentry> "
"<refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</manvolnum> </"
"citerefentry>) is needed. The local users are also useful for testing and "
"development of the SSSD without having to deploy a full remote server. The "
"<command>sss_user*</command> and <command>sss_group*</command> tools use a "
"local LDB storage to store users and groups."
msgstr ""

#. type: Content of: <refsect1><para>
#: include/seealso.xml:4
msgid ""
"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
"manvolnum> </citerefentry>, <citerefentry> "
"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
"manvolnum> </citerefentry>, </phrase> <phrase condition=\"with_ifp\"> "
"<citerefentry> <refentrytitle>sssd-ifp</refentrytitle> <manvolnum>5</"
"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
"refentrytitle><manvolnum>8</manvolnum> </citerefentry>.  <citerefentry> "
"<refentrytitle>sss_rpcidmapd</refentrytitle> <manvolnum>5</manvolnum> </"
"citerefentry>"
msgstr ""

#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:3
msgid ""
"An optional base DN, search scope and LDAP filter to restrict LDAP searches "
"for this attribute type."
msgstr ""

#. type: Content of: <listitem><para><programlisting>
#: include/ldap_search_bases.xml:9
#, no-wrap
msgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
msgstr ""

#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:7
msgid "syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""

#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:13
msgid ""
"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The scope "
"functions as specified in section 4.5.1.2 of http://tools.ietf.org/html/"
"rfc4511"
msgstr ""

#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:23
msgid ""
"For examples of this syntax, please refer to the <quote>ldap_search_base</"
"quote> examples section."
msgstr ""

#. type: Content of: <listitem><para>
#: include/ldap_search_bases.xml:31
msgid ""
"Please note that specifying scope or filter is not supported for searches "
"against an Active Directory Server that might yield a large number of "
"results and trigger the Range Retrieval extension in the response."
msgstr ""

#. type: Content of: <para>
#: include/autofs_restart.xml:2
msgid ""
"Please note that the automounter only reads the master map on startup, so if "
"any autofs-related changes are made to the sssd.conf, you typically also "
"need to restart the automounter daemon after restarting the SSSD."
msgstr ""

#. type: Content of: <varlistentry><term>
#: include/override_homedir.xml:2
msgid "override_homedir (string)"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:16
msgid "UID number"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:20
msgid "domain name"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: include/override_homedir.xml:23
msgid "%f"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:24
msgid "fully qualified user name (user@domain)"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:28
msgid "UPN - User Principal Name (name@REALM)"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: include/override_homedir.xml:31
msgid "%o"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:33
msgid "The original home directory retrieved from the identity provider."
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
#: include/override_homedir.xml:38
msgid "%H"
msgstr ""

#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
#: include/override_homedir.xml:40
msgid "The value of configure option <emphasis>homedir_substring</emphasis>."
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/override_homedir.xml:5
msgid ""
"Override the user's home directory. You can either provide an absolute value "
"or a template. In the template, the following sequences are substituted: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/override_homedir.xml:52
msgid "This option can also be set per-domain."
msgstr ""

#. type: Content of: <varlistentry><listitem><para><programlisting>
#: include/override_homedir.xml:57
#, no-wrap
msgid ""
"override_homedir = /home/%u\n"
"        "
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/override_homedir.xml:61
msgid "Default: Not set (SSSD will use the value retrieved from LDAP)"
msgstr ""

#. type: Content of: <varlistentry><term>
#: include/homedir_substring.xml:2
msgid "homedir_substring (string)"
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/homedir_substring.xml:5
msgid ""
"The value of this option will be used in the expansion of the "
"<emphasis>override_homedir</emphasis> option if the template contains the "
"format string <emphasis>%H</emphasis>. An LDAP directory entry can directly "
"contain this template so that this option can be used to expand the home "
"directory path for each client machine (or operating system). It can be set "
"per-domain or globally in the [nss] section. A value specified in a domain "
"section will override one set in the [nss] section."
msgstr ""

#. type: Content of: <varlistentry><listitem><para>
#: include/homedir_substring.xml:15
msgid "Default: /home"
msgstr ""

#~ msgid "Add a timestamp to the debug messages"
#~ msgstr "Afegir una marca de temps als missatges de depuració"