# SOME DESCRIPTIVE TITLE.
# Copyright (C) YEAR Red Hat
# This file is distributed under the same license as the PACKAGE package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: ipa\n"
"Report-Msgid-Bugs-To: https://hosted.fedoraproject.org/projects/freeipa/"
"newticket\n"
"POT-Creation-Date: 2013-09-12 15:37+0200\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"Language: \n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Plural-Forms: nplurals=INTEGER; plural=EXPRESSION;\n"

#: ipalib/cli.py:593
#, python-format
msgid "Enter %(label)s again to verify: "
msgstr ""

#: ipalib/cli.py:601 ipa-client/ipa-getkeytab.c:420
#, c-format
msgid "Passwords do not match!"
msgstr ""

#: ipalib/cli.py:624
msgid "No matching entries found"
msgstr ""

#: ipalib/cli.py:668
msgid "Topic or Command"
msgstr ""

#: ipalib/cli.py:669
msgid "The topic or command name."
msgstr ""

#: ipalib/cli.py:833
msgid "Topic commands:"
msgstr ""

#: ipalib/cli.py:838
msgid "To get command help, use:"
msgstr ""

#: ipalib/cli.py:839
msgid "  ipa <command> --help"
msgstr ""

#: ipalib/cli.py:848
msgid "Command name"
msgstr ""

#: ipalib/cli.py:998
msgid "Positional arguments"
msgstr ""

#: ipalib/cli.py:1254
msgid "No file to read"
msgstr ""

#: ipalib/crud.py:247
msgid "A string searched in all relevant object attributes"
msgstr ""

#: ipalib/errors.py:269
#, python-format
msgid "%(cver)s client incompatible with %(sver)s server at '%(server)s'"
msgstr ""

#: ipalib/errors.py:287
#, python-format
msgid "unknown error %(code)d from %(server)s: %(error)s"
msgstr ""

#: ipalib/errors.py:303
msgid "an internal error has occurred"
msgstr ""

#: ipalib/errors.py:325
#, python-format
msgid "an internal error has occurred on server at '%(server)s'"
msgstr ""

#: ipalib/errors.py:341
#, python-format
msgid "unknown command '%(name)s'"
msgstr ""

#: ipalib/errors.py:358 ipalib/errors.py:383
#, python-format
msgid "error on server '%(server)s': %(error)s"
msgstr ""

#: ipalib/errors.py:374
#, python-format
msgid "cannot connect to '%(uri)s': %(error)s"
msgstr ""

#: ipalib/errors.py:392
#, python-format
msgid "Invalid JSON-RPC request: %(error)s"
msgstr ""

#: ipalib/errors.py:408
#, python-format
msgid "error marshalling data for XML-RPC transport: %(error)s"
msgstr ""

#: ipalib/errors.py:424
#, python-format
msgid "Missing or invalid HTTP Referer, %(referer)s"
msgstr ""

#: ipalib/errors.py:451
#, python-format
msgid "Kerberos error: %(major)s/%(minor)s"
msgstr ""

#: ipalib/errors.py:468
msgid "did not receive Kerberos credentials"
msgstr ""

#: ipalib/errors.py:484
#, python-format
msgid "Service '%(service)s' not found in Kerberos database"
msgstr ""

#: ipalib/errors.py:500
msgid "No credentials cache found"
msgstr ""

#: ipalib/errors.py:516
msgid "Ticket expired"
msgstr ""

#: ipalib/errors.py:532
msgid "Credentials cache permissions incorrect"
msgstr ""

#: ipalib/errors.py:548
msgid "Bad format in credentials cache"
msgstr ""

#: ipalib/errors.py:564
msgid "Cannot resolve KDC for requested realm"
msgstr ""

#: ipalib/errors.py:576
msgid "Session error"
msgstr ""

#: ipalib/errors.py:584
#, python-format
msgid "Principal %(principal)s cannot be authenticated: %(message)s"
msgstr ""

#: ipalib/errors.py:602
#, python-format
msgid "Insufficient access: %(info)s"
msgstr ""

#: ipalib/errors.py:646
#, python-format
msgid "command '%(name)s' takes no arguments"
msgstr ""

#: ipalib/errors.py:666
#, python-format
msgid "command '%(name)s' takes at most %(count)d argument"
msgid_plural "command '%(name)s' takes at most %(count)d arguments"
msgstr[0] ""
msgstr[1] ""

#: ipalib/errors.py:696
#, python-format
msgid "overlapping arguments and options: %(names)s"
msgstr ""

#: ipalib/errors.py:712
#, python-format
msgid "'%(name)s' is required"
msgstr ""

#: ipalib/errors.py:728 ipalib/errors.py:744
#, python-format
msgid "invalid '%(name)s': %(error)s"
msgstr ""

#: ipalib/errors.py:760
#, python-format
msgid "api has no such namespace: '%(name)s'"
msgstr ""

#: ipalib/errors.py:769
msgid "Passwords do not match"
msgstr ""

#: ipalib/errors.py:778
msgid "Command not implemented"
msgstr ""

#: ipalib/errors.py:787
msgid "Client is not configured. Run ipa-client-install."
msgstr ""

#: ipalib/errors.py:796
#, python-format
msgid "Could not get %(name)s interactively"
msgstr ""

#: ipalib/errors.py:811
#, python-format
msgid "Command '%(name)s' has been deprecated"
msgstr ""

#: ipalib/errors.py:839 ipalib/errors.py:1079 ipalib/errors.py:1173
#: ipalib/errors.py:1570 ipalib/errors.py:1587
#, python-format
msgid "%(reason)s"
msgstr ""

#: ipalib/errors.py:855
msgid "This entry already exists"
msgstr ""

#: ipalib/errors.py:871
msgid "You must enroll a host in order to create a host service"
msgstr ""

#: ipalib/errors.py:887
#, python-format
msgid ""
"Service principal is not of the form: service/fully-qualified host name: "
"%(reason)s"
msgstr ""

#: ipalib/errors.py:903
msgid ""
"The realm for the principal does not match the realm for this IPA server"
msgstr ""

#: ipalib/errors.py:919
msgid "This command requires root access"
msgstr ""

#: ipalib/errors.py:935
msgid "This is already a posix group"
msgstr ""

#: ipalib/errors.py:951
#, python-format
msgid "Principal is not of the form user@REALM: '%(principal)s'"
msgstr ""

#: ipalib/errors.py:967
msgid "This entry is already enabled"
msgstr ""

#: ipalib/errors.py:983
msgid "This entry is already disabled"
msgstr ""

#: ipalib/errors.py:999
msgid "This entry cannot be enabled or disabled"
msgstr ""

#: ipalib/errors.py:1015
msgid "This entry is not a member"
msgstr ""

#: ipalib/errors.py:1031
msgid "A group may not be a member of itself"
msgstr ""

#: ipalib/errors.py:1047
msgid "This entry is already a member"
msgstr ""

#: ipalib/errors.py:1063
#, python-format
msgid "Base64 decoding failed: %(reason)s"
msgstr ""

#: ipalib/errors.py:1095
msgid "A group may not be added as a member of itself"
msgstr ""

#: ipalib/errors.py:1111
msgid "The default users group cannot be removed"
msgstr ""

#: ipalib/errors.py:1127
msgid "Host does not have corresponding DNS A record"
msgstr ""

#: ipalib/errors.py:1142
msgid "Deleting a managed group is not allowed. It must be detached first."
msgstr ""

#: ipalib/errors.py:1157
msgid "A managed group cannot have a password policy."
msgstr ""

#: ipalib/errors.py:1189
#, python-format
msgid "'%(entry)s' doesn't have a certificate."
msgstr ""

#: ipalib/errors.py:1205
#, python-format
msgid "Unable to create private group. A group '%(group)s' already exists."
msgstr ""

#: ipalib/errors.py:1221
#, python-format
msgid ""
"A problem was encountered when verifying that all members were %(verb)s: "
"%(exc)s"
msgstr ""

#: ipalib/errors.py:1239
#, python-format
msgid "%(attr)s does not contain '%(value)s'"
msgstr ""

#: ipalib/errors.py:1256
#, python-format
msgid ""
"The search criteria was not specific enough. Expected 1 and found %(found)d."
msgstr ""

#: ipalib/errors.py:1273
msgid "This group already allows external members"
msgstr ""

#: ipalib/errors.py:1290
msgid "This group cannot be posix because it is external"
msgstr ""

#: ipalib/errors.py:1307
msgid "This is already a posix group and cannot be converted to external one"
msgstr ""

#: ipalib/errors.py:1330
#, python-format
msgid "no command nor help topic '%(topic)s'"
msgstr ""

#: ipalib/errors.py:1354
msgid "change collided with another change"
msgstr ""

#: ipalib/errors.py:1370
msgid "no modifications to be performed"
msgstr ""

#: ipalib/errors.py:1386
#, python-format
msgid "%(desc)s: %(info)s"
msgstr ""

#: ipalib/errors.py:1402
msgid "limits exceeded for this query"
msgstr ""

#: ipalib/errors.py:1417
#, python-format
msgid "%(info)s"
msgstr ""

#: ipalib/errors.py:1432
msgid "modifying primary key is not allowed"
msgstr ""

#: ipalib/errors.py:1448
#, python-format
msgid "%(attr)s: Only one value allowed."
msgstr ""

#: ipalib/errors.py:1464
#, python-format
msgid "%(attr)s: Invalid syntax."
msgstr ""

#: ipalib/errors.py:1480
#, python-format
msgid "Bad search filter %(info)s"
msgstr ""

#: ipalib/errors.py:1496
msgid "Not allowed on non-leaf entry"
msgstr ""

#: ipalib/errors.py:1512
msgid "LDAP timeout"
msgstr ""

#: ipalib/errors.py:1537
#, python-format
msgid "Certificate operation cannot be completed: %(error)s"
msgstr ""

#: ipalib/errors.py:1553
#, python-format
msgid "Certificate format error: %(error)s"
msgstr ""

#: ipalib/errors.py:1604
msgid "Already registered"
msgstr ""

#: ipalib/errors.py:1620
msgid "Not registered yet"
msgstr ""

#: ipalib/errors.py:1636
#, python-format
msgid "%(key)s cannot be deleted because %(label)s %(dependent)s requires it"
msgstr ""

#: ipalib/errors.py:1652
#, python-format
msgid ""
"%(key)s cannot be deleted or disabled because it is the last member of "
"%(label)s %(container)s"
msgstr ""

#: ipalib/errors.py:1668
#, python-format
msgid "%(label)s %(key)s cannot be deleted/modified: %(reason)s"
msgstr ""

#: ipalib/errors.py:1685
#, python-format
msgid "%(name)s certificate is not valid"
msgstr ""

#: ipalib/frontend.py:412
msgid "Results are truncated, try a more specific search"
msgstr ""

#: ipalib/frontend.py:531
#, python-format
msgid "Unknown option: %(option)s"
msgstr ""

#: ipalib/frontend.py:904
msgid ""
"Retrieve and print all attributes from the server. Affects command output."
msgstr ""

#: ipalib/frontend.py:910
msgid "Print entries as stored on the server. Only affects output format."
msgstr ""

#: ipalib/frontend.py:916 ipalib/plugins/batch.py:69
msgid "Client version. Used to determine if server will accept request."
msgstr ""

#: ipalib/frontend.py:1089
msgid "Forward to server instead of running locally"
msgstr ""

#: ipalib/messages.py:73
msgid "Additional instructions:"
msgstr ""

#: ipalib/messages.py:134
#, python-format
msgid ""
"API Version number was not sent, forward compatibility not guaranteed. "
"Assuming server's API version, %(server_version)s"
msgstr ""

#: ipalib/output.py:92
msgid "A dictionary representing an LDAP entry"
msgstr ""

#: ipalib/output.py:100
msgid "A list of LDAP entries"
msgstr ""

#: ipalib/output.py:111
msgid "All commands should at least have a result"
msgstr ""

#: ipalib/output.py:114
msgid "User-friendly description of action performed"
msgstr ""

#: ipalib/output.py:118
msgid "The primary_key value of the entry, e.g. 'jdoe' for a user"
msgstr ""

#: ipalib/output.py:133
msgid "Number of entries returned"
msgstr ""

#: ipalib/output.py:134
msgid "True if not all results were returned"
msgstr ""

#: ipalib/output.py:139
msgid "List of deletions that failed"
msgstr ""

#: ipalib/output.py:145
msgid "True means the operation was successful"
msgstr ""

#: ipalib/parameters.py:370
msgid "incorrect type"
msgstr ""

#: ipalib/parameters.py:373
msgid "Only one value is allowed"
msgstr ""

#: ipalib/parameters.py:932
msgid "must be True or False"
msgstr ""

#: ipalib/parameters.py:1033
msgid "must be an integer"
msgstr ""

#: ipalib/parameters.py:1084
#, python-format
msgid "must be at least %(minvalue)d"
msgstr ""

#: ipalib/parameters.py:1094
#, python-format
msgid "can be at most %(maxvalue)d"
msgstr ""

#: ipalib/parameters.py:1135
msgid "must be a decimal number"
msgstr ""

#: ipalib/parameters.py:1181
#, python-format
msgid "must be at least %(minvalue)s"
msgstr ""

#: ipalib/parameters.py:1191
#, python-format
msgid "can be at most %(maxvalue)s"
msgstr ""

#: ipalib/parameters.py:1199
#, python-format
msgid ""
"number class '%(cls)s' is not included in a list of allowed number classes: "
"%(allowed)s"
msgstr ""

#: ipalib/parameters.py:1323
#, python-format
msgid "must match pattern \"%(pattern)s\""
msgstr ""

#: ipalib/parameters.py:1341
msgid "must be binary data"
msgstr ""

#: ipalib/parameters.py:1357
#, python-format
msgid "must be at least %(minlength)d bytes"
msgstr ""

#: ipalib/parameters.py:1367
#, python-format
msgid "can be at most %(maxlength)d bytes"
msgstr ""

#: ipalib/parameters.py:1377
#, python-format
msgid "must be exactly %(length)d bytes"
msgstr ""

#: ipalib/parameters.py:1407
msgid "must be Unicode text"
msgstr ""

#: ipalib/parameters.py:1440
msgid "Leading and trailing spaces are not allowed"
msgstr ""

#: ipalib/parameters.py:1448
#, python-format
msgid "must be at least %(minlength)d characters"
msgstr ""

#: ipalib/parameters.py:1458
#, python-format
msgid "can be at most %(maxlength)d characters"
msgstr ""

#: ipalib/parameters.py:1468
#, python-format
msgid "must be exactly %(length)d characters"
msgstr ""

#: ipalib/parameters.py:1487
#, python-format
msgid "The character %(char)r is not allowed."
msgstr ""

#: ipalib/parameters.py:1538
#, python-format
msgid "must be '%(value)s'"
msgstr ""

#: ipalib/parameters.py:1541
#, python-format
msgid "must be one of %(values)s"
msgstr ""

#: ipalib/parameters.py:1780
msgid "incomplete time value"
msgstr ""

#: ipalib/parameters.py:1817
msgid "this option is deprecated"
msgstr ""

#: ipalib/plugins/aci.py:154
msgid "A list of ACI values"
msgstr ""

#: ipalib/plugins/aci.py:218
msgid "type, filter, subtree and targetgroup are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:221
msgid "ACI prefix is required"
msgstr ""

#: ipalib/plugins/aci.py:224
msgid ""
"at least one of: type, filter, subtree, targetgroup, attrs or memberof are "
"required"
msgstr ""

#: ipalib/plugins/aci.py:227
msgid "filter and memberof are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:233
msgid "group, permission and self are mutually exclusive"
msgstr ""

#: ipalib/plugins/aci.py:235
msgid "One of group, permission or self is required"
msgstr ""

#: ipalib/plugins/aci.py:258
#, python-format
msgid "Group '%s' does not exist"
msgstr ""

#: ipalib/plugins/aci.py:284
msgid "empty filter"
msgstr ""

#: ipalib/plugins/aci.py:305
#, python-format
msgid "Syntax Error: %(error)s"
msgstr ""

#: ipalib/plugins/aci.py:351
#, python-format
msgid "invalid DN (%s)"
msgstr ""

#: ipalib/plugins/aci.py:398
#, python-format
msgid "ACI with name \"%s\" not found"
msgstr ""

#: ipalib/plugins/aci.py:416
msgid "ACI prefix"
msgstr ""

#: ipalib/plugins/aci.py:417
msgid ""
"Prefix used to distinguish ACI types (permission, delegation, selfservice, "
"none)"
msgstr ""

#: ipalib/plugins/aci.py:428
msgid "ACIs"
msgstr ""

#: ipalib/plugins/aci.py:433
msgid "ACI name"
msgstr ""

#: ipalib/plugins/aci.py:439 ipalib/plugins/permission.py:123
msgid "Permission"
msgstr ""

#: ipalib/plugins/aci.py:440
msgid "Permission ACI grants access to"
msgstr ""

#: ipalib/plugins/aci.py:445 ipalib/plugins/delegation.py:101
msgid "User group"
msgstr ""

#: ipalib/plugins/aci.py:446 ipalib/plugins/delegation.py:102
msgid "User group ACI grants access to"
msgstr ""

#: ipalib/plugins/aci.py:451 ipalib/plugins/baseldap.py:65
#: ipalib/plugins/delegation.py:83 ipalib/plugins/permission.py:122
#: ipalib/plugins/permission.py:135 ipalib/plugins/selfservice.py:87
msgid "Permissions"
msgstr ""

#: ipalib/plugins/aci.py:452
msgid "Permissions to grant(read, write, add, delete, all)"
msgstr ""

#: ipalib/plugins/aci.py:460 ipalib/plugins/permission.py:143
msgid "Attributes to which the permission applies"
msgstr ""

#: ipalib/plugins/aci.py:461 ipalib/plugins/delegation.py:89
#: ipalib/plugins/permission.py:142 ipalib/plugins/selfservice.py:93
msgid "Attributes"
msgstr ""

#: ipalib/plugins/aci.py:467 ipalib/plugins/permission.py:150
msgid "Type"
msgstr ""

#: ipalib/plugins/aci.py:468
msgid "type of IPA object (user, group, host, hostgroup, service, netgroup)"
msgstr ""

#: ipalib/plugins/aci.py:474
msgid "Member of"
msgstr ""

#: ipalib/plugins/aci.py:475
msgid "Member of a group"
msgstr ""

#: ipalib/plugins/aci.py:480 ipalib/plugins/permission.py:163
msgid "Filter"
msgstr ""

#: ipalib/plugins/aci.py:481 ipalib/plugins/permission.py:164
msgid "Legal LDAP filter (e.g. ou=Engineering)"
msgstr ""

#: ipalib/plugins/aci.py:486 ipalib/plugins/permission.py:169
msgid "Subtree"
msgstr ""

#: ipalib/plugins/aci.py:487
msgid "Subtree to apply ACI to"
msgstr ""

#: ipalib/plugins/aci.py:492 ipalib/plugins/permission.py:175
msgid "Target group"
msgstr ""

#: ipalib/plugins/aci.py:493
msgid "Group to apply ACI to"
msgstr ""

#: ipalib/plugins/aci.py:498
msgid "Target your own entry (self)"
msgstr ""

#: ipalib/plugins/aci.py:499
msgid "Apply ACI to your own entry (self)"
msgstr ""

#: ipalib/plugins/aci.py:511
#, python-format
msgid "Created ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:516
msgid "Test the ACI syntax but don't write anything"
msgstr ""

#: ipalib/plugins/aci.py:567
#, python-format
msgid "Deleted ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:610 ipalib/plugins/aci.py:886
#: ipalib/plugins/aci.py:927 ipalib/plugins/delegation.py:59
#: ipalib/plugins/permission.py:88 ipalib/plugins/selfservice.py:60
msgid "ACI"
msgstr ""

#: ipalib/plugins/aci.py:618
#, python-format
msgid "Modified ACI \"%(value)s\""
msgstr ""

#: ipalib/plugins/aci.py:693
#, python-format
msgid "%(count)d ACI matched"
msgid_plural "%(count)d ACIs matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/aci.py:934
msgid "New ACI name"
msgstr ""

#: ipalib/plugins/aci.py:938
#, python-format
msgid "Renamed ACI to \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:28
msgid ""
"\n"
"Auto Membership Rule.\n"
"\n"
"Bring clarity to the membership of hosts and users by configuring inclusive\n"
"or exclusive regex patterns, you can automatically assign a new entries "
"into\n"
"a group or hostgroup based upon attribute information.\n"
"\n"
"A rule is directly associated with a group by name, so you cannot create\n"
"a rule without an accompanying group or hostgroup.\n"
"\n"
"A condition is a regular expression used by 389-ds to match a new incoming\n"
"entry with an automember rule. If it matches an inclusive rule then the\n"
"entry is added to the appropriate group or hostgroup.\n"
"\n"
"A default group or hostgroup could be specified for entries that do not\n"
"match any rule. In case of user entries this group will be a fallback group\n"
"because all users are by default members of group specified in IPA config.\n"
"\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add the initial group or hostgroup:\n"
"   ipa hostgroup-add --desc=\"Web Servers\" webservers\n"
"   ipa group-add --desc=\"Developers\" devel\n"
"\n"
" Add the initial rule:\n"
"   ipa automember-add --type=hostgroup webservers\n"
"   ipa automember-add --type=group devel\n"
"\n"
" Add a condition to the rule:\n"
"   ipa automember-add-condition --key=fqdn --type=hostgroup --inclusive-"
"regex=^web[1-9]+\\.example\\.com webservers\n"
"   ipa automember-add-condition --key=manager --type=group --inclusive-"
"regex=^uid=mscott devel\n"
"\n"
" Add an exclusive condition to the rule to prevent auto assignment:\n"
"   ipa automember-add-condition --key=fqdn --type=hostgroup --exclusive-"
"regex=^web5\\.example\\.com webservers\n"
"\n"
" Add a host:\n"
"    ipa host-add web1.example.com\n"
"\n"
" Add a user:\n"
"    ipa user-add --first=Tim --last=User --password tuser1 --manager=mscott\n"
"\n"
" Verify automembership:\n"
"    ipa hostgroup-show webservers\n"
"      Host-group: webservers\n"
"      Description: Web Servers\n"
"      Member hosts: web1.example.com\n"
"\n"
"    ipa group-show devel\n"
"      Group name: devel\n"
"      Description: Developers\n"
"      GID: 1004200000\n"
"      Member users: tuser\n"
"\n"
" Remove a condition from the rule:\n"
"   ipa automember-remove-condition --key=fqdn --type=hostgroup --inclusive-"
"regex=^web[1-9]+\\.example\\.com webservers\n"
"\n"
" Modify the automember rule:\n"
"    ipa automember-mod\n"
"\n"
" Set the default (fallback) target group:\n"
"    ipa automember-default-group-set --default-group=webservers --"
"type=hostgroup\n"
"    ipa automember-default-group-set --default-group=ipausers --type=group\n"
"\n"
" Remove the default (fallback) target group:\n"
"    ipa automember-default-group-remove --type=hostgroup\n"
"    ipa automember-default-group-remove --type=group\n"
"\n"
" Show the default (fallback) target group:\n"
"    ipa automember-default-group-show --type=hostgroup\n"
"    ipa automember-default-group-show --type=group\n"
"\n"
" Find all of the automember rules:\n"
"    ipa automember-find\n"
"\n"
" Display a automember rule:\n"
"    ipa automember-show --type=hostgroup webservers\n"
"    ipa automember-show --type=group devel\n"
"\n"
" Delete an automember rule:\n"
"    ipa automember-del --type=hostgroup webservers\n"
"    ipa automember-del --type=group devel\n"
msgstr ""

#: ipalib/plugins/automember.py:119 ipalib/plugins/automember.py:120
msgid "Inclusive Regex"
msgstr ""

#: ipalib/plugins/automember.py:126 ipalib/plugins/automember.py:127
msgid "Exclusive Regex"
msgstr ""

#: ipalib/plugins/automember.py:132
msgid "Attribute Key"
msgstr ""

#: ipalib/plugins/automember.py:133
msgid ""
"Attribute to filter via regex. For example fqdn for a host, or manager for a "
"user"
msgstr ""

#: ipalib/plugins/automember.py:140
msgid "Grouping Type"
msgstr ""

#: ipalib/plugins/automember.py:141
msgid "Grouping to which the rule applies"
msgstr ""

#: ipalib/plugins/automember.py:149 ipalib/plugins/automember.py:150
msgid "Automember Rule"
msgstr ""

#: ipalib/plugins/automember.py:171
msgid "Auto Membership Rule"
msgstr ""

#: ipalib/plugins/automember.py:176 ipalib/plugins/automount.py:579
#: ipalib/plugins/group.py:155 ipalib/plugins/hbacrule.py:179
#: ipalib/plugins/hbacsvc.py:79 ipalib/plugins/hbacsvcgroup.py:73
#: ipalib/plugins/host.py:267 ipalib/plugins/hostgroup.py:90
#: ipalib/plugins/netgroup.py:122 ipalib/plugins/privilege.py:73
#: ipalib/plugins/role.py:92 ipalib/plugins/selinuxusermap.py:184
#: ipalib/plugins/sudocmd.py:77 ipalib/plugins/sudocmdgroup.py:78
#: ipalib/plugins/sudorule.py:111
msgid "Description"
msgstr ""

#: ipalib/plugins/automember.py:177
msgid "A description of this auto member rule"
msgstr ""

#: ipalib/plugins/automember.py:181 ipalib/plugins/automember.py:511
msgid "Default (fallback) Group"
msgstr ""

#: ipalib/plugins/automember.py:182
msgid "Default group for entries to land"
msgstr ""

#: ipalib/plugins/automember.py:193
#, python-format
msgid "Group: %s not found!"
msgstr ""

#: ipalib/plugins/automember.py:217
#, python-format
msgid "%s is not a valid attribute."
msgstr ""

#: ipalib/plugins/automember.py:230
msgid ""
"\n"
"    Add an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:235
#, python-format
msgid "Added automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:242
msgid "Auto Membership is not configured"
msgstr ""

#: ipalib/plugins/automember.py:255
msgid ""
"\n"
"    Add conditions to an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:260
msgid "Failed to add"
msgstr ""

#: ipalib/plugins/automember.py:267
#, python-format
msgid "Added condition(s) to \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:276
msgid "Conditions that could not be added"
msgstr ""

#: ipalib/plugins/automember.py:280
msgid "Number of conditions added"
msgstr ""

#: ipalib/plugins/automember.py:290 ipalib/plugins/automember.py:376
#, python-format
msgid "Auto member rule: %s not found!"
msgstr ""

#: ipalib/plugins/automember.py:332
msgid ""
"\n"
"        Override this so we can add completed and failed to the return "
"result.\n"
"        "
msgstr ""

#: ipalib/plugins/automember.py:348
msgid ""
"\n"
"    Remove conditions from an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:353
#, python-format
msgid "Removed condition(s) from \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:362
msgid "Conditions that could not be removed"
msgstr ""

#: ipalib/plugins/automember.py:366
msgid "Number of conditions removed"
msgstr ""

#: ipalib/plugins/automember.py:420
msgid ""
"\n"
"        Override this so we can set completed and failed.\n"
"        "
msgstr ""

#: ipalib/plugins/automember.py:436
msgid ""
"\n"
"    Modify an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:441
#, python-format
msgid "Modified automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:452
msgid ""
"\n"
"    Delete an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:457
#, python-format
msgid "Deleted automember rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:468
msgid ""
"\n"
"    Search for automember rules.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:475
#, python-format
msgid "%(count)d rules matched"
msgid_plural "%(count)d rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automember.py:488
msgid ""
"\n"
"    Display information about an automember rule.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:504
msgid ""
"\n"
"    Set default (fallback) group for all unmatched entries.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:512
msgid "Default (fallback) group for entries to land"
msgstr ""

#: ipalib/plugins/automember.py:516
#, python-format
msgid "Set default (fallback) group for automember \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:533
msgid ""
"\n"
"    Remove default (fallback) group for all unmatched entries.\n"
"    "
msgstr ""

#: ipalib/plugins/automember.py:538
#, python-format
msgid "Removed default (fallback) group for automember \"%(value)s\""
msgstr ""

#: ipalib/plugins/automember.py:548 ipalib/plugins/automember.py:556
#: ipalib/plugins/automember.py:581
msgid "No default (fallback) group set"
msgstr ""

#: ipalib/plugins/automember.py:568
msgid ""
"\n"
"    Display information about the default (fallback) automember groups.\n"
"    "
msgstr ""

#: ipalib/plugins/automount.py:29
msgid ""
"\n"
"Automount\n"
"\n"
"Stores automount(8) configuration for autofs(8) in IPA.\n"
"\n"
"The base of an automount configuration is the configuration file auto."
"master.\n"
"This is also the base location in IPA. Multiple auto.master configurations\n"
"can be stored in separate locations. A location is implementation-specific\n"
"with the default being a location named 'default'. For example, you can "
"have\n"
"locations by geographic region, by floor, by type, etc.\n"
"\n"
"Automount has three basic object types: locations, maps and keys.\n"
"\n"
"A location defines a set of maps anchored in auto.master. This allows you\n"
"to store multiple automount configurations. A location in itself isn't\n"
"very interesting, it is just a point to start a new automount map.\n"
"\n"
"A map is roughly equivalent to a discrete automount file and provides\n"
"storage for keys.\n"
"\n"
"A key is a mount point associated with a map.\n"
"\n"
"When a new location is created, two maps are automatically created for\n"
"it: auto.master and auto.direct. auto.master is the root map for all\n"
"automount maps for the location. auto.direct is the default map for\n"
"direct mounts and is mounted on /-.\n"
"\n"
"An automount map may contain a submount key. This key defines a mount\n"
"location within the map that references another map. This can be done\n"
"either using automountmap-add-indirect --parentmap or manually\n"
"with automountkey-add and setting info to \"-type=autofs :<mapname>\".\n"
"\n"
"EXAMPLES:\n"
"\n"
"Locations:\n"
"\n"
"  Create a named location, \"Baltimore\":\n"
"    ipa automountlocation-add baltimore\n"
"\n"
"  Display the new location:\n"
"    ipa automountlocation-show baltimore\n"
"\n"
"  Find available locations:\n"
"    ipa automountlocation-find\n"
"\n"
"  Remove a named automount location:\n"
"    ipa automountlocation-del baltimore\n"
"\n"
"  Show what the automount maps would look like if they were in the "
"filesystem:\n"
"    ipa automountlocation-tofiles baltimore\n"
"\n"
"  Import an existing configuration into a location:\n"
"    ipa automountlocation-import baltimore /etc/auto.master\n"
"\n"
"    The import will fail if any duplicate entries are found. For\n"
"    continuous operation where errors are ignored, use the --continue\n"
"    option.\n"
"\n"
"Maps:\n"
"\n"
"  Create a new map, \"auto.share\":\n"
"    ipa automountmap-add baltimore auto.share\n"
"\n"
"  Display the new map:\n"
"    ipa automountmap-show baltimore auto.share\n"
"\n"
"  Find maps in the location baltimore:\n"
"    ipa automountmap-find baltimore\n"
"\n"
"  Create an indirect map with auto.share as a submount:\n"
"    ipa automountmap-add-indirect baltimore --parentmap=auto.share --"
"mount=sub auto.man\n"
"\n"
"    This is equivalent to:\n"
"\n"
"    ipa automountmap-add-indirect baltimore --mount=/man auto.man\n"
"    ipa automountkey-add baltimore auto.man --key=sub --info=\"-"
"fstype=autofs ldap:auto.share\"\n"
"\n"
"  Remove the auto.share map:\n"
"    ipa automountmap-del baltimore auto.share\n"
"\n"
"Keys:\n"
"\n"
"  Create a new key for the auto.share map in location baltimore. This ties\n"
"  the map we previously created to auto.master:\n"
"    ipa automountkey-add baltimore auto.master --key=/share --info=auto."
"share\n"
"\n"
"  Create a new key for our auto.share map, an NFS mount for man pages:\n"
"    ipa automountkey-add baltimore auto.share --key=man --info=\"-ro,soft,"
"rsize=8192,wsize=8192 ipa.example.com:/shared/man\"\n"
"\n"
"  Find all keys for the auto.share map:\n"
"    ipa automountkey-find baltimore auto.share\n"
"\n"
"  Find all direct automount keys:\n"
"    ipa automountkey-find baltimore --key=/-\n"
"\n"
"  Remove the man key from the auto.share map:\n"
"    ipa automountkey-del baltimore auto.share --key=man\n"
msgstr ""

#: ipalib/plugins/automount.py:205
msgid "automount location"
msgstr ""

#: ipalib/plugins/automount.py:206
msgid "automount locations"
msgstr ""

#: ipalib/plugins/automount.py:209
msgid "Automount Locations"
msgstr ""

#: ipalib/plugins/automount.py:210
msgid "Automount Location"
msgstr ""

#: ipalib/plugins/automount.py:215 ipalib/plugins/host.py:277
msgid "Location"
msgstr ""

#: ipalib/plugins/automount.py:216
msgid "Automount location name."
msgstr ""

#: ipalib/plugins/automount.py:225
msgid "Create a new automount location."
msgstr ""

#: ipalib/plugins/automount.py:227
#, python-format
msgid "Added automount location \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:247
msgid "Delete an automount location."
msgstr ""

#: ipalib/plugins/automount.py:249
#, python-format
msgid "Deleted automount location \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:255
msgid "Display an automount location."
msgstr ""

#: ipalib/plugins/automount.py:261
msgid "Search for an automount location."
msgstr ""

#: ipalib/plugins/automount.py:264
#, python-format
msgid "%(count)d automount location matched"
msgid_plural "%(count)d automount locations matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:272
msgid "Generate automount files for a specific location."
msgstr ""

#: ipalib/plugins/automount.py:350
msgid "maps not connected to /etc/auto.master:"
msgstr ""

#: ipalib/plugins/automount.py:368
msgid "Import automount files for a specific location."
msgstr ""

#: ipalib/plugins/automount.py:372
msgid "Master file"
msgstr ""

#: ipalib/plugins/automount.py:373
msgid "Automount master file."
msgstr ""

#: ipalib/plugins/automount.py:380
msgid ""
"Continuous operation mode. Errors are reported but the process continues."
msgstr ""

#: ipalib/plugins/automount.py:392
#, python-format
msgid "File %(file)s not found"
msgstr ""

#: ipalib/plugins/automount.py:444
#, python-format
msgid "key %(key)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:460
#, python-format
msgid "map %(map)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:565
msgid "automount map"
msgstr ""

#: ipalib/plugins/automount.py:566
msgid "automount maps"
msgstr ""

#: ipalib/plugins/automount.py:573
msgid "Map"
msgstr ""

#: ipalib/plugins/automount.py:574
msgid "Automount map name."
msgstr ""

#: ipalib/plugins/automount.py:583
msgid "Automount Maps"
msgstr ""

#: ipalib/plugins/automount.py:584
msgid "Automount Map"
msgstr ""

#: ipalib/plugins/automount.py:590
msgid "Create a new automount map."
msgstr ""

#: ipalib/plugins/automount.py:592
#, python-format
msgid "Added automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:598
msgid "Delete an automount map."
msgstr ""

#: ipalib/plugins/automount.py:600
#, python-format
msgid "Deleted automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:619
msgid "Modify an automount map."
msgstr ""

#: ipalib/plugins/automount.py:621
#, python-format
msgid "Modified automount map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:627
msgid "Search for an automount map."
msgstr ""

#: ipalib/plugins/automount.py:630
#, python-format
msgid "%(count)d automount map matched"
msgid_plural "%(count)d automount maps matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:638
msgid "Display an automount map."
msgstr ""

#: ipalib/plugins/automount.py:644
msgid "Automount key object."
msgstr ""

#: ipalib/plugins/automount.py:648
msgid "automount key"
msgstr ""

#: ipalib/plugins/automount.py:649
msgid "automount keys"
msgstr ""

#: ipalib/plugins/automount.py:660 ipalib/plugins/automount.py:883
#: ipalib/plugins/automount.py:993
msgid "Key"
msgstr ""

#: ipalib/plugins/automount.py:661 ipalib/plugins/automount.py:884
#: ipalib/plugins/automount.py:994
msgid "Automount key name."
msgstr ""

#: ipalib/plugins/automount.py:666 ipalib/plugins/automount.py:888
#: ipalib/plugins/automount.py:998
msgid "Mount information"
msgstr ""

#: ipalib/plugins/automount.py:669
msgid "description"
msgstr ""

#: ipalib/plugins/automount.py:678
msgid "Automount Keys"
msgstr ""

#: ipalib/plugins/automount.py:679
msgid "Automount Key"
msgstr ""

#: ipalib/plugins/automount.py:680
#, python-format
msgid ""
"The key,info pair must be unique. A key named %(key)s with info %(info)s "
"already exists"
msgstr ""

#: ipalib/plugins/automount.py:681
#, python-format
msgid "key named %(key)s already exists"
msgstr ""

#: ipalib/plugins/automount.py:682
#, python-format
msgid "The automount key %(key)s with info %(info)s does not exist"
msgstr ""

#: ipalib/plugins/automount.py:732
#, python-format
msgid ""
"More than one entry with key %(key)s found, use --info to select specific "
"entry."
msgstr ""

#: ipalib/plugins/automount.py:792
msgid "Create a new automount key."
msgstr ""

#: ipalib/plugins/automount.py:794
#, python-format
msgid "Added automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:822
msgid "Create a new indirect mount point."
msgstr ""

#: ipalib/plugins/automount.py:824
#, python-format
msgid "Added automount indirect map \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:829
msgid "Mount point"
msgstr ""

#: ipalib/plugins/automount.py:833
msgid "Parent map"
msgstr ""

#: ipalib/plugins/automount.py:834
msgid "Name of parent automount map (default: auto.master)."
msgstr ""

#: ipalib/plugins/automount.py:848
msgid "mount point is relative to parent map, cannot begin with /"
msgstr ""

#: ipalib/plugins/automount.py:876
msgid "Delete an automount key."
msgstr ""

#: ipalib/plugins/automount.py:878
#, python-format
msgid "Deleted automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:918
msgid "Modify an automount key."
msgstr ""

#: ipalib/plugins/automount.py:920
#, python-format
msgid "Modified automount key \"%(value)s\""
msgstr ""

#: ipalib/plugins/automount.py:927
msgid "New mount information"
msgstr ""

#: ipalib/plugins/automount.py:977
msgid "Search for an automount key."
msgstr ""

#: ipalib/plugins/automount.py:980
#, python-format
msgid "%(count)d automount key matched"
msgid_plural "%(count)d automount keys matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/automount.py:988
msgid "Display an automount key."
msgstr ""

#: ipalib/plugins/baseldap.py:41 ipalib/plugins/internal.py:280
#: ipalib/plugins/internal.py:633 ipalib/plugins/migration.py:491
#: ipalib/plugins/user.py:289
msgid "Password"
msgstr ""

#: ipalib/plugins/baseldap.py:44
msgid "Failed members"
msgstr ""

#: ipalib/plugins/baseldap.py:47
msgid "Member users"
msgstr ""

#: ipalib/plugins/baseldap.py:50
msgid "Member groups"
msgstr ""

#: ipalib/plugins/baseldap.py:53
msgid "Member of groups"
msgstr ""

#: ipalib/plugins/baseldap.py:56
msgid "Member hosts"
msgstr ""

#: ipalib/plugins/baseldap.py:59
msgid "Member host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:62
msgid "Member of host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:71 ipalib/plugins/role.py:81
msgid "Roles"
msgstr ""

#: ipalib/plugins/baseldap.py:74 ipalib/plugins/sudocmdgroup.py:66
#: ipalib/plugins/sudocmdgroup.py:86
msgid "Sudo Command Groups"
msgstr ""

#: ipalib/plugins/baseldap.py:80
msgid "Granting privilege to roles"
msgstr ""

#: ipalib/plugins/baseldap.py:83
msgid "Member netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:86
msgid "Member of netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:89
msgid "Member services"
msgstr ""

#: ipalib/plugins/baseldap.py:92
msgid "Member service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:98
msgid "Member HBAC service"
msgstr ""

#: ipalib/plugins/baseldap.py:101
msgid "Member HBAC service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:116
msgid "Indirect Member users"
msgstr ""

#: ipalib/plugins/baseldap.py:119
msgid "Indirect Member groups"
msgstr ""

#: ipalib/plugins/baseldap.py:122
msgid "Indirect Member hosts"
msgstr ""

#: ipalib/plugins/baseldap.py:125
msgid "Indirect Member host-groups"
msgstr ""

#: ipalib/plugins/baseldap.py:128
msgid "Indirect Member of roles"
msgstr ""

#: ipalib/plugins/baseldap.py:131
msgid "Indirect Member permissions"
msgstr ""

#: ipalib/plugins/baseldap.py:134
msgid "Indirect Member HBAC service"
msgstr ""

#: ipalib/plugins/baseldap.py:137
msgid "Indirect Member HBAC service group"
msgstr ""

#: ipalib/plugins/baseldap.py:140
msgid "Indirect Member netgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:161
msgid "Failed source hosts/hostgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:164
msgid "Failed hosts/hostgroups"
msgstr ""

#: ipalib/plugins/baseldap.py:167
msgid "Failed users/groups"
msgstr ""

#: ipalib/plugins/baseldap.py:170
msgid "Failed service/service groups"
msgstr ""

#: ipalib/plugins/baseldap.py:173
msgid "Failed to remove"
msgstr ""

#: ipalib/plugins/baseldap.py:177
msgid "Failed RunAs"
msgstr ""

#: ipalib/plugins/baseldap.py:180
msgid "Failed RunAsGroup"
msgstr ""

#: ipalib/plugins/baseldap.py:198
msgid "Invalid format. Should be name=value"
msgstr ""

#: ipalib/plugins/baseldap.py:286
msgid "External host"
msgstr ""

#: ipalib/plugins/baseldap.py:419
msgid "An IPA master host cannot be deleted or disabled"
msgstr ""

#: ipalib/plugins/baseldap.py:433
msgid "entry"
msgstr ""

#: ipalib/plugins/baseldap.py:434
msgid "entries"
msgstr ""

#: ipalib/plugins/baseldap.py:466 ipalib/plugins/baseldap.py:467
msgid "Entry"
msgstr ""

#: ipalib/plugins/baseldap.py:469
#, python-format
msgid "container entry (%(container)s) not found"
msgstr ""

#: ipalib/plugins/baseldap.py:470
#, python-format
msgid "%(parent)s: %(oname)s not found"
msgstr ""

#: ipalib/plugins/baseldap.py:471
#, python-format
msgid "%(pkey)s: %(oname)s not found"
msgstr ""

#: ipalib/plugins/baseldap.py:472
#, python-format
msgid "%(oname)s with name \"%(pkey)s\" already exists"
msgstr ""

#: ipalib/plugins/baseldap.py:669 ipalib/plugins/baseldap.py:677
#: ipalib/plugins/baseldap.py:682
#, python-format
msgid "attribute \"%(attribute)s\" not allowed"
msgstr ""

#: ipalib/plugins/baseldap.py:744
msgid ""
"Set an attribute to a name/value pair. Format is attr=value.\n"
"For multi-valued attributes, the command replaces the values already present."
msgstr ""

#: ipalib/plugins/baseldap.py:750
msgid ""
"Add an attribute/value pair. Format is attr=value. The attribute\n"
"must be part of the schema."
msgstr ""

#: ipalib/plugins/baseldap.py:756
msgid ""
"Delete an attribute/value pair. The option will be evaluated\n"
"last, after all sets and adds."
msgstr ""

#: ipalib/plugins/baseldap.py:784
msgid "attribute is not configurable"
msgstr ""

#: ipalib/plugins/baseldap.py:887
msgid "No such attribute on this entry"
msgstr ""

#: ipalib/plugins/baseldap.py:981
msgid "Suppress processing of membership attributes."
msgstr ""

#: ipalib/plugins/baseldap.py:1159
msgid "Continuous mode: Don't stop on errors."
msgstr ""

#: ipalib/plugins/baseldap.py:1180 ipalib/plugins/baseldap.py:1253
#: ipalib/plugins/internal.py:501
msgid "Rights"
msgstr ""

#: ipalib/plugins/baseldap.py:1181 ipalib/plugins/baseldap.py:1254
msgid ""
"Display the access rights of this entry (requires --all). See ipa man page "
"for details."
msgstr ""

#: ipalib/plugins/baseldap.py:1263
msgid "Rename"
msgstr ""

#: ipalib/plugins/baseldap.py:1264
#, python-format
msgid "Rename the %(ldap_obj_name)s object"
msgstr ""

#: ipalib/plugins/baseldap.py:1345
msgid "the entry was deleted while being modified"
msgstr ""

#: ipalib/plugins/baseldap.py:1472 ipalib/plugins/baseldap.py:1941
#, python-format
msgid "%s"
msgstr ""

#: ipalib/plugins/baseldap.py:1484
#, python-format
msgid "member %s"
msgstr ""

#: ipalib/plugins/baseldap.py:1514 ipalib/plugins/baseldap.py:1966
#, python-format
msgid "%s to add"
msgstr ""

#: ipalib/plugins/baseldap.py:1522 ipalib/plugins/baseldap.py:1978
#: ipalib/plugins/privilege.py:150 ipalib/plugins/privilege.py:175
#: ipalib/plugins/role.py:164 ipalib/plugins/role.py:187
msgid "Members that could not be added"
msgstr ""

#: ipalib/plugins/baseldap.py:1526 ipalib/plugins/baseldap.py:1982
msgid "Number of members added"
msgstr ""

#: ipalib/plugins/baseldap.py:1615 ipalib/plugins/baseldap.py:2071
#, python-format
msgid "%s to remove"
msgstr ""

#: ipalib/plugins/baseldap.py:1622 ipalib/plugins/baseldap.py:2083
msgid "Members that could not be removed"
msgstr ""

#: ipalib/plugins/baseldap.py:1626 ipalib/plugins/baseldap.py:2087
msgid "Number of members removed"
msgstr ""

#: ipalib/plugins/baseldap.py:1716
msgid "Primary key only"
msgstr ""

#: ipalib/plugins/baseldap.py:1717
#, python-format
msgid "Results should contain primary key attribute only (\"%s\")"
msgstr ""

#: ipalib/plugins/baseldap.py:1725
#, python-format
msgid ""
"Search for %(searched_object)s with these %(relationship)s %(ldap_object)s."
msgstr ""

#: ipalib/plugins/baseldap.py:1726
#, python-format
msgid ""
"Search for %(searched_object)s without these %(relationship)s "
"%(ldap_object)s."
msgstr ""

#: ipalib/plugins/baseldap.py:1735
msgid "Time Limit"
msgstr ""

#: ipalib/plugins/baseldap.py:1736
msgid "Time limit of search in seconds"
msgstr ""

#: ipalib/plugins/baseldap.py:1742 ipalib/plugins/cert.py:696
#: ipalib/plugins/hbactest.py:285
msgid "Size Limit"
msgstr ""

#: ipalib/plugins/baseldap.py:1743
msgid "Maximum number of entries returned"
msgstr ""

#: ipalib/plugins/batch.py:62
msgid "Nested Methods to execute"
msgstr ""

#: ipalib/plugins/cert.py:45
msgid ""
"\n"
"IPA certificate operations\n"
"\n"
"Implements a set of commands for managing server SSL certificates.\n"
"\n"
"Certificate requests exist in the form of a Certificate Signing Request "
"(CSR)\n"
"in PEM format.\n"
"\n"
"The dogtag CA uses just the CN value of the CSR and forces the rest of the\n"
"subject to values configured in the server.\n"
"\n"
"A certificate is stored with a service principal and a service principal\n"
"needs a host.\n"
"\n"
"In order to request a certificate:\n"
"\n"
"* The host must exist\n"
"* The service must exist (or you use the --add option to automatically add "
"it)\n"
"\n"
"SEARCHING:\n"
"\n"
"Certificates may be searched on by certificate subject, serial number,\n"
"revocation reason, validity dates and the issued date.\n"
"\n"
"When searching on dates the _from date does a >= search and the _to date\n"
"does a <= search. When combined these are done as an AND.\n"
"\n"
"Dates are treated as GMT to match the dates in the certificates.\n"
"\n"
"The date format is YYYY-mm-dd.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Request a new certificate and add the principal:\n"
"   ipa cert-request --add --principal=HTTP/lion.example.com example.csr\n"
"\n"
" Retrieve an existing certificate:\n"
"   ipa cert-show 1032\n"
"\n"
" Revoke a certificate (see RFC 5280 for reason details):\n"
"   ipa cert-revoke --revocation-reason=6 1032\n"
"\n"
" Remove a certificate from revocation hold status:\n"
"   ipa cert-remove-hold 1032\n"
"\n"
" Check the status of a signing request:\n"
"   ipa cert-status 10\n"
"\n"
" Search for certificates by hostname:\n"
"   ipa cert-find --subject=ipaserver.example.com\n"
"\n"
" Search for revoked certificates by reason:\n"
"   ipa cert-find --revocation-reason=5\n"
"\n"
" Search for certificates based on issuance date\n"
"   ipa cert-find --issuedon-from=2013-02-01 --issuedon-to=2013-02-07\n"
"\n"
"IPA currently immediately issues (or declines) all certificate requests so\n"
"the status of a request is not normally useful. This is for future use\n"
"or the case where a CA does not immediately issue a certificate.\n"
"\n"
"The following revocation reasons are supported:\n"
"\n"
"    * 0 - unspecified\n"
"    * 1 - keyCompromise\n"
"    * 2 - cACompromise\n"
"    * 3 - affiliationChanged\n"
"    * 4 - superseded\n"
"    * 5 - cessationOfOperation\n"
"    * 6 - certificateHold\n"
"    * 8 - removeFromCRL\n"
"    * 9 - privilegeWithdrawn\n"
"    * 10 - aACompromise\n"
"\n"
"Note that reason code 7 is not used.  See RFC 5280 for more details:\n"
"\n"
"http://www.ietf.org/rfc/rfc5280.txt\n"
"\n"
msgstr ""

#: ipalib/plugins/cert.py:145
msgid "Failure decoding Certificate Signing Request:"
msgstr ""

#: ipalib/plugins/cert.py:158 ipalib/plugins/cert.py:175
msgid "Failure decoding Certificate Signing Request"
msgstr ""

#: ipalib/plugins/cert.py:177
#, python-format
msgid "Failure decoding Certificate Signing Request: %s"
msgstr ""

#: ipalib/plugins/cert.py:240
msgid "Submit a certificate signing request."
msgstr ""

#: ipalib/plugins/cert.py:244
msgid "CSR"
msgstr ""

#: ipalib/plugins/cert.py:253 ipalib/plugins/service.py:321
msgid "Principal"
msgstr ""

#: ipalib/plugins/cert.py:254
msgid "Service principal for this certificate (e.g. HTTP/test.example.com)"
msgstr ""

#: ipalib/plugins/cert.py:261
msgid "automatically add the principal if it doesn't exist"
msgstr ""

#: ipalib/plugins/cert.py:269 ipalib/plugins/cert.py:481
#: ipalib/plugins/host.py:306 ipalib/plugins/internal.py:319
#: ipalib/plugins/service.py:328
msgid "Certificate"
msgstr ""

#: ipalib/plugins/cert.py:272 ipalib/plugins/cert.py:484
#: ipalib/plugins/cert.py:638 ipalib/plugins/cert.py:639
#: ipalib/plugins/host.py:166 ipalib/plugins/internal.py:332
#: ipalib/plugins/service.py:102
msgid "Subject"
msgstr ""

#: ipalib/plugins/cert.py:275 ipalib/plugins/cert.py:487
#: ipalib/plugins/host.py:175 ipalib/plugins/service.py:111
msgid "Issuer"
msgstr ""

#: ipalib/plugins/cert.py:278 ipalib/plugins/cert.py:490
#: ipalib/plugins/host.py:178 ipalib/plugins/service.py:114
msgid "Not Before"
msgstr ""

#: ipalib/plugins/cert.py:281 ipalib/plugins/cert.py:493
#: ipalib/plugins/host.py:181 ipalib/plugins/service.py:117
msgid "Not After"
msgstr ""

#: ipalib/plugins/cert.py:284 ipalib/plugins/cert.py:496
#: ipalib/plugins/host.py:184 ipalib/plugins/service.py:120
msgid "Fingerprint (MD5)"
msgstr ""

#: ipalib/plugins/cert.py:287 ipalib/plugins/cert.py:499
#: ipalib/plugins/host.py:187 ipalib/plugins/service.py:123
msgid "Fingerprint (SHA1)"
msgstr ""

#: ipalib/plugins/cert.py:290 ipalib/plugins/cert.py:469
#: ipalib/plugins/cert.py:710
msgid "Serial number"
msgstr ""

#: ipalib/plugins/cert.py:293 ipalib/plugins/cert.py:505
#: ipalib/plugins/cert.py:707
msgid "Serial number (hex)"
msgstr ""

#: ipalib/plugins/cert.py:300 ipalib/plugins/misc.py:57
msgid "Dictionary mapping variable name to value"
msgstr ""

#: ipalib/plugins/cert.py:333
msgid "No hostname was found in subject of request."
msgstr ""

#: ipalib/plugins/cert.py:338
#, python-format
msgid ""
"hostname in subject of request '%(subject_host)s' does not match principal "
"hostname '%(hostname)s'"
msgstr ""

#: ipalib/plugins/cert.py:356
msgid "The service principal for this request doesn't exist."
msgstr ""

#: ipalib/plugins/cert.py:362
msgid "You need to be a member of the serviceadmin role to add services"
msgstr ""

#: ipalib/plugins/cert.py:367
#, python-format
msgid ""
"Insufficient 'write' privilege to the 'userCertificate' attribute of entry "
"'%s'."
msgstr ""

#: ipalib/plugins/cert.py:383
#, python-format
msgid "no host record for subject alt name %s in certificate request"
msgstr ""

#: ipalib/plugins/cert.py:389
#, python-format
msgid ""
"Insufficient privilege to create a certificate with subject alt name '%s'."
msgstr ""

#: ipalib/plugins/cert.py:442
msgid "Check the status of a certificate signing request."
msgstr ""

#: ipalib/plugins/cert.py:446
msgid "Request id"
msgstr ""

#: ipalib/plugins/cert.py:452
msgid "Request status"
msgstr ""

#: ipalib/plugins/cert.py:470
msgid "Serial number in decimal or if prefixed with 0x in hexadecimal"
msgstr ""

#: ipalib/plugins/cert.py:475
msgid "Retrieve an existing certificate."
msgstr ""

#: ipalib/plugins/cert.py:502 ipalib/plugins/host.py:190
#: ipalib/plugins/internal.py:329 ipalib/plugins/internal.py:358
#: ipalib/plugins/service.py:126
msgid "Revocation reason"
msgstr ""

#: ipalib/plugins/cert.py:511
msgid "Output filename"
msgstr ""

#: ipalib/plugins/cert.py:512
msgid "File to store the certificate in."
msgstr ""

#: ipalib/plugins/cert.py:563
msgid "Revoke a certificate."
msgstr ""

#: ipalib/plugins/cert.py:569
msgid "Revoked"
msgstr ""

#: ipalib/plugins/cert.py:577 ipalib/plugins/cert.py:643
msgid "Reason"
msgstr ""

#: ipalib/plugins/cert.py:578 ipalib/plugins/cert.py:644
msgid "Reason for revoking the certificate (0-10)"
msgstr ""

#: ipalib/plugins/cert.py:600
msgid "7 is not a valid revocation reason"
msgstr ""

#: ipalib/plugins/cert.py:610
msgid "Take a revoked certificate off hold."
msgstr ""

#: ipalib/plugins/cert.py:616
msgid "Unrevoked"
msgstr ""

#: ipalib/plugins/cert.py:619 ipalib/plugins/internal.py:249
msgid "Error"
msgstr ""

#: ipalib/plugins/cert.py:634
msgid "Search for existing certificates."
msgstr ""

#: ipalib/plugins/cert.py:650
msgid "minimum serial number"
msgstr ""

#: ipalib/plugins/cert.py:655
msgid "maximum serial number"
msgstr ""

#: ipalib/plugins/cert.py:660
msgid "match the common name exactly"
msgstr ""

#: ipalib/plugins/cert.py:664
msgid "Valid not after from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:668
msgid "Valid not after to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:672
msgid "Valid not before from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:676
msgid "Valid not before to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:680
msgid "Issued on from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:684
msgid "Issued on to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:688
msgid "Revoked on from this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:692
msgid "Revoked on to this date (YYYY-mm-dd)"
msgstr ""

#: ipalib/plugins/cert.py:697
msgid "Maximum number of certs returned"
msgstr ""

#: ipalib/plugins/cert.py:713 ipalib/plugins/internal.py:366
#: ipalib/plugins/internal.py:472 ipalib/plugins/internal.py:552
#: ipalib/plugins/internal.py:659
msgid "Status"
msgstr ""

#: ipalib/plugins/cert.py:718
#, python-format
msgid "%(count)d certificate matched"
msgid_plural "%(count)d certificates matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/config.py:32
msgid ""
"\n"
"Server configuration\n"
"\n"
"Manage the default values that IPA uses and some of its tuning parameters.\n"
"\n"
"NOTES:\n"
"\n"
"The password notification value (--pwdexpnotify) is stored here so it will\n"
"be replicated. It is not currently used to notify users in advance of an\n"
"expiring password.\n"
"\n"
"Some attributes are read-only, provided only for information purposes. "
"These\n"
"include:\n"
"\n"
"Certificate Subject base: the configured certificate subject base,\n"
"  e.g. O=EXAMPLE.COM.  This is configurable only at install time.\n"
"Password plug-in features: currently defines additional hashes that the\n"
"  password will generate (there may be other conditions).\n"
"\n"
"When setting the order list for mapping SELinux users you may need to\n"
"quote the value so it isn't interpreted by the shell.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Show basic server configuration:\n"
"   ipa config-show\n"
"\n"
" Show all configuration options:\n"
"   ipa config-show --all\n"
"\n"
" Change maximum username length to 99 characters:\n"
"   ipa config-mod --maxusername=99\n"
"\n"
" Increase default time and size limits for maximum IPA server search:\n"
"   ipa config-mod --searchtimelimit=10 --searchrecordslimit=2000\n"
"\n"
" Set default user e-mail domain:\n"
"   ipa config-mod --emaildomain=example.com\n"
"\n"
" Enable migration mode to make \"ipa migrate-ds\" command operational:\n"
"   ipa config-mod --enable-migration=TRUE\n"
"\n"
" Define SELinux user map order:\n"
"   ipa config-mod --ipaselinuxusermaporder='guest_u:s0$xguest_u:s0$user_u:s0-"
"s0:c0.c1023$staff_u:s0-s0:c0.c1023$unconfined_u:s0-s0:c0.c1023'\n"
msgstr ""

#: ipalib/plugins/config.py:80
msgid "searchtimelimit must be -1 or > 1."
msgstr ""

#: ipalib/plugins/config.py:87
msgid "configuration options"
msgstr ""

#: ipalib/plugins/config.py:97 ipalib/plugins/config.py:98
msgid "Configuration"
msgstr ""

#: ipalib/plugins/config.py:103
msgid "Maximum username length"
msgstr ""

#: ipalib/plugins/config.py:108
msgid "Home directory base"
msgstr ""

#: ipalib/plugins/config.py:109
msgid "Default location of home directories"
msgstr ""

#: ipalib/plugins/config.py:113
msgid "Default shell"
msgstr ""

#: ipalib/plugins/config.py:114
msgid "Default shell for new users"
msgstr ""

#: ipalib/plugins/config.py:118
msgid "Default users group"
msgstr ""

#: ipalib/plugins/config.py:119
msgid "Default group for new users"
msgstr ""

#: ipalib/plugins/config.py:123 ipalib/plugins/config.py:124
msgid "Default e-mail domain"
msgstr ""

#: ipalib/plugins/config.py:128
msgid "Search time limit"
msgstr ""

#: ipalib/plugins/config.py:129
msgid ""
"Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited)"
msgstr ""

#: ipalib/plugins/config.py:134
msgid "Search size limit"
msgstr ""

#: ipalib/plugins/config.py:135
msgid "Maximum number of records to search (-1 is unlimited)"
msgstr ""

#: ipalib/plugins/config.py:140
msgid "User search fields"
msgstr ""

#: ipalib/plugins/config.py:141
msgid "A comma-separated list of fields to search in when searching for users"
msgstr ""

#: ipalib/plugins/config.py:146
msgid "A comma-separated list of fields to search in when searching for groups"
msgstr ""

#: ipalib/plugins/config.py:150 ipalib/plugins/config.py:151
msgid "Enable migration mode"
msgstr ""

#: ipalib/plugins/config.py:155
msgid "Certificate Subject base"
msgstr ""

#: ipalib/plugins/config.py:156
msgid "Base for certificate subjects (OU=Test,O=Example)"
msgstr ""

#: ipalib/plugins/config.py:161
msgid "Default group objectclasses"
msgstr ""

#: ipalib/plugins/config.py:162
msgid "Default group objectclasses (comma-separated list)"
msgstr ""

#: ipalib/plugins/config.py:167
msgid "Default user objectclasses"
msgstr ""

#: ipalib/plugins/config.py:168
msgid "Default user objectclasses (comma-separated list)"
msgstr ""

#: ipalib/plugins/config.py:173
msgid "Password Expiration Notification (days)"
msgstr ""

#: ipalib/plugins/config.py:174
msgid "Number of days's notice of impending password expiration"
msgstr ""

#: ipalib/plugins/config.py:179
msgid "Password plugin features"
msgstr ""

#: ipalib/plugins/config.py:180
msgid "Extra hashes to generate in password plug-in"
msgstr ""

#: ipalib/plugins/config.py:186
msgid "SELinux user map order"
msgstr ""

#: ipalib/plugins/config.py:187
msgid "Order in increasing priority of SELinux users, delimited by $"
msgstr ""

#: ipalib/plugins/config.py:190
msgid "Default SELinux user"
msgstr ""

#: ipalib/plugins/config.py:191
msgid "Default SELinux user when no match is found in SELinux map rule"
msgstr ""

#: ipalib/plugins/config.py:195
msgid "Default PAC types"
msgstr ""

#: ipalib/plugins/config.py:196
msgid "Default types of PAC supported for services"
msgstr ""

#: ipalib/plugins/config.py:209
msgid "Modify configuration options."
msgstr ""

#: ipalib/plugins/config.py:218
msgid "The group doesn't exist"
msgstr ""

#: ipalib/plugins/config.py:233
#, python-format
msgid "attribute \"%s\" not allowed"
msgstr ""

#: ipalib/plugins/config.py:241
msgid "May not be empty"
msgstr ""

#: ipalib/plugins/config.py:259
#, python-format
msgid "%(obj)s default attribute %(attr)s would not be allowed!"
msgstr ""

#: ipalib/plugins/config.py:291
msgid "A list of SELinux users delimited by $ expected"
msgstr ""

#: ipalib/plugins/config.py:295
#, python-format
msgid "SELinux user '%(user)s' is not valid: %(error)s"
msgstr ""

#: ipalib/plugins/config.py:307
msgid "SELinux user map default user not in order list"
msgstr ""

#: ipalib/plugins/config.py:315
msgid "Show the current configuration."
msgstr ""

#: ipalib/plugins/delegation.py:29
msgid ""
"\n"
"Group to Group Delegation\n"
"\n"
"A permission enables fine-grained delegation of permissions. Access Control\n"
"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
"given tasks such as adding a user, modifying a group, etc.\n"
"\n"
"Group to Group Delegations grants the members of one group to update a set\n"
"of attributes of members of another group.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a delegation rule to allow managers to edit employee's addresses:\n"
"   ipa delegation-add --attrs=street --group=managers --"
"membergroup=employees \"managers edit employees' street\"\n"
"\n"
" When managing the list of attributes you need to include all attributes\n"
" in the list, including existing ones. Add postalCode to the list:\n"
"   ipa delegation-mod --attrs=street --attrs=postalCode --group=managers --"
"membergroup=employees \"managers edit employees' street\"\n"
"\n"
" Display our updated rule:\n"
"   ipa delegation-show \"managers edit employees' street\"\n"
"\n"
" Delete a rule:\n"
"   ipa delegation-del \"managers edit employees' street\"\n"
msgstr ""

#: ipalib/plugins/delegation.py:69
msgid "delegation"
msgstr ""

#: ipalib/plugins/delegation.py:70
msgid "delegations"
msgstr ""

#: ipalib/plugins/delegation.py:71
msgid "Delegations"
msgstr ""

#: ipalib/plugins/delegation.py:72
msgid "Delegation"
msgstr ""

#: ipalib/plugins/delegation.py:77 ipalib/plugins/delegation.py:78
msgid "Delegation name"
msgstr ""

#: ipalib/plugins/delegation.py:84 ipalib/plugins/selfservice.py:88
msgid "Permissions to grant (read, write). Default is write."
msgstr ""

#: ipalib/plugins/delegation.py:90
msgid "Attributes to which the delegation applies"
msgstr ""

#: ipalib/plugins/delegation.py:96
msgid "Member user group"
msgstr ""

#: ipalib/plugins/delegation.py:97
msgid "User group to apply delegation to"
msgstr ""

#: ipalib/plugins/delegation.py:130
msgid "Add a new delegation."
msgstr ""

#: ipalib/plugins/delegation.py:132
#, python-format
msgid "Added delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:151
msgid "Delete a delegation."
msgstr ""

#: ipalib/plugins/delegation.py:154
#, python-format
msgid "Deleted delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:169
msgid "Modify a delegation."
msgstr ""

#: ipalib/plugins/delegation.py:171
#, python-format
msgid "Modified delegation \"%(value)s\""
msgstr ""

#: ipalib/plugins/delegation.py:188
msgid "Search for delegations."
msgstr ""

#: ipalib/plugins/delegation.py:191
#, python-format
msgid "%(count)d delegation matched"
msgid_plural "%(count)d delegations matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/delegation.py:214
msgid "Display information about a delegation."
msgstr ""

#: ipalib/plugins/dns.py:41
msgid ""
"\n"
"Domain Name System (DNS)\n"
"\n"
"Manage DNS zone and resource records.\n"
"\n"
"\n"
"USING STRUCTURED PER-TYPE OPTIONS\n"
"\n"
"There are many structured DNS RR types where DNS data stored in LDAP server\n"
"is not just a scalar value, for example an IP address or a domain name, but\n"
"a data structure which may be often complex. A good example is a LOC record\n"
"[RFC1876] which consists of many mandatory and optional parts (degrees,\n"
"minutes, seconds of latitude and longitude, altitude or precision).\n"
"\n"
"It may be difficult to manipulate such DNS records without making a mistake\n"
"and entering an invalid value. DNS module provides an abstraction over "
"these\n"
"raw records and allows to manipulate each RR type with specific options. "
"For\n"
"each supported RR type, DNS module provides a standard option to manipulate\n"
"a raw records with format --<rrtype>-rec, e.g. --mx-rec, and special "
"options\n"
"for every part of the RR structure with format --<rrtype>-<partname>, e.g.\n"
"--mx-preference and --mx-exchanger.\n"
"\n"
"When adding a record, either RR specific options or standard option for a "
"raw\n"
"value can be used, they just should not be combined in one add operation. "
"When\n"
"modifying an existing entry, new RR specific options can be used to change\n"
"one part of a DNS record, where the standard option for raw value is used\n"
"to specify the modified value. The following example demonstrates\n"
"a modification of MX record preference from 0 to 1 in a record without\n"
"modifying the exchanger:\n"
"ipa dnsrecord-mod --mx-rec=\"0 mx.example.com.\" --mx-preference=1\n"
"\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add new zone:\n"
"   ipa dnszone-add example.com --name-server=ns \\\n"
"                               --admin-email=admin@example.com \\\n"
"                               --ip-address=10.0.0.1\n"
"\n"
" Add system permission that can be used for per-zone privilege delegation:\n"
"   ipa dnszone-add-permission example.com\n"
"\n"
" Modify the zone to allow dynamic updates for hosts own records in realm "
"EXAMPLE.COM:\n"
"   ipa dnszone-mod example.com --dynamic-update=TRUE\n"
"\n"
"   This is the equivalent of:\n"
"     ipa dnszone-mod example.com --dynamic-update=TRUE \\\n"
"      --update-policy=\"grant EXAMPLE.COM krb5-self * A; grant EXAMPLE.COM "
"krb5-self * AAAA; grant EXAMPLE.COM krb5-self * SSHFP;\"\n"
"\n"
" Modify the zone to allow zone transfers for local network only:\n"
"   ipa dnszone-mod example.com --allow-transfer=10.0.0.0/8\n"
"\n"
" Add new reverse zone specified by network IP address:\n"
"   ipa dnszone-add --name-from-ip=80.142.15.0/24 \\\n"
"                   --name-server=ns.example.com.\n"
"\n"
" Add second nameserver for example.com:\n"
"   ipa dnsrecord-add example.com @ --ns-rec=nameserver2.example.com\n"
"\n"
" Add a mail server for example.com:\n"
"   ipa dnsrecord-add example.com @ --mx-rec=\"10 mail1\"\n"
"\n"
" Add another record using MX record specific options:\n"
"  ipa dnsrecord-add example.com @ --mx-preference=20 --mx-exchanger=mail2\n"
"\n"
" Add another record using interactive mode (started when dnsrecord-add, "
"dnsrecord-mod,\n"
" or dnsrecord-del are executed with no options):\n"
"  ipa dnsrecord-add example.com @\n"
"  Please choose a type of DNS resource record to be added\n"
"  The most common types for this type of zone are: NS, MX, LOC\n"
"\n"
"  DNS resource record type: MX\n"
"  MX Preference: 30\n"
"  MX Exchanger: mail3\n"
"    Record name: example.com\n"
"    MX record: 10 mail1, 20 mail2, 30 mail3\n"
"    NS record: nameserver.example.com., nameserver2.example.com.\n"
"\n"
" Delete previously added nameserver from example.com:\n"
"   ipa dnsrecord-del example.com @ --ns-rec=nameserver2.example.com.\n"
"\n"
" Add LOC record for example.com:\n"
"   ipa dnsrecord-add example.com @ --loc-rec=\"49 11 42.4 N 16 36 29.6 E "
"227.64m\"\n"
"\n"
" Add new A record for www.example.com. Create a reverse record in "
"appropriate\n"
" reverse zone as well. In this case a PTR record \"2\" pointing to www."
"example.com\n"
" will be created in zone 15.142.80.in-addr.arpa.\n"
"   ipa dnsrecord-add example.com www --a-rec=80.142.15.2 --a-create-reverse\n"
"\n"
" Add new PTR record for www.example.com\n"
"   ipa dnsrecord-add 15.142.80.in-addr.arpa. 2 --ptr-rec=www.example.com.\n"
"\n"
" Add new SRV records for LDAP servers. Three quarters of the requests\n"
" should go to fast.example.com, one quarter to slow.example.com. If neither\n"
" is available, switch to backup.example.com.\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 3 389 fast.example."
"com\"\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"0 1 389 slow.example."
"com\"\n"
"   ipa dnsrecord-add example.com _ldap._tcp --srv-rec=\"1 1 389 backup."
"example.com\"\n"
"\n"
" The interactive mode can be used for easy modification:\n"
"  ipa dnsrecord-mod example.com _ldap._tcp\n"
"  No option to modify specific record provided.\n"
"  Current DNS record contents:\n"
"\n"
"  SRV record: 0 3 389 fast.example.com, 0 1 389 slow.example.com, 1 1 389 "
"backup.example.com\n"
"\n"
"  Modify SRV record '0 3 389 fast.example.com'? Yes/No (default No):\n"
"  Modify SRV record '0 1 389 slow.example.com'? Yes/No (default No): y\n"
"  SRV Priority [0]:                     (keep the default value)\n"
"  SRV Weight [1]: 2                     (modified value)\n"
"  SRV Port [389]:                       (keep the default value)\n"
"  SRV Target [slow.example.com]:        (keep the default value)\n"
"  1 SRV record skipped. Only one value per DNS record type can be modified "
"at one time.\n"
"    Record name: _ldap._tcp\n"
"    SRV record: 0 3 389 fast.example.com, 1 1 389 backup.example.com, 0 2 "
"389 slow.example.com\n"
"\n"
" After this modification, three fifths of the requests should go to\n"
" fast.example.com and two fifths to slow.example.com.\n"
"\n"
" An example of the interactive mode for dnsrecord-del command:\n"
"   ipa dnsrecord-del example.com www\n"
"   No option to delete specific record provided.\n"
"   Delete all? Yes/No (default No):     (do not delete all records)\n"
"   Current DNS record contents:\n"
"\n"
"   A record: 1.2.3.4, 11.22.33.44\n"
"\n"
"   Delete A record '1.2.3.4'? Yes/No (default No):\n"
"   Delete A record '11.22.33.44'? Yes/No (default No): y\n"
"     Record name: www\n"
"     A record: 1.2.3.4                  (A record 11.22.33.44 has been "
"deleted)\n"
"\n"
" Show zone example.com:\n"
"   ipa dnszone-show example.com\n"
"\n"
" Find zone with \"example\" in its domain name:\n"
"   ipa dnszone-find example\n"
"\n"
" Find records for resources with \"www\" in their name in zone example.com:\n"
"   ipa dnsrecord-find example.com www\n"
"\n"
" Find A records with value 10.10.0.1 in zone example.com\n"
"   ipa dnsrecord-find example.com --a-rec=10.10.0.1\n"
"\n"
" Show records for resource www in zone example.com\n"
"   ipa dnsrecord-show example.com www\n"
"\n"
" Delegate zone sub.example to another nameserver:\n"
"   ipa dnsrecord-add example.com ns.sub --a-rec=10.0.100.5\n"
"   ipa dnsrecord-add example.com sub --ns-rec=ns.sub.example.com.\n"
"\n"
" If global forwarder is configured, all requests to sub.example.com will be\n"
" routed through the global forwarder. To change the behavior for example."
"com\n"
" zone only and forward the request directly to ns.sub.example.com., global\n"
" forwarding may be disabled per-zone:\n"
"   ipa dnszone-mod example.com --forward-policy=none\n"
"\n"
" Forward all requests for the zone external.com to another nameserver using\n"
" a \"first\" policy (it will send the queries to the selected forwarder and "
"if\n"
" not answered it will use global resolvers):\n"
"   ipa dnszone-add external.com\n"
"   ipa dnszone-mod external.com --forwarder=10.20.0.1 \\\n"
"                                --forward-policy=first\n"
"\n"
" Delete zone example.com with all resource records:\n"
"   ipa dnszone-del example.com\n"
"\n"
" Resolve a host name to see if it exists (will add default IPA domain\n"
" if one is not included):\n"
"   ipa dns-resolve www.example.com\n"
"   ipa dns-resolve www\n"
"\n"
"\n"
"GLOBAL DNS CONFIGURATION\n"
"\n"
"DNS configuration passed to command line install script is stored in a "
"local\n"
"configuration file on each IPA server where DNS service is configured. "
"These\n"
"local settings can be overridden with a common configuration stored in LDAP\n"
"server:\n"
"\n"
" Show global DNS configuration:\n"
"   ipa dnsconfig-show\n"
"\n"
" Modify global DNS configuration and set a list of global forwarders:\n"
"   ipa dnsconfig-mod --forwarder=10.0.0.1\n"
msgstr ""

#: ipalib/plugins/dns.py:293
#, python-format
msgid "invalid IP address version (is %(value)d, must be %(required_value)d)!"
msgstr ""

#: ipalib/plugins/dns.py:296
msgid "invalid IP address format"
msgstr ""

#: ipalib/plugins/dns.py:309
msgid "invalid IP network format"
msgstr ""

#: ipalib/plugins/dns.py:318
msgid "each ACL element must be terminated with a semicolon"
msgstr ""

#: ipalib/plugins/dns.py:335
msgid "invalid address format"
msgstr ""

#: ipalib/plugins/dns.py:379 ipalib/plugins/dns.py:422
#, python-format
msgid "invalid domain-name: %s"
msgstr ""

#: ipalib/plugins/dns.py:408
#, python-format
msgid "%(port)s is not a valid port"
msgstr ""

#: ipalib/plugins/dns.py:484
#, python-format
msgid "DNS reverse zone for IP address %(addr)s not found"
msgstr ""

#: ipalib/plugins/dns.py:496
#, python-format
msgid "DNS zone %(zone)s not found"
msgstr ""

#: ipalib/plugins/dns.py:510
#, python-format
msgid "IP address %(ip)s is already assigned in domain %(domain)s."
msgstr ""

#: ipalib/plugins/dns.py:523
#, python-format
msgid ""
"Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s."
msgstr ""

#: ipalib/plugins/dns.py:559
#, python-format
msgid "%s record"
msgstr ""

#: ipalib/plugins/dns.py:561
#, python-format
msgid "Raw %s records"
msgstr ""

#: ipalib/plugins/dns.py:562
#, python-format
msgid "%s Record"
msgstr ""

#: ipalib/plugins/dns.py:563
#, python-format
msgid "(see RFC %s for details)"
msgstr ""

#: ipalib/plugins/dns.py:619
#, python-format
msgid "'%s' is a required part of DNS record"
msgstr ""

#: ipalib/plugins/dns.py:626
msgid "Invalid number of parts!"
msgstr ""

#: ipalib/plugins/dns.py:681
#, python-format
msgid "DNS RR type \"%s\" is not supported by bind-dyndb-ldap plugin"
msgstr ""

#: ipalib/plugins/dns.py:697
#, python-format
msgid "format must be specified as \"%(format)s\" %(rfcs)s"
msgstr ""

#: ipalib/plugins/dns.py:821
msgid "Create reverse"
msgstr ""

#: ipalib/plugins/dns.py:822
msgid "Create reverse record for this IP Address"
msgstr ""

#: ipalib/plugins/dns.py:857
#, python-format
msgid "Cannot create reverse record for \"%(value)s\": %(exc)s"
msgstr ""

#: ipalib/plugins/dns.py:866 ipalib/plugins/dns.py:889
#: ipalib/plugins/host.py:406
msgid "IP Address"
msgstr ""

#: ipalib/plugins/dns.py:875 ipalib/plugins/dns.py:1486
msgid "Record data"
msgstr ""

#: ipalib/plugins/dns.py:898
msgid "Subtype"
msgstr ""

#: ipalib/plugins/dns.py:904 ipalib/plugins/dns.py:943
#: ipalib/plugins/dns.py:1196 ipalib/plugins/dns.py:1293
#: ipalib/plugins/dns.py:2930
msgid "Hostname"
msgstr ""

#: ipalib/plugins/dns.py:918
msgid "Certificate Type"
msgstr ""

#: ipalib/plugins/dns.py:923 ipalib/plugins/dns.py:978
#: ipalib/plugins/dns.py:1376
msgid "Key Tag"
msgstr ""

#: ipalib/plugins/dns.py:928 ipalib/plugins/dns.py:983
#: ipalib/plugins/dns.py:1017 ipalib/plugins/dns.py:1354
#: ipalib/plugins/dns.py:1402
msgid "Algorithm"
msgstr ""

#: ipalib/plugins/dns.py:933
msgid "Certificate/CRL"
msgstr ""

#: ipalib/plugins/dns.py:944
msgid "A hostname which this alias hostname points to"
msgstr ""

#: ipalib/plugins/dns.py:964 ipalib/plugins/dns.py:1330
#: ipalib/plugins/internal.py:502
msgid "Target"
msgstr ""

#: ipalib/plugins/dns.py:988
msgid "Digest Type"
msgstr ""

#: ipalib/plugins/dns.py:993
msgid "Digest"
msgstr ""

#: ipalib/plugins/dns.py:1007 ipalib/plugins/dns.py:1272
msgid "Flags"
msgstr ""

#: ipalib/plugins/dns.py:1012
msgid "Protocol"
msgstr ""

#: ipalib/plugins/dns.py:1022
msgid "Public Key"
msgstr ""

#: ipalib/plugins/dns.py:1036 ipalib/plugins/dns.py:1177
#: ipalib/plugins/dns.py:1266
msgid "Preference"
msgstr ""

#: ipalib/plugins/dns.py:1037 ipalib/plugins/dns.py:1178
msgid "Preference given to this exchanger. Lower values are more preferred"
msgstr ""

#: ipalib/plugins/dns.py:1043 ipalib/plugins/dns.py:1184
msgid "Exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1044
msgid "A host willing to act as a key exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1053
msgid "Degrees Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1058
msgid "Minutes Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1063
msgid "Seconds Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1069
msgid "Direction Latitude"
msgstr ""

#: ipalib/plugins/dns.py:1073
msgid "Degrees Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1078
msgid "Minutes Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1083
msgid "Seconds Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1089
msgid "Direction Longitude"
msgstr ""

#: ipalib/plugins/dns.py:1093
msgid "Altitude"
msgstr ""

#: ipalib/plugins/dns.py:1099
msgid "Size"
msgstr ""

#: ipalib/plugins/dns.py:1105
msgid "Horizontal Precision"
msgstr ""

#: ipalib/plugins/dns.py:1111
msgid "Vertical Precision"
msgstr ""

#: ipalib/plugins/dns.py:1118
msgid ""
"format must be specified as\n"
"    \"d1 [m1 [s1]] {\"N\"|\"S\"}  d2 [m2 [s2]] {\"E\"|\"W\"} alt[\"m\"] "
"[siz[\"m\"] [hp[\"m\"] [vp[\"m\"]]]]\"\n"
"    where:\n"
"       d1:     [0 .. 90]            (degrees latitude)\n"
"       d2:     [0 .. 180]           (degrees longitude)\n"
"       m1, m2: [0 .. 59]            (minutes latitude/longitude)\n"
"       s1, s2: [0 .. 59.999]        (seconds latitude/longitude)\n"
"       alt:    [-100000.00 .. 42849672.95] BY .01 (altitude in meters)\n"
"       siz, hp, vp: [0 .. 90000000.00] (size/precision in meters)\n"
"    See RFC 1876 for details"
msgstr ""

#: ipalib/plugins/dns.py:1167
#, python-format
msgid "'%(required)s' must not be empty when '%(name)s' is set"
msgstr ""

#: ipalib/plugins/dns.py:1185
msgid "A host willing to act as a mail exchanger"
msgstr ""

#: ipalib/plugins/dns.py:1203
msgid ""
"format must be specified as \"NEXT TYPE1 [TYPE2 [TYPE3 [...]]]\" (see RFC "
"4034 for details)"
msgstr ""

#: ipalib/plugins/dns.py:1210
msgid "Next Domain Name"
msgstr ""

#: ipalib/plugins/dns.py:1213
msgid "Type Map"
msgstr ""

#: ipalib/plugins/dns.py:1253
msgid "flags must be one of \"S\", \"A\", \"U\", or \"P\""
msgstr ""

#: ipalib/plugins/dns.py:1261
msgid "Order"
msgstr ""

#: ipalib/plugins/dns.py:1276 ipalib/plugins/hbactest.py:265
#: ipalib/plugins/internal.py:551 ipalib/plugins/service.py:316
msgid "Service"
msgstr ""

#: ipalib/plugins/dns.py:1279
msgid "Regular Expression"
msgstr ""

#: ipalib/plugins/dns.py:1282
msgid "Replacement"
msgstr ""

#: ipalib/plugins/dns.py:1294
msgid "The hostname this reverse record points to"
msgstr ""

#: ipalib/plugins/dns.py:1314 ipalib/plugins/pwpolicy.py:267
msgid "Priority"
msgstr ""

#: ipalib/plugins/dns.py:1319
msgid "Weight"
msgstr ""

#: ipalib/plugins/dns.py:1324
msgid "Port"
msgstr ""

#: ipalib/plugins/dns.py:1331
msgid ""
"The domain name of the target host or '.' if the service is decidedly not "
"available at this domain"
msgstr ""

#: ipalib/plugins/dns.py:1340
msgid "the value does not follow \"YYYYMMDDHHMMSS\" time format"
msgstr ""

#: ipalib/plugins/dns.py:1350
msgid "Type Covered"
msgstr ""

#: ipalib/plugins/dns.py:1359
msgid "Labels"
msgstr ""

#: ipalib/plugins/dns.py:1364
msgid "Original TTL"
msgstr ""

#: ipalib/plugins/dns.py:1369
msgid "Signature Expiration"
msgstr ""

#: ipalib/plugins/dns.py:1373
msgid "Signature Inception"
msgstr ""

#: ipalib/plugins/dns.py:1381
msgid "Signer's Name"
msgstr ""

#: ipalib/plugins/dns.py:1384
msgid "Signature"
msgstr ""

#: ipalib/plugins/dns.py:1407
msgid "Fingerprint Type"
msgstr ""

#: ipalib/plugins/dns.py:1412
msgid "Fingerprint"
msgstr ""

#: ipalib/plugins/dns.py:1433
msgid "Text Data"
msgstr ""

#: ipalib/plugins/dns.py:1480
msgid "Records"
msgstr ""

#: ipalib/plugins/dns.py:1483
msgid "Record type"
msgstr ""

#: ipalib/plugins/dns.py:1516
#, python-format
msgid "Nameserver '%(host)s' does not have a corresponding A/AAAA record"
msgstr ""

#: ipalib/plugins/dns.py:1534
msgid "Managedby permission"
msgstr ""

#: ipalib/plugins/dns.py:1543
msgid "DNS zone"
msgstr ""

#: ipalib/plugins/dns.py:1544
msgid "DNS zones"
msgstr ""

#: ipalib/plugins/dns.py:1553
msgid "DNS Zones"
msgstr ""

#: ipalib/plugins/dns.py:1554
msgid "DNS Zone"
msgstr ""

#: ipalib/plugins/dns.py:1560
msgid "Zone name"
msgstr ""

#: ipalib/plugins/dns.py:1561
msgid "Zone name (FQDN)"
msgstr ""

#: ipalib/plugins/dns.py:1567
msgid "Reverse zone IP network"
msgstr ""

#: ipalib/plugins/dns.py:1568
msgid "IP network to create reverse zone name from"
msgstr ""

#: ipalib/plugins/dns.py:1573
msgid "Authoritative nameserver"
msgstr ""

#: ipalib/plugins/dns.py:1574
msgid "Authoritative nameserver domain name"
msgstr ""

#: ipalib/plugins/dns.py:1580 ipalib/plugins/dns.py:1581
msgid "Administrator e-mail address"
msgstr ""

#: ipalib/plugins/dns.py:1587
msgid "SOA serial"
msgstr ""

#: ipalib/plugins/dns.py:1588
msgid "SOA record serial number"
msgstr ""

#: ipalib/plugins/dns.py:1596
msgid "SOA refresh"
msgstr ""

#: ipalib/plugins/dns.py:1597
msgid "SOA record refresh time"
msgstr ""

#: ipalib/plugins/dns.py:1605
msgid "SOA retry"
msgstr ""

#: ipalib/plugins/dns.py:1606
msgid "SOA record retry time"
msgstr ""

#: ipalib/plugins/dns.py:1614
msgid "SOA expire"
msgstr ""

#: ipalib/plugins/dns.py:1615
msgid "SOA record expire time"
msgstr ""

#: ipalib/plugins/dns.py:1623
msgid "SOA minimum"
msgstr ""

#: ipalib/plugins/dns.py:1624
msgid "How long should negative responses be cached"
msgstr ""

#: ipalib/plugins/dns.py:1632
msgid "SOA time to live"
msgstr ""

#: ipalib/plugins/dns.py:1633
msgid "SOA record time to live"
msgstr ""

#: ipalib/plugins/dns.py:1639
msgid "SOA class"
msgstr ""

#: ipalib/plugins/dns.py:1640
msgid "SOA record class"
msgstr ""

#: ipalib/plugins/dns.py:1645 ipalib/plugins/dns.py:1646
msgid "BIND update policy"
msgstr ""

#: ipalib/plugins/dns.py:1652
msgid "Active zone"
msgstr ""

#: ipalib/plugins/dns.py:1653
msgid "Is zone active?"
msgstr ""

#: ipalib/plugins/dns.py:1659
msgid "Dynamic update"
msgstr ""

#: ipalib/plugins/dns.py:1660
msgid "Allow dynamic updates."
msgstr ""

#: ipalib/plugins/dns.py:1669
msgid "Allow query"
msgstr ""

#: ipalib/plugins/dns.py:1670
msgid ""
"Semicolon separated list of IP addresses or networks which are allowed to "
"issue queries"
msgstr ""

#: ipalib/plugins/dns.py:1678
msgid "Allow transfer"
msgstr ""

#: ipalib/plugins/dns.py:1679
msgid ""
"Semicolon separated list of IP addresses or networks which are allowed to "
"transfer the zone"
msgstr ""

#: ipalib/plugins/dns.py:1686
msgid "Zone forwarders"
msgstr ""

#: ipalib/plugins/dns.py:1687
msgid ""
"Per-zone forwarders. A custom port can be specified for each forwarder using "
"a standard format \"IP_ADDRESS port PORT\""
msgstr ""

#: ipalib/plugins/dns.py:1693 ipalib/plugins/dns.py:2999
msgid "Forward policy"
msgstr ""

#: ipalib/plugins/dns.py:1694
msgid ""
"Per-zone conditional forwarding policy. Set to \"none\" to disable "
"forwarding to global forwarder for this zone. In that case, conditional zone "
"forwarders are disregarded."
msgstr ""

#: ipalib/plugins/dns.py:1701 ipalib/plugins/dns.py:3006
msgid "Allow PTR sync"
msgstr ""

#: ipalib/plugins/dns.py:1702
msgid ""
"Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the "
"zone"
msgstr ""

#: ipalib/plugins/dns.py:1764
msgid "Create new DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:1769 ipalib/plugins/dns.py:1904
#: ipalib/plugins/dns.py:2365 ipalib/plugins/host.py:398
#: ipalib/plugins/permission.py:298 ipalib/plugins/realmdomains.py:97
#: ipalib/plugins/service.py:369
msgid "Force"
msgstr ""

#: ipalib/plugins/dns.py:1770
msgid "Force DNS zone creation even if nameserver is not resolvable."
msgstr ""

#: ipalib/plugins/dns.py:1773
msgid "Add forward record for nameserver located in the created zone"
msgstr ""

#: ipalib/plugins/dns.py:1774 ipalib/plugins/dns.py:1795
msgid "Nameserver IP address"
msgstr ""

#: ipalib/plugins/dns.py:1801
msgid "DNS is not configured"
msgstr ""

#: ipalib/plugins/dns.py:1811
msgid "Nameserver address is not a domain name"
msgstr ""

#: ipalib/plugins/dns.py:1824
msgid "Nameserver for reverse zone cannot be a relative DNS name"
msgstr ""

#: ipalib/plugins/dns.py:1828
msgid "Nameserver DNS record is created for for forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:1832
msgid "Nameserver DNS record is created only for nameservers in current zone"
msgstr ""

#: ipalib/plugins/dns.py:1873
msgid "Delete DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:1875
#, python-format
msgid "Deleted DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:1900
msgid "Modify DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:1905
msgid "Force nameserver change even if nameserver not in DNS"
msgstr ""

#: ipalib/plugins/dns.py:1922
msgid "Search for DNS zones (SOA records)."
msgstr ""

#: ipalib/plugins/dns.py:1946
msgid "Forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:1948
msgid "Search for forward zones only"
msgstr ""

#: ipalib/plugins/dns.py:1968
msgid "Display information about a DNS zone (SOA record)."
msgstr ""

#: ipalib/plugins/dns.py:1976
msgid "Disable DNS Zone."
msgstr ""

#: ipalib/plugins/dns.py:1979
#, python-format
msgid "Disabled DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:1997
msgid "Enable DNS Zone."
msgstr ""

#: ipalib/plugins/dns.py:2000
#, python-format
msgid "Enabled DNS zone \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2017
msgid "Add a permission for per-zone access delegation."
msgstr ""

#: ipalib/plugins/dns.py:2020
#, python-format
msgid "Added system permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2053
msgid "Remove a permission for per-zone access delegation."
msgstr ""

#: ipalib/plugins/dns.py:2056
#, python-format
msgid "Removed system permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2087
msgid "DNS resource record"
msgstr ""

#: ipalib/plugins/dns.py:2088
msgid "DNS resource records"
msgstr ""

#: ipalib/plugins/dns.py:2093
msgid "DNS Resource Records"
msgstr ""

#: ipalib/plugins/dns.py:2094
msgid "DNS Resource Record"
msgstr ""

#: ipalib/plugins/dns.py:2100 ipalib/plugins/dns.py:2101
msgid "Record name"
msgstr ""

#: ipalib/plugins/dns.py:2106 ipalib/plugins/dns.py:2107
msgid "Time to live"
msgstr ""

#: ipalib/plugins/dns.py:2111 ipalib/plugins/host.py:330
msgid "Class"
msgstr ""

#: ipalib/plugins/dns.py:2112
msgid "DNS class"
msgstr ""

#: ipalib/plugins/dns.py:2118
msgid "Structured"
msgstr ""

#: ipalib/plugins/dns.py:2119
msgid "Parse all raw DNS records and return them in a structured way"
msgstr ""

#: ipalib/plugins/dns.py:2150
#, python-format
msgid ""
"Reverse zone for PTR record should be a sub-zone of one the following fully "
"qualified domains: %s"
msgstr ""

#: ipalib/plugins/dns.py:2156
#, python-format
msgid ""
"Reverse zone %(name)s requires exactly %(count)d IP address components, "
"%(user_count)d given"
msgstr ""

#: ipalib/plugins/dns.py:2328
msgid "only one CNAME record is allowed per name (RFC 2136, section 1.1.5)"
msgstr ""

#: ipalib/plugins/dns.py:2334
msgid ""
"CNAME record is not allowed to coexist with any other record (RFC 1034, "
"section 3.6.2)"
msgstr ""

#: ipalib/plugins/dns.py:2346
msgid "only one DNAME record is allowed per name (RFC 6672, section 2.4)"
msgstr ""

#: ipalib/plugins/dns.py:2351
msgid ""
"DNAME record is not allowed to coexist with an NS record except when located "
"in a zone root record (RFC 6672, section 2.3)"
msgstr ""

#: ipalib/plugins/dns.py:2359
msgid "Add new DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:2367
msgid "force NS record creation even if its hostname is not in DNS"
msgstr ""

#: ipalib/plugins/dns.py:2404
msgid "Please choose a type of DNS resource record to be added"
msgstr ""

#: ipalib/plugins/dns.py:2405
#, python-format
msgid "The most common types for this type of zone are: %s\n"
msgstr ""

#: ipalib/plugins/dns.py:2410
msgid "DNS resource record type"
msgstr ""

#: ipalib/plugins/dns.py:2426
#, python-format
msgid "Invalid or unsupported type. Allowed values are: %s"
msgstr ""

#: ipalib/plugins/dns.py:2454
#, python-format
msgid "Raw value of a DNS record was already set by \"%(name)s\" option"
msgstr ""

#: ipalib/plugins/dns.py:2549
msgid "Modify a DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:2566
msgid "DNS zone root record cannot be renamed"
msgstr ""

#: ipalib/plugins/dns.py:2584
msgid "DNS records can be only updated one at a time"
msgstr ""

#: ipalib/plugins/dns.py:2664
msgid "No option to modify specific record provided."
msgstr ""

#: ipalib/plugins/dns.py:2667 ipalib/plugins/dns.py:2839
msgid "Current DNS record contents:\n"
msgstr ""

#: ipalib/plugins/dns.py:2689
#, python-format
msgid "Modify %(name)s '%(value)s'?"
msgstr ""

#: ipalib/plugins/dns.py:2697
#, python-format
msgid ""
"%(count)d %(type)s record skipped. Only one value per DNS record type can be "
"modified at one time."
msgid_plural ""
"%(count)d %(type)s records skipped. Only one value per DNS record type can "
"be modified at one time."
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/dns.py:2709
#, python-format
msgid "Deleted record \"%(value)s\""
msgstr ""

#: ipalib/plugins/dns.py:2716
msgid "Delete DNS resource record."
msgstr ""

#: ipalib/plugins/dns.py:2720
msgid ""
"Neither --del-all nor options to delete a specific record provided.\n"
"Command help may be consulted for all supported record types."
msgstr ""

#: ipalib/plugins/dns.py:2726
msgid "Delete all associated records"
msgstr ""

#: ipalib/plugins/dns.py:2792
#, python-format
msgid "Zone record '%s' cannot be deleted"
msgstr ""

#: ipalib/plugins/dns.py:2831
msgid "No option to delete specific record provided."
msgstr ""

#: ipalib/plugins/dns.py:2832
msgid "Delete all?"
msgstr ""

#: ipalib/plugins/dns.py:2860
#, python-format
msgid "Delete %(name)s '%(value)s'?"
msgstr ""

#: ipalib/plugins/dns.py:2871
msgid "Display DNS resource."
msgstr ""

#: ipalib/plugins/dns.py:2888
msgid "Search for DNS resources."
msgstr ""

#: ipalib/plugins/dns.py:2923
msgid "Resolve a host name in DNS."
msgstr ""

#: ipalib/plugins/dns.py:2926
#, python-format
msgid "Found '%(value)s'"
msgstr ""

#: ipalib/plugins/dns.py:2943
#, python-format
msgid "Host '%(host)s' not found"
msgstr ""

#: ipalib/plugins/dns.py:2980
msgid "DNS configuration options"
msgstr ""

#: ipalib/plugins/dns.py:2985 ipalib/plugins/dns.py:2986
msgid "DNS Global Configuration"
msgstr ""

#: ipalib/plugins/dns.py:2992
msgid "Global forwarders"
msgstr ""

#: ipalib/plugins/dns.py:2993
msgid ""
"Global forwarders. A custom port can be specified for each forwarder using a "
"standard format \"IP_ADDRESS port PORT\""
msgstr ""

#: ipalib/plugins/dns.py:3000
msgid ""
"Global forwarding policy. Set to \"none\" to disable any configured global "
"forwarders."
msgstr ""

#: ipalib/plugins/dns.py:3007
msgid "Allow synchronization of forward (A, AAAA) and reverse (PTR) records"
msgstr ""

#: ipalib/plugins/dns.py:3011
msgid "Zone refresh interval"
msgstr ""

#: ipalib/plugins/dns.py:3025
msgid "Global DNS configuration is empty"
msgstr ""

#: ipalib/plugins/dns.py:3031
msgid "Modify global DNS configuration."
msgstr ""

#: ipalib/plugins/dns.py:3042
msgid "Show the current global DNS configuration."
msgstr ""

#: ipalib/plugins/group.py:33
msgid ""
"\n"
"Groups of users\n"
"\n"
"Manage groups of users. By default, new groups are POSIX groups. You\n"
"can add the --nonposix option to the group-add command to mark a new group\n"
"as non-POSIX. You can use the --posix argument with the group-mod command\n"
"to convert a non-POSIX group into a POSIX group. POSIX groups cannot be\n"
"converted to non-POSIX groups.\n"
"\n"
"Every group must have a description.\n"
"\n"
"POSIX groups must have a Group ID (GID) number. Changing a GID is\n"
"supported but can have an impact on your file permissions. It is not "
"necessary\n"
"to supply a GID when creating a group. IPA will generate one automatically\n"
"if it is not provided.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new group:\n"
"   ipa group-add --desc='local administrators' localadmins\n"
"\n"
" Add a new non-POSIX group:\n"
"   ipa group-add --nonposix --desc='remote administrators' remoteadmins\n"
"\n"
" Convert a non-POSIX group to posix:\n"
"   ipa group-mod --posix remoteadmins\n"
"\n"
" Add a new POSIX group with a specific Group ID number:\n"
"   ipa group-add --gid=500 --desc='unix admins' unixadmins\n"
"\n"
" Add a new POSIX group and let IPA assign a Group ID number:\n"
"   ipa group-add --desc='printer admins' printeradmins\n"
"\n"
" Remove a group:\n"
"   ipa group-del unixadmins\n"
"\n"
" To add the \"remoteadmins\" group to the \"localadmins\" group:\n"
"   ipa group-add-member --groups=remoteadmins localadmins\n"
"\n"
" Add multiple users to the \"localadmins\" group:\n"
"   ipa group-add-member --users=test1 --users=test2 localadmins\n"
"\n"
" Remove a user from the \"localadmins\" group:\n"
"   ipa group-remove-member --users=test2 localadmins\n"
"\n"
" Display information about a named group.\n"
"   ipa group-show localadmins\n"
"\n"
"External group membership is designed to allow users from trusted domains\n"
"to be mapped to local POSIX groups in order to actually use IPA resources.\n"
"External members should be added to groups that specifically created as\n"
"external and non-POSIX. Such group later should be included into one of "
"POSIX\n"
"groups.\n"
"\n"
"An external group member is currently a Security Identifier (SID) as defined "
"by\n"
"the trusted domain. When adding external group members, it is possible to\n"
"specify them in either SID, or DOM\\name, or name@domain format. IPA will "
"attempt\n"
"to resolve passed name to SID with the use of Global Catalog of the trusted "
"domain.\n"
"\n"
"Example:\n"
"\n"
"1. Create group for the trusted domain admins' mapping and their local POSIX "
"group:\n"
"\n"
"   ipa group-add --desc='<ad.domain> admins external map' ad_admins_external "
"--external\n"
"   ipa group-add --desc='<ad.domain> admins' ad_admins\n"
"\n"
"2. Add security identifier of Domain Admins of the <ad.domain> to the "
"ad_admins_external\n"
"   group:\n"
"\n"
"   ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n"
"\n"
"3. Allow members of ad_admins_external group to be associated with ad_admins "
"POSIX group:\n"
"\n"
"   ipa group-add-member ad_admins --groups ad_admins_external\n"
"\n"
"4. List members of external members of ad_admins_external group to see their "
"SIDs:\n"
"\n"
"   ipa group-show ad_admins_external\n"
msgstr ""

#: ipalib/plugins/group.py:120 ipalib/plugins/group.py:229
#: ipalib/plugins/group.py:449 ipalib/plugins/user.py:189
msgid "group"
msgstr ""

#: ipalib/plugins/group.py:121
msgid "groups"
msgstr ""

#: ipalib/plugins/group.py:140 ipalib/plugins/hbacrule.py:190
#: ipalib/plugins/internal.py:495 ipalib/plugins/selinuxusermap.py:195
#: ipalib/plugins/sudorule.py:159
msgid "User Groups"
msgstr ""

#: ipalib/plugins/group.py:141
msgid "User Group"
msgstr ""

#: ipalib/plugins/group.py:149
msgid "Group name"
msgstr ""

#: ipalib/plugins/group.py:156 ipalib/plugins/sudocmdgroup.py:79
msgid "Group description"
msgstr ""

#: ipalib/plugins/group.py:160 ipalib/plugins/user.py:311
msgid "GID"
msgstr ""

#: ipalib/plugins/group.py:161
msgid "GID (use this option to set it manually)"
msgstr ""

#: ipalib/plugins/group.py:170
msgid "External member"
msgstr ""

#: ipalib/plugins/group.py:171
msgid "Members of a trusted domain in DOM\\name or name@domain form"
msgstr ""

#: ipalib/plugins/group.py:177
msgid "Create a new group."
msgstr ""

#: ipalib/plugins/group.py:179
#, python-format
msgid "Added group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:184
msgid "Create as a non-POSIX group"
msgstr ""

#: ipalib/plugins/group.py:189
msgid "Allow adding external non-IPA members from trusted domains"
msgstr ""

#: ipalib/plugins/group.py:214
msgid "Delete group."
msgstr ""

#: ipalib/plugins/group.py:216
#, python-format
msgid "Deleted group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:230
msgid "privileged group"
msgstr ""

#: ipalib/plugins/group.py:248
msgid "Modify a group."
msgstr ""

#: ipalib/plugins/group.py:250
#, python-format
msgid "Modified group \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:255
msgid "change to a POSIX group"
msgstr ""

#: ipalib/plugins/group.py:259
msgid "change to support external non-IPA members from trusted domains"
msgstr ""

#: ipalib/plugins/group.py:318
msgid "Search for groups."
msgstr ""

#: ipalib/plugins/group.py:323
#, python-format
msgid "%(count)d group matched"
msgid_plural "%(count)d groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/group.py:329
msgid "search for private groups"
msgstr ""

#: ipalib/plugins/group.py:333
msgid "search for POSIX groups"
msgstr ""

#: ipalib/plugins/group.py:337
msgid ""
"search for groups with support of external non-IPA members from trusted "
"domains"
msgstr ""

#: ipalib/plugins/group.py:341
msgid "search for non-POSIX groups"
msgstr ""

#: ipalib/plugins/group.py:388
msgid "Display information about a named group."
msgstr ""

#: ipalib/plugins/group.py:394
msgid "Add members to a group."
msgstr ""

#: ipalib/plugins/group.py:403 ipalib/plugins/group.py:457
#: ipalib/plugins/hbactest.py:382
msgid ""
"Cannot perform external member validation without Samba 4 support installed. "
"Make sure you have installed server-trust-ad sub-package of IPA on the server"
msgstr ""

#: ipalib/plugins/group.py:408 ipalib/plugins/group.py:462
#: ipalib/plugins/trust.py:416 ipalib/plugins/trust.py:1244
msgid ""
"Cannot perform join operation without own domain configured. Make sure you "
"have run ipa-adtrust-install on the IPA server first"
msgstr ""

#: ipalib/plugins/group.py:436
msgid "Remove members from a group."
msgstr ""

#: ipalib/plugins/group.py:490
msgid "Detach a managed group from a user."
msgstr ""

#: ipalib/plugins/group.py:493
#, python-format
msgid "Detached group \"%(value)s\" from user \"%(value)s\""
msgstr ""

#: ipalib/plugins/group.py:514
msgid "not allowed to modify user entries"
msgstr ""

#: ipalib/plugins/group.py:520
msgid "not allowed to modify group entries"
msgstr ""

#: ipalib/plugins/group.py:539
msgid "Not a managed group"
msgstr ""

#: ipalib/plugins/hbacrule.py:25
msgid ""
"\n"
"Host-based access control\n"
"\n"
"Control who can access what services on what hosts. You\n"
"can use HBAC to control which users or groups can\n"
"access a service, or group of services, on a target host.\n"
"\n"
"You can also specify a category of users and target hosts.\n"
"This is currently limited to \"all\", but might be expanded in the\n"
"future.\n"
"\n"
"Target hosts in HBAC rules must be hosts managed by IPA.\n"
"\n"
"The available services and groups of services are controlled by the\n"
"hbacsvc and hbacsvcgroup plug-ins respectively.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a rule, \"test1\", that grants all users access to the host \"server"
"\" from\n"
" anywhere:\n"
"   ipa hbacrule-add --usercat=all test1\n"
"   ipa hbacrule-add-host --hosts=server.example.com test1\n"
"\n"
" Display the properties of a named HBAC rule:\n"
"   ipa hbacrule-show test1\n"
"\n"
" Create a rule for a specific service. This lets the user john access\n"
" the sshd service on any machine from any machine:\n"
"   ipa hbacrule-add --hostcat=all john_sshd\n"
"   ipa hbacrule-add-user --users=john john_sshd\n"
"   ipa hbacrule-add-service --hbacsvcs=sshd john_sshd\n"
"\n"
" Create a rule for a new service group. This lets the user john access\n"
" the FTP service on any machine from any machine:\n"
"   ipa hbacsvcgroup-add ftpers\n"
"   ipa hbacsvc-add sftp\n"
"   ipa hbacsvcgroup-add-member --hbacsvcs=ftp --hbacsvcs=sftp ftpers\n"
"   ipa hbacrule-add --hostcat=all john_ftp\n"
"   ipa hbacrule-add-user --users=john john_ftp\n"
"   ipa hbacrule-add-service --hbacsvcgroups=ftpers john_ftp\n"
"\n"
" Disable a named HBAC rule:\n"
"   ipa hbacrule-disable test1\n"
"\n"
" Remove a named HBAC rule:\n"
"   ipa hbacrule-del allow_server\n"
msgstr ""

#: ipalib/plugins/hbacrule.py:89
msgid "Host-based access control commands"
msgstr ""

#: ipalib/plugins/hbacrule.py:93
msgid "The deny type has been deprecated."
msgstr ""

#: ipalib/plugins/hbacrule.py:115
msgid "HBAC rule"
msgstr ""

#: ipalib/plugins/hbacrule.py:116
msgid "HBAC rules"
msgstr ""

#: ipalib/plugins/hbacrule.py:134
msgid "HBAC Rules"
msgstr ""

#: ipalib/plugins/hbacrule.py:135 ipalib/plugins/selinuxusermap.py:167
msgid "HBAC Rule"
msgstr ""

#: ipalib/plugins/hbacrule.py:140 ipalib/plugins/selinuxusermap.py:158
#: ipalib/plugins/sudorule.py:106
msgid "Rule name"
msgstr ""

#: ipalib/plugins/hbacrule.py:145
msgid "Rule type (allow)"
msgstr ""

#: ipalib/plugins/hbacrule.py:146
msgid "Rule type"
msgstr ""

#: ipalib/plugins/hbacrule.py:156 ipalib/plugins/netgroup.py:139
#: ipalib/plugins/selinuxusermap.py:172 ipalib/plugins/sudorule.py:119
msgid "User category"
msgstr ""

#: ipalib/plugins/hbacrule.py:157 ipalib/plugins/netgroup.py:140
#: ipalib/plugins/selinuxusermap.py:173 ipalib/plugins/sudorule.py:120
msgid "User category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:162 ipalib/plugins/netgroup.py:145
#: ipalib/plugins/selinuxusermap.py:178 ipalib/plugins/sudorule.py:125
msgid "Host category"
msgstr ""

#: ipalib/plugins/hbacrule.py:163 ipalib/plugins/netgroup.py:146
#: ipalib/plugins/selinuxusermap.py:179 ipalib/plugins/sudorule.py:126
msgid "Host category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:169
msgid "Service category"
msgstr ""

#: ipalib/plugins/hbacrule.py:170
msgid "Service category the rule applies to"
msgstr ""

#: ipalib/plugins/hbacrule.py:182 ipalib/plugins/internal.py:658
#: ipalib/plugins/selinuxusermap.py:187 ipalib/plugins/sudorule.py:114
msgid "Enabled"
msgstr ""

#: ipalib/plugins/hbacrule.py:186 ipalib/plugins/internal.py:496
#: ipalib/plugins/selinuxusermap.py:191 ipalib/plugins/sudorule.py:155
#: ipalib/plugins/user.py:225
msgid "Users"
msgstr ""

#: ipalib/plugins/hbacrule.py:194 ipalib/plugins/host.py:255
#: ipalib/plugins/internal.py:490 ipalib/plugins/selinuxusermap.py:199
#: ipalib/plugins/sudorule.py:163
msgid "Hosts"
msgstr ""

#: ipalib/plugins/hbacrule.py:198 ipalib/plugins/hostgroup.py:75
#: ipalib/plugins/internal.py:489 ipalib/plugins/selinuxusermap.py:203
#: ipalib/plugins/sudorule.py:167
msgid "Host Groups"
msgstr ""

#: ipalib/plugins/hbacrule.py:204 ipalib/plugins/internal.py:437
#: ipalib/plugins/service.py:315
msgid "Services"
msgstr ""

#: ipalib/plugins/hbacrule.py:208
msgid "Service Groups"
msgstr ""

#: ipalib/plugins/hbacrule.py:218
msgid "Create a new HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:220
#, python-format
msgid "Added HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:232
msgid "Delete an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:234
#, python-format
msgid "Deleted HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:249
msgid "Modify an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:251
#, python-format
msgid "Modified HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:261 ipalib/plugins/netgroup.py:213
#: ipalib/plugins/sudorule.py:289
msgid "user category cannot be set to 'all' while there are allowed users"
msgstr ""

#: ipalib/plugins/hbacrule.py:263 ipalib/plugins/netgroup.py:215
#: ipalib/plugins/sudorule.py:291
msgid "host category cannot be set to 'all' while there are allowed hosts"
msgstr ""

#: ipalib/plugins/hbacrule.py:265
msgid ""
"service category cannot be set to 'all' while there are allowed services"
msgstr ""

#: ipalib/plugins/hbacrule.py:272
msgid "Search for HBAC rules."
msgstr ""

#: ipalib/plugins/hbacrule.py:275
#, python-format
msgid "%(count)d HBAC rule matched"
msgid_plural "%(count)d HBAC rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacrule.py:282
msgid "Display the properties of an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:288
msgid "Enable an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:290
#, python-format
msgid "Enabled HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:315
msgid "Disable an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:317
#, python-format
msgid "Disabled HBAC rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacrule.py:349 ipalib/plugins/hbacrule.py:389
msgid "Access time"
msgstr ""

#: ipalib/plugins/hbacrule.py:423
msgid "Add users and groups to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:437 ipalib/plugins/selinuxusermap.py:460
#: ipalib/plugins/sudorule.py:439
msgid "users cannot be added when user category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:444
msgid "Remove users and groups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:453
msgid "Add target hosts and hostgroups to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:467 ipalib/plugins/selinuxusermap.py:492
#: ipalib/plugins/sudorule.py:475
msgid "hosts cannot be added when host category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:474
msgid "Remove target hosts and hostgroups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:507
msgid "Add services to an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacrule.py:521
msgid "services cannot be added when service category='all'"
msgstr ""

#: ipalib/plugins/hbacrule.py:528
msgid "Remove service and service groups from an HBAC rule."
msgstr ""

#: ipalib/plugins/hbacsvc.py:27
msgid ""
"\n"
"HBAC Services\n"
"\n"
"The PAM services that HBAC can control access to. The name used here\n"
"must match the service name that PAM is evaluating.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new HBAC service:\n"
"   ipa hbacsvc-add tftp\n"
"\n"
" Modify an existing HBAC service:\n"
"   ipa hbacsvc-mod --desc=\"TFTP service\" tftp\n"
"\n"
" Search for HBAC services. This example will return two results, the FTP\n"
" service and the newly-added tftp service:\n"
"   ipa hbacsvc-find ftp\n"
"\n"
" Delete an HBAC service:\n"
"   ipa hbacsvc-del tftp\n"
"\n"
msgstr ""

#: ipalib/plugins/hbacsvc.py:50 ipalib/plugins/hbacsvcgroup.py:45
msgid "Host based access control commands"
msgstr ""

#: ipalib/plugins/hbacsvc.py:57 ipalib/plugins/hbacsvc.py:73
msgid "HBAC service"
msgstr ""

#: ipalib/plugins/hbacsvc.py:58
msgid "HBAC services"
msgstr ""

#: ipalib/plugins/hbacsvc.py:66
msgid "HBAC Services"
msgstr ""

#: ipalib/plugins/hbacsvc.py:67
msgid "HBAC Service"
msgstr ""

#: ipalib/plugins/hbacsvc.py:72
msgid "Service name"
msgstr ""

#: ipalib/plugins/hbacsvc.py:80
msgid "HBAC service description"
msgstr ""

#: ipalib/plugins/hbacsvc.py:88
msgid "Add a new HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:90
#, python-format
msgid "Added HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:96
msgid "Delete an existing HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:98
#, python-format
msgid "Deleted HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:104
msgid "Modify an HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvc.py:106
#, python-format
msgid "Modified HBAC service \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvc.py:112
msgid "Search for HBAC services."
msgstr ""

#: ipalib/plugins/hbacsvc.py:115
#, python-format
msgid "%(count)d HBAC service matched"
msgid_plural "%(count)d HBAC services matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacsvc.py:122
msgid "Display information about an HBAC service."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:24
msgid ""
"\n"
"HBAC Service Groups\n"
"\n"
"HBAC service groups can contain any number of individual services,\n"
"or \"members\". Every group must have a description.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new HBAC service group:\n"
"   ipa hbacsvcgroup-add --desc=\"login services\" login\n"
"\n"
" Add members to an HBAC service group:\n"
"   ipa hbacsvcgroup-add-member --hbacsvcs=sshd --hbacsvcs=login login\n"
"\n"
" Display information about a named group:\n"
"   ipa hbacsvcgroup-show login\n"
"\n"
" Delete an HBAC service group:\n"
"   ipa hbacsvcgroup-del login\n"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:52
msgid "HBAC service group"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:53
msgid "HBAC service groups"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:61
msgid "HBAC Service Groups"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:62
msgid "HBAC Service Group"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:67
msgid "Service group name"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:74
msgid "HBAC service group description"
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:82
msgid "Add a new HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:84
#, python-format
msgid "Added HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:90
msgid "Delete an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:92
#, python-format
msgid "Deleted HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:98
msgid "Modify an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:100
#, python-format
msgid "Modified HBAC service group \"%(value)s\""
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:106
msgid "Search for an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:109
#, python-format
msgid "%(count)d HBAC service group matched"
msgid_plural "%(count)d HBAC service groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hbacsvcgroup.py:116
msgid "Display information about an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:122
msgid "Add members to an HBAC service group."
msgstr ""

#: ipalib/plugins/hbacsvcgroup.py:128
msgid "Remove members from an HBAC service group."
msgstr ""

#: ipalib/plugins/hbactest.py:35
msgid ""
"\n"
"Simulate use of Host-based access controls\n"
"\n"
"HBAC rules control who can access what services on what hosts.\n"
"You can use HBAC to control which users or groups can access a service,\n"
"or group of services, on a target host.\n"
"\n"
"Since applying HBAC rules implies use of a production environment,\n"
"this plugin aims to provide simulation of HBAC rules evaluation without\n"
"having access to the production environment.\n"
"\n"
" Test user coming to a service on a named host against\n"
" existing enabled rules.\n"
"\n"
" ipa hbactest --user= --host= --service=\n"
"              [--rules=rules-list] [--nodetail] [--enabled] [--disabled]\n"
"              [--sizelimit= ]\n"
"\n"
" --user, --host, and --service are mandatory, others are optional.\n"
"\n"
" If --rules is specified simulate enabling of the specified rules and test\n"
" the login of the user using only these rules.\n"
"\n"
" If --enabled is specified, all enabled HBAC rules will be added to "
"simulation\n"
"\n"
" If --disabled is specified, all disabled HBAC rules will be added to "
"simulation\n"
"\n"
" If --nodetail is specified, do not return information about rules matched/"
"not matched.\n"
"\n"
" If both --rules and --enabled are specified, apply simulation to --rules "
"_and_\n"
" all IPA enabled rules.\n"
"\n"
" If no --rules specified, simulation is run against all IPA enabled rules.\n"
" By default there is a IPA-wide limit to number of entries fetched, you can "
"change it\n"
" with --sizelimit option.\n"
"\n"
"EXAMPLES:\n"
"\n"
"    1. Use all enabled HBAC rules in IPA database to simulate:\n"
"    $ ipa  hbactest --user=a1a --host=bar --service=sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Matched rules: allow_all\n"
"\n"
"    2. Disable detailed summary of how rules were applied:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd --nodetail\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"\n"
"    3. Test explicitly specified HBAC rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: myrule\n"
"\n"
"    4. Use all enabled HBAC rules in IPA database + explicitly specified "
"rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule --enabled\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Matched rules: allow_all\n"
"\n"
"    5. Test all disabled HBAC rules in IPA database:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd --disabled\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: new-rule\n"
"\n"
"    6. Test all disabled HBAC rules in IPA database + explicitly specified "
"rules:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --rules=myrule --rules=my-second-rule --disabled\n"
"    ---------------------\n"
"    Access granted: False\n"
"    ---------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"\n"
"    7. Test all (enabled and disabled) HBAC rules in IPA database:\n"
"    $ ipa hbactest --user=a1a --host=bar --service=sshd \\\n"
"          --enabled --disabled\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Not matched rules: my-second-rule\n"
"      Not matched rules: my-third-rule\n"
"      Not matched rules: myrule\n"
"      Not matched rules: new-rule\n"
"      Matched rules: allow_all\n"
"\n"
"\n"
"HBACTEST AND TRUSTED DOMAINS\n"
"\n"
"When an external trusted domain is configured in IPA, HBAC rules are also "
"applied\n"
"on users accessing IPA resources from the trusted domain. Trusted domain "
"users and\n"
"groups (and their SIDs) can be then assigned to external groups which can "
"be\n"
"members of POSIX groups in IPA which can be used in HBAC rules and thus "
"allowing\n"
"access to resources protected by the HBAC system.\n"
"\n"
"hbactest plugin is capable of testing access for both local IPA users and "
"users\n"
"from the trusted domains, either by a fully qualified user name or by user "
"SID.\n"
"Such user names need to have a trusted domain specified as a short name\n"
"(DOMAIN\\Administrator) or with a user principal name (UPN), "
"Administrator@ad.test.\n"
"\n"
"Please note that hbactest executed with a trusted domain user as --user "
"parameter\n"
"can be only run by members of \"trust admins\" group.\n"
"\n"
"EXAMPLES:\n"
"\n"
"    1. Test if a user from a trusted domain specified by its shortname "
"matches any\n"
"       rule:\n"
"\n"
"    $ ipa hbactest --user 'DOMAIN\\Administrator' --host `hostname` --"
"service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    2. Test if a user from a trusted domain specified by its domain name "
"matches\n"
"       any rule:\n"
"\n"
"    $ ipa hbactest --user 'Administrator@domain.com' --host `hostname` --"
"service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    3. Test if a user from a trusted domain specified by its SID matches any "
"rule:\n"
"\n"
"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-500 \\\n"
"            --host `hostname` --service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Matched rules: can_login\n"
"\n"
"    4. Test if other user from a trusted domain specified by its SID matches "
"any rule:\n"
"\n"
"    $ ipa hbactest --user S-1-5-21-3035198329-144811719-1378114514-1203 \\\n"
"            --host `hostname` --service sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Not matched rules: can_login\n"
"\n"
"   5. Test if other user from a trusted domain specified by its shortname "
"matches\n"
"       any rule:\n"
"\n"
"    $ ipa hbactest --user 'DOMAIN\\Otheruser' --host `hostname` --service "
"sshd\n"
"    --------------------\n"
"    Access granted: True\n"
"    --------------------\n"
"      Matched rules: allow_all\n"
"      Not matched rules: can_login\n"
msgstr ""

#: ipalib/plugins/hbactest.py:241
msgid "Simulate use of Host-based access controls"
msgstr ""

#: ipalib/plugins/hbactest.py:245
msgid "Warning"
msgstr ""

#: ipalib/plugins/hbactest.py:246
msgid "Matched rules"
msgstr ""

#: ipalib/plugins/hbactest.py:247
msgid "Not matched rules"
msgstr ""

#: ipalib/plugins/hbactest.py:248
msgid "Non-existent or invalid rules"
msgstr ""

#: ipalib/plugins/hbactest.py:249
msgid "Result of simulation"
msgstr ""

#: ipalib/plugins/hbactest.py:255 ipalib/plugins/krbtpolicy.py:85
#: ipalib/plugins/passwd.py:70
msgid "User name"
msgstr ""

#: ipalib/plugins/hbactest.py:261
msgid "Target host"
msgstr ""

#: ipalib/plugins/hbactest.py:269
msgid "Rules to test. If not specified, --enabled is assumed"
msgstr ""

#: ipalib/plugins/hbactest.py:274
msgid "Hide details which rules are matched, not matched, or invalid"
msgstr ""

#: ipalib/plugins/hbactest.py:278
msgid "Include all enabled IPA rules into test [default]"
msgstr ""

#: ipalib/plugins/hbactest.py:282
msgid "Include all disabled IPA rules into test"
msgstr ""

#: ipalib/plugins/hbactest.py:286
msgid "Maximum number of rules to process when no --rules is specified"
msgstr ""

#: ipalib/plugins/hbactest.py:364
msgid "Unresolved rules in --rules"
msgstr ""

#: ipalib/plugins/hbactest.py:388 ipalib/plugins/trust.py:555
msgid ""
"Cannot search in trusted domains without own domain configured. Make sure "
"you have run ipa-adtrust-install on the IPA server first"
msgstr ""

#: ipalib/plugins/hbactest.py:472
#, python-format
msgid "Access granted: %s"
msgstr ""

#: ipalib/plugins/host.py:48
msgid ""
"\n"
"Hosts/Machines\n"
"\n"
"A host represents a machine. It can be used in a number of contexts:\n"
"- service entries are associated with a host\n"
"- a host stores the host/ service principal\n"
"- a host can be used in Host-based Access Control (HBAC) rules\n"
"- every enrolled client generates a host entry\n"
msgstr ""

#: ipalib/plugins/host.py:56
msgid ""
"\n"
"ENROLLMENT:\n"
"\n"
"There are three enrollment scenarios when enrolling a new client:\n"
"\n"
"1. You are enrolling as a full administrator. The host entry may exist\n"
"   or not. A full administrator is a member of the hostadmin role\n"
"   or the admins group.\n"
"2. You are enrolling as a limited administrator. The host must already\n"
"   exist. A limited administrator is a member a role with the\n"
"   Host Enrollment privilege.\n"
"3. The host has been created with a one-time password.\n"
msgstr ""

#: ipalib/plugins/host.py:68
msgid ""
"\n"
"RE-ENROLLMENT:\n"
"\n"
"Host that has been enrolled at some point, and lost its configuration (e.g. "
"VM\n"
"destroyed) can be re-enrolled.\n"
"\n"
"For more information, consult the manual pages for ipa-client-install.\n"
"\n"
"A host can optionally store information such as where it is located,\n"
"the OS that it runs, etc.\n"
msgstr ""

#: ipalib/plugins/host.py:78
msgid ""
"\n"
"EXAMPLES:\n"
msgstr ""

#: ipalib/plugins/host.py:80
msgid ""
"\n"
" Add a new host:\n"
"   ipa host-add --location=\"3rd floor lab\" --locality=Dallas test.example."
"com\n"
msgstr ""

#: ipalib/plugins/host.py:83
msgid ""
"\n"
" Delete a host:\n"
"   ipa host-del test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:86
msgid ""
"\n"
" Add a new host with a one-time password:\n"
"   ipa host-add --os='Fedora 12' --password=Secret123 test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:89
msgid ""
"\n"
" Add a new host with a random one-time password:\n"
"   ipa host-add --os='Fedora 12' --random test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:92
msgid ""
"\n"
" Modify information about a host:\n"
"   ipa host-mod --os='Fedora 12' test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:95
msgid ""
"\n"
" Remove SSH public keys of a host and update DNS to reflect this change:\n"
"   ipa host-mod --sshpubkey= --updatedns test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:98
msgid ""
"\n"
" Disable the host Kerberos key, SSL certificate and all of its services:\n"
"   ipa host-disable test.example.com\n"
msgstr ""

#: ipalib/plugins/host.py:101
msgid ""
"\n"
" Add a host that can manage this host's keytab and certificate:\n"
"   ipa host-add-managedby --hosts=test2 test\n"
msgstr ""

#: ipalib/plugins/host.py:157 ipalib/plugins/service.py:96
msgid "Keytab"
msgstr ""

#: ipalib/plugins/host.py:169 ipalib/plugins/internal.py:363
#: ipalib/plugins/service.py:105
msgid "Serial Number"
msgstr ""

#: ipalib/plugins/host.py:172 ipalib/plugins/internal.py:364
#: ipalib/plugins/service.py:108
msgid "Serial Number (hex)"
msgstr ""

#: ipalib/plugins/host.py:193
msgid "Failed managedby"
msgstr ""

#: ipalib/plugins/host.py:196 ipalib/plugins/user.py:92
msgid "SSH public key fingerprint"
msgstr ""

#: ipalib/plugins/host.py:222
msgid "host"
msgstr ""

#: ipalib/plugins/host.py:223
msgid "hosts"
msgstr ""

#: ipalib/plugins/host.py:256 ipalib/plugins/internal.py:488
#: ipalib/plugins/internal.py:539
msgid "Host"
msgstr ""

#: ipalib/plugins/host.py:261
msgid "Host name"
msgstr ""

#: ipalib/plugins/host.py:268
msgid "A description of this host"
msgstr ""

#: ipalib/plugins/host.py:272
msgid "Locality"
msgstr ""

#: ipalib/plugins/host.py:273
msgid "Host locality (e.g. \"Baltimore, MD\")"
msgstr ""

#: ipalib/plugins/host.py:278
msgid "Host location (e.g. \"Lab 2\")"
msgstr ""

#: ipalib/plugins/host.py:282
msgid "Platform"
msgstr ""

#: ipalib/plugins/host.py:283
msgid "Host hardware platform (e.g. \"Lenovo T61\")"
msgstr ""

#: ipalib/plugins/host.py:287
msgid "Operating system"
msgstr ""

#: ipalib/plugins/host.py:288
msgid "Host operating system and version (e.g. \"Fedora 9\")"
msgstr ""

#: ipalib/plugins/host.py:292
msgid "User password"
msgstr ""

#: ipalib/plugins/host.py:293
msgid "Password used in bulk enrollment"
msgstr ""

#: ipalib/plugins/host.py:296
msgid "Generate a random password to be used in bulk enrollment"
msgstr ""

#: ipalib/plugins/host.py:301 ipalib/plugins/user.py:301
msgid "Random password"
msgstr ""

#: ipalib/plugins/host.py:307 ipalib/plugins/service.py:329
msgid "Base-64 encoded server certificate"
msgstr ""

#: ipalib/plugins/host.py:310 ipalib/plugins/host.py:628
msgid "Principal name"
msgstr ""

#: ipalib/plugins/host.py:318
msgid "MAC address"
msgstr ""

#: ipalib/plugins/host.py:319
msgid "Hardware MAC address(es) on this host"
msgstr ""

#: ipalib/plugins/host.py:323 ipalib/plugins/user.py:363
msgid "SSH public key"
msgstr ""

#: ipalib/plugins/host.py:331
msgid ""
"Host category (semantics placed on this attribute are for local "
"interpretation)"
msgstr ""

#: ipalib/plugins/host.py:391
msgid "Add a new host."
msgstr ""

#: ipalib/plugins/host.py:394
#, python-format
msgid "Added host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:399
msgid "force host name even if not in DNS"
msgstr ""

#: ipalib/plugins/host.py:402
msgid "skip reverse DNS detection"
msgstr ""

#: ipalib/plugins/host.py:405
msgid "Add the host to DNS with this IP address"
msgstr ""

#: ipalib/plugins/host.py:486
#, python-format
msgid "The host was added but the DNS update failed with: %(exc)s"
msgstr ""

#: ipalib/plugins/host.py:507
msgid "Delete a host."
msgstr ""

#: ipalib/plugins/host.py:509
#, python-format
msgid "Deleted host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:514
msgid "Remove entries from DNS"
msgstr ""

#: ipalib/plugins/host.py:619
msgid "Modify information about a host."
msgstr ""

#: ipalib/plugins/host.py:622
#, python-format
msgid "Modified host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:629
msgid "Kerberos principal name for this host"
msgstr ""

#: ipalib/plugins/host.py:633
msgid "Update DNS entries"
msgstr ""

#: ipalib/plugins/host.py:646
msgid "Password cannot be set on enrolled host."
msgstr ""

#: ipalib/plugins/host.py:650
msgid "cn is immutable"
msgstr ""

#: ipalib/plugins/host.py:769
msgid "Search for hosts."
msgstr ""

#: ipalib/plugins/host.py:773
#, python-format
msgid "%(count)d host matched"
msgid_plural "%(count)d hosts matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/host.py:855
msgid "Display information about a host."
msgstr ""

#: ipalib/plugins/host.py:860 ipalib/plugins/service.py:560
msgid "file to store certificate in"
msgstr ""

#: ipalib/plugins/host.py:892 ipalib/plugins/service.py:580
#, python-format
msgid "Certificate stored in file '%(file)s'"
msgstr ""

#: ipalib/plugins/host.py:903
msgid "Disable the Kerberos key, SSL certificate and all services of a host."
msgstr ""

#: ipalib/plugins/host.py:906
#, python-format
msgid "Disabled host \"%(value)s\""
msgstr ""

#: ipalib/plugins/host.py:999
msgid "Add hosts that can manage this host."
msgstr ""

#: ipalib/plugins/host.py:1014
msgid "Remove hosts that can manage this host."
msgstr ""

#: ipalib/plugins/hostgroup.py:26
msgid ""
"\n"
"Groups of hosts.\n"
"\n"
"Manage groups of hosts. This is useful for applying access control to a\n"
"number of hosts by using Host-based Access Control.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new host group:\n"
"   ipa hostgroup-add --desc=\"Baltimore hosts\" baltimore\n"
"\n"
" Add another new host group:\n"
"   ipa hostgroup-add --desc=\"Maryland hosts\" maryland\n"
"\n"
" Add members to the hostgroup (using Bash brace expansion):\n"
"   ipa hostgroup-add-member --hosts={box1,box2,box3} baltimore\n"
"\n"
" Add a hostgroup as a member of another hostgroup:\n"
"   ipa hostgroup-add-member --hostgroups=baltimore maryland\n"
"\n"
" Remove a host from the hostgroup:\n"
"   ipa hostgroup-remove-member --hosts=box2 baltimore\n"
"\n"
" Display a host group:\n"
"   ipa hostgroup-show baltimore\n"
"\n"
" Delete a hostgroup:\n"
"   ipa hostgroup-del baltimore\n"
msgstr ""

#: ipalib/plugins/hostgroup.py:61
msgid "host group"
msgstr ""

#: ipalib/plugins/hostgroup.py:62
msgid "host groups"
msgstr ""

#: ipalib/plugins/hostgroup.py:76
msgid "Host Group"
msgstr ""

#: ipalib/plugins/hostgroup.py:83
msgid "Host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:84
msgid "Name of host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:91
msgid "A description of this host-group"
msgstr ""

#: ipalib/plugins/hostgroup.py:118
msgid "Add a new hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:120
#, python-format
msgid "Added hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:136
#, python-format
msgid ""
"netgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
"common namespace"
msgstr ""

#: ipalib/plugins/hostgroup.py:159
msgid "Delete a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:161
#, python-format
msgid "Deleted hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:167
msgid "Modify a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:169
#, python-format
msgid "Modified hostgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/hostgroup.py:180
msgid "Search for hostgroups."
msgstr ""

#: ipalib/plugins/hostgroup.py:184
#, python-format
msgid "%(count)d hostgroup matched"
msgid_plural "%(count)d hostgroups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/hostgroup.py:199
msgid "Display information about a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:210
msgid "Add members to a hostgroup."
msgstr ""

#: ipalib/plugins/hostgroup.py:221
msgid "Remove members from a hostgroup."
msgstr ""

#: ipalib/plugins/idrange.py:33
msgid ""
"\n"
"ID ranges\n"
"\n"
"Manage ID ranges  used to map Posix IDs to SIDs and back.\n"
"\n"
"There are two type of ID ranges which are both handled by this utility:\n"
"\n"
" - the ID ranges of the local domain\n"
" - the ID ranges of trusted remote domains\n"
"\n"
"Both types have the following attributes in common:\n"
"\n"
" - base-id: the first ID of the Posix ID range\n"
" - range-size: the size of the range\n"
"\n"
"With those two attributes a range object can reserve the Posix IDs starting\n"
"with base-id up to but not including base-id+range-size exclusively.\n"
"\n"
"Additionally an ID range of the local domain may set\n"
" - rid-base: the first RID(*) of the corresponding RID range\n"
" - secondary-rid-base: first RID of the secondary RID range\n"
"\n"
"and an ID range of a trusted domain must set\n"
" - rid-base: the first RID of the corresponding RID range\n"
" - sid: domain SID of the trusted domain\n"
"\n"
"\n"
"\n"
"EXAMPLE: Add a new ID range for a trusted domain\n"
"\n"
"Since there might be more than one trusted domain the domain SID must be "
"given\n"
"while creating the ID range.\n"
"\n"
"  ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n"
"                  --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n"
"\n"
"This ID range is then used by the IPA server and the SSSD IPA provider to\n"
"assign Posix UIDs to users from the trusted domain.\n"
"\n"
"If e.g a range for a trusted domain is configured with the following "
"values:\n"
" base-id = 1200000\n"
" range-size = 200000\n"
" rid-base = 0\n"
"the RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. "
"So\n"
"RID 1000 <-> Posix ID 1201000\n"
"\n"
"\n"
"\n"
"EXAMPLE: Add a new ID range for the local domain\n"
"\n"
"To create an ID range for the local domain it is not necessary to specify a\n"
"domain SID. But since it is possible that a user and a group can have the "
"same\n"
"value as Posix ID a second RID interval is needed to handle conflicts.\n"
"\n"
"  ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n"
"                  --secondary-rid-base=1000000 local_range\n"
"\n"
"The data from the ID ranges of the local domain are used by the IPA server\n"
"internally to assign SIDs to IPA users and groups. The SID will then be "
"stored\n"
"in the user or group objects.\n"
"\n"
"If e.g. the ID range for the local domain is configured with the values "
"from\n"
"the example above then a new user with the UID 1200007 will get the RID "
"1007.\n"
"If this RID is already used by a group the RID will be 1000007. This can "
"only\n"
"happen if a user or a group object was created with a fixed ID because the\n"
"automatic assignment will not assign the same ID twice. Since there are "
"only\n"
"users and groups sharing the same ID namespace it is sufficient to have "
"only\n"
"one fallback range to handle conflicts.\n"
"\n"
"To find the Posix ID for a given RID from the local domain it has to be\n"
"checked first if the RID falls in the primary or secondary RID range and\n"
"the rid-base or the secondary-rid-base has to be subtracted, respectively,\n"
"and the base-id has to be added to get the Posix ID.\n"
"\n"
"Typically the creation of ID ranges happens behind the scenes and this CLI\n"
"must not be used at all. The ID range for the local domain will be created\n"
"during installation or upgrade from an older version. The ID range for a\n"
"trusted domain will be created together with the trust by 'ipa trust-"
"add ...'.\n"
"\n"
"USE CASES:\n"
"\n"
"  Add an ID range from a transitively trusted domain\n"
"\n"
"    If the trusted domain (A) trusts another domain (B) as well and this "
"trust\n"
"    is transitive 'ipa trust-add domain-A' will only create a range for\n"
"    domain A.  The ID range for domain B must be added manually.\n"
"\n"
"  Add an additional ID range for the local domain\n"
"\n"
"    If the ID range of the local domain is exhausted, i.e. no new IDs can "
"be\n"
"    assigned to Posix users or groups by the DNA plugin, a new range has to "
"be\n"
"    created to allow new users and groups to be added. (Currently there is "
"no\n"
"    connection between this range CLI and the DNA plugin, but a future "
"version\n"
"    might be able to modify the configuration of the DNS plugin as well)\n"
"\n"
"In general it is not necessary to modify or delete ID ranges. If there is "
"no\n"
"other way to achieve a certain configuration than to modify or delete an ID\n"
"range it should be done with great care. Because UIDs are stored in the "
"file\n"
"system and are used for access control it might be possible that users are\n"
"allowed to access files of other users if an ID range got deleted and "
"reused\n"
"for a different domain.\n"
"\n"
"(*) The RID is typically the last integer of a user or group SID which "
"follows\n"
"the domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user "
"from\n"
"this domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of "
"the\n"
"user. RIDs are unique in a domain, 32bit values and are used for users and\n"
"groups.\n"
"\n"
"WARNING:\n"
"\n"
"DNA plugin in 389-ds will allocate IDs based on the ranges configured for "
"the\n"
"local domain. Currently the DNA plugin *cannot* be reconfigured itself "
"based\n"
"on the local ranges set via this family of commands.\n"
"\n"
"Manual configuration change has to be done in the DNA plugin configuration "
"for\n"
"the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\n"
"IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to "
"be\n"
"modified to match the new range.\n"
msgstr ""

#: ipalib/plugins/idrange.py:169
msgid "ID Ranges"
msgstr ""

#: ipalib/plugins/idrange.py:170
msgid "ID Range"
msgstr ""

#: ipalib/plugins/idrange.py:173
msgid "local domain range"
msgstr ""

#: ipalib/plugins/idrange.py:174
msgid "Active Directory winsync range"
msgstr ""

#: ipalib/plugins/idrange.py:175 ipalib/plugins/trust.py:289
msgid "Active Directory domain range"
msgstr ""

#: ipalib/plugins/idrange.py:176 ipalib/plugins/trust.py:290
msgid "Active Directory trust range with POSIX attributes"
msgstr ""

#: ipalib/plugins/idrange.py:178
msgid "IPA trust range"
msgstr ""

#: ipalib/plugins/idrange.py:184
msgid "Range name"
msgstr ""

#: ipalib/plugins/idrange.py:189
msgid "First Posix ID of the range"
msgstr ""

#: ipalib/plugins/idrange.py:193
msgid "Number of IDs in the range"
msgstr ""

#: ipalib/plugins/idrange.py:197
msgid "First RID of the corresponding RID range"
msgstr ""

#: ipalib/plugins/idrange.py:201
msgid "First RID of the secondary RID range"
msgstr ""

#: ipalib/plugins/idrange.py:206
msgid "Domain SID of the trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:211
msgid "Name of the trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:214 ipalib/plugins/internal.py:517
#: ipalib/plugins/trust.py:323
msgid "Range type"
msgstr ""

#: ipalib/plugins/idrange.py:216
msgid "ID range type, one of {vals}"
msgstr ""

#: ipalib/plugins/idrange.py:284
msgid ""
"range modification leaving objects with ID out of the defined range is not "
"allowed"
msgstr ""

#: ipalib/plugins/idrange.py:289
msgid ""
"Cannot perform SID validation without Samba 4 support installed. Make sure "
"you have installed server-trust-ad sub-package of IPA on the server"
msgstr ""

#: ipalib/plugins/idrange.py:296
msgid ""
"Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-"
"install on the IPA server first"
msgstr ""

#: ipalib/plugins/idrange.py:308
msgid "SID is not recognized as a valid SID for a trusted domain"
msgstr ""

#: ipalib/plugins/idrange.py:344
msgid ""
"\n"
"    Add new ID range.\n"
"\n"
"    To add a new ID range you always have to specify\n"
"\n"
"        --base-id\n"
"        --range-size\n"
"\n"
"    Additionally\n"
"\n"
"        --rid-base\n"
"        --secondary-rid-base\n"
"\n"
"    may be given for a new ID range for the local domain while\n"
"\n"
"        --rid-base\n"
"        --dom-sid\n"
"\n"
"    must be given to add a new range for a trusted AD domain.\n"
"\n"
"    WARNING:\n"
"\n"
"    DNA plugin in 389-ds will allocate IDs based on the ranges configured "
"for the\n"
"    local domain. Currently the DNA plugin *cannot* be reconfigured itself "
"based\n"
"    on the local ranges set via this family of commands.\n"
"\n"
"    Manual configuration change has to be done in the DNA plugin "
"configuration for\n"
"    the new local range. Specifically, The dnaNextRange attribute of "
"'cn=Posix\n"
"    IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has "
"to be\n"
"    modified to match the new range.\n"
"    "
msgstr ""

#: ipalib/plugins/idrange.py:376
#, python-format
msgid "Added ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:449 ipalib/plugins/idrange.py:647
msgid "Options dom-sid and dom-name cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:459 ipalib/plugins/idrange.py:659
msgid ""
"SID for the specified trusted domain name could not be found. Please specify "
"the SID directly using dom-sid option."
msgstr ""

#: ipalib/plugins/idrange.py:474
msgid ""
"IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of "
"the trusted domain is specified."
msgstr ""

#: ipalib/plugins/idrange.py:480
msgid "Options dom-sid/dom-name and secondary-rid-base cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:485
msgid "Options dom-sid/dom-name and rid-base must be used together"
msgstr ""

#: ipalib/plugins/idrange.py:504
msgid ""
"IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when "
"SID of the trusted domain is not specified."
msgstr ""

#: ipalib/plugins/idrange.py:511 ipalib/plugins/idrange.py:689
msgid "Options secondary-rid-base and rid-base must be used together"
msgstr ""

#: ipalib/plugins/idrange.py:521 ipalib/plugins/idrange.py:712
msgid "Primary RID range and secondary RID range cannot overlap"
msgstr ""

#: ipalib/plugins/idrange.py:533
msgid ""
"You must specify both rid-base and secondary-rid-base options, because ipa-"
"adtrust-install has already been run."
msgstr ""

#: ipalib/plugins/idrange.py:548
msgid "Delete an ID range."
msgstr ""

#: ipalib/plugins/idrange.py:550
#, python-format
msgid "Deleted ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:583
msgid "Search for ranges."
msgstr ""

#: ipalib/plugins/idrange.py:586
#, python-format
msgid "%(count)d range matched"
msgid_plural "%(count)d ranges matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/idrange.py:604
msgid "Display information about a range."
msgstr ""

#: ipalib/plugins/idrange.py:618
msgid "Modify ID range."
msgstr ""

#: ipalib/plugins/idrange.py:620
#, python-format
msgid "Modified ID range \"%(value)s\""
msgstr ""

#: ipalib/plugins/idrange.py:666
msgid "Options dom-sid and secondary-rid-base cannot be used together"
msgstr ""

#: ipalib/plugins/idrange.py:671
msgid "Options dom-sid and rid-base must be used together"
msgstr ""

#: ipalib/plugins/internal.py:44 ipalib/plugins/internal.py:53
msgid "Name of object to export"
msgstr ""

#: ipalib/plugins/internal.py:47 ipalib/plugins/internal.py:56
msgid "Name of method to export"
msgstr ""

#: ipalib/plugins/internal.py:59
msgid "Name of command to export"
msgstr ""

#: ipalib/plugins/internal.py:64
msgid "Dict of JSON encoded IPA Objects"
msgstr ""

#: ipalib/plugins/internal.py:65
msgid "Dict of JSON encoded IPA Methods"
msgstr ""

#: ipalib/plugins/internal.py:66
msgid "Dict of JSON encoded IPA Commands"
msgstr ""

#: ipalib/plugins/internal.py:147
msgid "Your session has expired. Please re-login."
msgstr ""

#: ipalib/plugins/internal.py:151
msgid "Apply"
msgstr ""

#: ipalib/plugins/internal.py:152
msgid "Are you sure you want to proceed with the action."
msgstr ""

#: ipalib/plugins/internal.py:153
msgid "Are you sure you want to delete ${object}"
msgstr ""

#: ipalib/plugins/internal.py:154
msgid "Are you sure you want to disable ${object}"
msgstr ""

#: ipalib/plugins/internal.py:155
msgid "Are you sure you want to enable ${object}"
msgstr ""

#: ipalib/plugins/internal.py:156
msgid "Actions"
msgstr ""

#: ipalib/plugins/internal.py:160
msgid "Add RunAs ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:161
msgid "Add RunAs Groups into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:162
msgid "Add ${other_entity} Managing ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:163
msgid "Add ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:164
msgid "Add Allow ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:165
msgid "Add Deny ${other_entity} into ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:166
msgid "Add ${entity} ${primary_key} into ${other_entity}"
msgstr ""

#: ipalib/plugins/internal.py:168
msgid "${count} item(s) added"
msgstr ""

#: ipalib/plugins/internal.py:169
msgid "Direct Membership"
msgstr ""

#: ipalib/plugins/internal.py:170
msgid "Indirect Membership"
msgstr ""

#: ipalib/plugins/internal.py:171
msgid "No entries."
msgstr ""

#: ipalib/plugins/internal.py:172
msgid "Showing ${start} to ${end} of ${total} entries."
msgstr ""

#: ipalib/plugins/internal.py:174
msgid "Remove RunAs ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:175
msgid "Remove RunAs Groups from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:176
msgid "Remove ${other_entity} Managing ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:177
msgid "Remove ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:178
msgid "Remove Allow ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:179
msgid "Remove Deny ${other_entity} from ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:180
msgid "Remove ${entity} ${primary_key} from ${other_entity}"
msgstr ""

#: ipalib/plugins/internal.py:182
msgid "${count} item(s) removed"
msgstr ""

#: ipalib/plugins/internal.py:183
msgid "Show Results"
msgstr ""

#: ipalib/plugins/internal.py:186
msgid "Add"
msgstr ""

#: ipalib/plugins/internal.py:187
msgid "Add and Add Another"
msgstr ""

#: ipalib/plugins/internal.py:188
msgid "Add and Close"
msgstr ""

#: ipalib/plugins/internal.py:189
msgid "Add and Edit"
msgstr ""

#: ipalib/plugins/internal.py:190
msgid "Add Many"
msgstr ""

#: ipalib/plugins/internal.py:191
msgid "Back"
msgstr ""

#: ipalib/plugins/internal.py:192
msgid "Cancel"
msgstr ""

#: ipalib/plugins/internal.py:193
msgid "Close"
msgstr ""

#: ipalib/plugins/internal.py:194 ipalib/plugins/internal.py:655
msgid "Disable"
msgstr ""

#: ipalib/plugins/internal.py:195
msgid "Edit"
msgstr ""

#: ipalib/plugins/internal.py:196 ipalib/plugins/internal.py:657
msgid "Enable"
msgstr ""

#: ipalib/plugins/internal.py:197
msgid "Find"
msgstr ""

#: ipalib/plugins/internal.py:198
msgid "Get"
msgstr ""

#: ipalib/plugins/internal.py:199
msgid "Issue"
msgstr ""

#: ipalib/plugins/internal.py:200
msgid "OK"
msgstr ""

#: ipalib/plugins/internal.py:201
msgid "Refresh"
msgstr ""

#: ipalib/plugins/internal.py:202
msgid "Delete"
msgstr ""

#: ipalib/plugins/internal.py:203
msgid "Reset"
msgstr ""

#: ipalib/plugins/internal.py:204
msgid "Reset Password and Login"
msgstr ""

#: ipalib/plugins/internal.py:205
msgid "Restore"
msgstr ""

#: ipalib/plugins/internal.py:206
msgid "Retry"
msgstr ""

#: ipalib/plugins/internal.py:207
msgid "Revoke"
msgstr ""

#: ipalib/plugins/internal.py:208
msgid "Set"
msgstr ""

#: ipalib/plugins/internal.py:209
msgid "Update"
msgstr ""

#: ipalib/plugins/internal.py:210
msgid "View"
msgstr ""

#: ipalib/plugins/internal.py:213
msgid "Collapse All"
msgstr ""

#: ipalib/plugins/internal.py:214
msgid "Expand All"
msgstr ""

#: ipalib/plugins/internal.py:215
msgid "General"
msgstr ""

#: ipalib/plugins/internal.py:216
msgid "Identity Settings"
msgstr ""

#: ipalib/plugins/internal.py:217
msgid "${entity} ${primary_key} Settings"
msgstr ""

#: ipalib/plugins/internal.py:218
msgid "Back to Top"
msgstr ""

#: ipalib/plugins/internal.py:219
msgid "${entity} ${primary_key} updated"
msgstr ""

#: ipalib/plugins/internal.py:222
msgid "${entity} successfully added"
msgstr ""

#: ipalib/plugins/internal.py:223
msgid "Add ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:224
msgid "Available"
msgstr ""

#: ipalib/plugins/internal.py:225
msgid "Some operations failed."
msgstr ""

#: ipalib/plugins/internal.py:226
msgid "Operations Error"
msgstr ""

#: ipalib/plugins/internal.py:227
msgid "Confirmation"
msgstr ""

#: ipalib/plugins/internal.py:228
msgid "This page has unsaved changes. Please save or revert."
msgstr ""

#: ipalib/plugins/internal.py:229
msgid "Unsaved Changes"
msgstr ""

#: ipalib/plugins/internal.py:230
msgid "Edit ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:231
msgid "Hide details"
msgstr ""

#: ipalib/plugins/internal.py:232
msgid "Prospective"
msgstr ""

#: ipalib/plugins/internal.py:233
msgid "Redirection"
msgstr ""

#: ipalib/plugins/internal.py:234
msgid "Select entries to be removed."
msgstr ""

#: ipalib/plugins/internal.py:235
msgid "Remove ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:236
msgid "Show details"
msgstr ""

#: ipalib/plugins/internal.py:237
msgid "Validation error"
msgstr ""

#: ipalib/plugins/internal.py:238
msgid "Input form contains invalid or missing values."
msgstr ""

#: ipalib/plugins/internal.py:241
msgid "Please try the following options:"
msgstr ""

#: ipalib/plugins/internal.py:242
msgid "If the problem persists please contact the system administrator."
msgstr ""

#: ipalib/plugins/internal.py:243
msgid "Refresh the page."
msgstr ""

#: ipalib/plugins/internal.py:244
msgid "Reload the browser."
msgstr ""

#: ipalib/plugins/internal.py:245
msgid "Return to the main page and retry the operation"
msgstr ""

#: ipalib/plugins/internal.py:246
msgid "An error has occurred (${error})"
msgstr ""

#: ipalib/plugins/internal.py:250
msgid "HTTP Error"
msgstr ""

#: ipalib/plugins/internal.py:251
msgid "Internal Error"
msgstr ""

#: ipalib/plugins/internal.py:252
msgid "IPA Error"
msgstr ""

#: ipalib/plugins/internal.py:253
msgid "No response"
msgstr ""

#: ipalib/plugins/internal.py:254
msgid "Unknown Error"
msgstr ""

#: ipalib/plugins/internal.py:255
msgid "URL"
msgstr ""

#: ipalib/plugins/internal.py:258
msgid "${primary_key} is managed by:"
msgstr ""

#: ipalib/plugins/internal.py:259
msgid "${primary_key} members:"
msgstr ""

#: ipalib/plugins/internal.py:260
msgid "${primary_key} is a member of:"
msgstr ""

#: ipalib/plugins/internal.py:263
msgid "Settings"
msgstr ""

#: ipalib/plugins/internal.py:264
msgid "Search"
msgstr ""

#: ipalib/plugins/internal.py:266
msgid "False"
msgstr ""

#: ipalib/plugins/internal.py:268
msgid "Inherited from server configuration"
msgstr ""

#: ipalib/plugins/internal.py:269
msgid "MS-PAC"
msgstr ""

#: ipalib/plugins/internal.py:270
msgid "Override inherited settings"
msgstr ""

#: ipalib/plugins/internal.py:271
msgid "PAD"
msgstr ""

#: ipalib/plugins/internal.py:274
msgid ""
"To login with username and password, enter them in the fields below then "
"click Login."
msgstr ""

#: ipalib/plugins/internal.py:275
msgid "Logged In As"
msgstr ""

#: ipalib/plugins/internal.py:276
msgid ""
"To login with Kerberos, please make sure you have valid tickets (obtainable "
"via kinit) and <a href='http://${host}/ipa/config/unauthorized."
"html'>configured</a> the browser correctly, then click Login."
msgstr ""

#: ipalib/plugins/internal.py:277
msgid "Login"
msgstr ""

#: ipalib/plugins/internal.py:278
msgid "Logout"
msgstr ""

#: ipalib/plugins/internal.py:279
msgid "Logout error"
msgstr ""

#: ipalib/plugins/internal.py:281
msgid "Username"
msgstr ""

#: ipalib/plugins/internal.py:284
msgid "number of passwords"
msgstr ""

#: ipalib/plugins/internal.py:285
msgid "seconds"
msgstr ""

#: ipalib/plugins/internal.py:289 ipalib/plugins/internal.py:294
msgid "Attribute"
msgstr ""

#: ipalib/plugins/internal.py:292
msgid "Add Condition into ${pkey}"
msgstr ""

#: ipalib/plugins/internal.py:293
msgid "Add Rule"
msgstr ""

#: ipalib/plugins/internal.py:295
msgid "Default host group"
msgstr ""

#: ipalib/plugins/internal.py:296
msgid "Default user group"
msgstr ""

#: ipalib/plugins/internal.py:297
msgid "Exclusive"
msgstr ""

#: ipalib/plugins/internal.py:298
msgid "Expression"
msgstr ""

#: ipalib/plugins/internal.py:299
msgid "Host group rule"
msgstr ""

#: ipalib/plugins/internal.py:300
msgid "Host group rules"
msgstr ""

#: ipalib/plugins/internal.py:301
msgid "Inclusive"
msgstr ""

#: ipalib/plugins/internal.py:302
msgid "User group rule"
msgstr ""

#: ipalib/plugins/internal.py:303
msgid "User group rules"
msgstr ""

#: ipalib/plugins/internal.py:308
msgid "Automount Location Settings"
msgstr ""

#: ipalib/plugins/internal.py:311
msgid "Map Type"
msgstr ""

#: ipalib/plugins/internal.py:312
msgid "Direct"
msgstr ""

#: ipalib/plugins/internal.py:313
msgid "Indirect"
msgstr ""

#: ipalib/plugins/internal.py:316
msgid "AA Compromise"
msgstr ""

#: ipalib/plugins/internal.py:317
msgid "Affiliation Changed"
msgstr ""

#: ipalib/plugins/internal.py:318
msgid "CA Compromise"
msgstr ""

#: ipalib/plugins/internal.py:320 ipalib/plugins/internal.py:665
msgid "Certificates"
msgstr ""

#: ipalib/plugins/internal.py:321
msgid "Certificate Hold"
msgstr ""

#: ipalib/plugins/internal.py:322
msgid "Cessation of Operation"
msgstr ""

#: ipalib/plugins/internal.py:323
msgid "Common Name"
msgstr ""

#: ipalib/plugins/internal.py:324
msgid "Expires On"
msgstr ""

#: ipalib/plugins/internal.py:325
msgid "Issued on from"
msgstr ""

#: ipalib/plugins/internal.py:326
msgid "Issued on to"
msgstr ""

#: ipalib/plugins/internal.py:327
msgid "Maximum serial number"
msgstr ""

#: ipalib/plugins/internal.py:328
msgid "Minimum serial number"
msgstr ""

#: ipalib/plugins/internal.py:330
msgid "Revoked on from"
msgstr ""

#: ipalib/plugins/internal.py:331
msgid "Revoked on to"
msgstr ""

#: ipalib/plugins/internal.py:333
msgid "Valid not after from"
msgstr ""

#: ipalib/plugins/internal.py:334
msgid "Valid not after to"
msgstr ""

#: ipalib/plugins/internal.py:335
msgid "Valid not before from"
msgstr ""

#: ipalib/plugins/internal.py:336
msgid "Valid not before to"
msgstr ""

#: ipalib/plugins/internal.py:337
msgid "Fingerprints"
msgstr ""

#: ipalib/plugins/internal.py:338
msgid "Issue New Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:339
msgid "Issued By"
msgstr ""

#: ipalib/plugins/internal.py:340
msgid "Issued On"
msgstr ""

#: ipalib/plugins/internal.py:341
msgid "Issued To"
msgstr ""

#: ipalib/plugins/internal.py:342
msgid "Key Compromise"
msgstr ""

#: ipalib/plugins/internal.py:343
msgid "MD5 Fingerprint"
msgstr ""

#: ipalib/plugins/internal.py:344
msgid "No Valid Certificate"
msgstr ""

#: ipalib/plugins/internal.py:345
msgid "New Certificate"
msgstr ""

#: ipalib/plugins/internal.py:346
msgid "Note"
msgstr ""

#: ipalib/plugins/internal.py:347
msgid "Organization"
msgstr ""

#: ipalib/plugins/internal.py:348
msgid "Organizational Unit"
msgstr ""

#: ipalib/plugins/internal.py:349
msgid "Privilege Withdrawn"
msgstr ""

#: ipalib/plugins/internal.py:350
msgid "Reason for Revocation"
msgstr ""

#: ipalib/plugins/internal.py:351
msgid "Remove from CRL"
msgstr ""

#: ipalib/plugins/internal.py:352
msgid ""
"<ol> <li>Create a certificate database or use an existing one. To create a "
"new database:<br/> <code># certutil -N -d &lt;database path&gt;</code> </li> "
"<li>Create a CSR with subject <em>CN=&lt;hostname&gt;,O=&lt;realm&gt;</em>, "
"for example:<br/> <code># certutil -R -d &lt;database path&gt; -a -g &lt;key "
"size&gt; -s 'CN=${hostname},O=${realm}'</code> </li> <li> Copy and paste the "
"CSR (from <em>-----BEGIN NEW CERTIFICATE REQUEST-----</em> to <em>-----END "
"NEW CERTIFICATE REQUEST-----</em>) into the text area below: </li> </ol>"
msgstr ""

#: ipalib/plugins/internal.py:353
msgid "Certificate requested"
msgstr ""

#: ipalib/plugins/internal.py:354
msgid "Restore Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:355
msgid "Restore Certificate"
msgstr ""

#: ipalib/plugins/internal.py:356
msgid ""
"To confirm your intention to restore this certificate, click the \"Restore\" "
"button."
msgstr ""

#: ipalib/plugins/internal.py:357
msgid "Certificate restored"
msgstr ""

#: ipalib/plugins/internal.py:359
msgid "Revoke Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:360
msgid "Revoke Certificate"
msgstr ""

#: ipalib/plugins/internal.py:361
msgid ""
"To confirm your intention to revoke this certificate, select a reason from "
"the pull-down list, and click the \"Revoke\" button."
msgstr ""

#: ipalib/plugins/internal.py:362
msgid "Certificate Revoked"
msgstr ""

#: ipalib/plugins/internal.py:365
msgid "SHA1 Fingerprint"
msgstr ""

#: ipalib/plugins/internal.py:367
msgid "Superseded"
msgstr ""

#: ipalib/plugins/internal.py:368
msgid "Unspecified"
msgstr ""

#: ipalib/plugins/internal.py:369
msgid "Valid Certificate Present"
msgstr ""

#: ipalib/plugins/internal.py:370
msgid "Validity"
msgstr ""

#: ipalib/plugins/internal.py:371
msgid "Certificate for ${entity} ${primary_key}"
msgstr ""

#: ipalib/plugins/internal.py:374
msgid "Group Options"
msgstr ""

#: ipalib/plugins/internal.py:375
msgid "Search Options"
msgstr ""

#: ipalib/plugins/internal.py:376
msgid "SELinux Options"
msgstr ""

#: ipalib/plugins/internal.py:377
msgid "Service Options"
msgstr ""

#: ipalib/plugins/internal.py:378
msgid "User Options"
msgstr ""

#: ipalib/plugins/internal.py:383
msgid "Forward first"
msgstr ""

#: ipalib/plugins/internal.py:384
msgid "Forwarding disabled"
msgstr ""

#: ipalib/plugins/internal.py:385
msgid "Forward only"
msgstr ""

#: ipalib/plugins/internal.py:386 ipalib/plugins/internal.py:588
#: ipalib/plugins/internal.py:611
msgid "Options"
msgstr ""

#: ipalib/plugins/internal.py:389
msgid "Data"
msgstr ""

#: ipalib/plugins/internal.py:390
msgid "DNS record was deleted because it contained no data."
msgstr ""

#: ipalib/plugins/internal.py:391
msgid "Other Record Types"
msgstr ""

#: ipalib/plugins/internal.py:392
msgid "Address not valid, can't redirect"
msgstr ""

#: ipalib/plugins/internal.py:393
msgid "Create dns record"
msgstr ""

#: ipalib/plugins/internal.py:394
msgid "Creating record."
msgstr ""

#: ipalib/plugins/internal.py:395
msgid "Record creation failed."
msgstr ""

#: ipalib/plugins/internal.py:396
msgid "Checking if record exists."
msgstr ""

#: ipalib/plugins/internal.py:397
msgid "Record not found."
msgstr ""

#: ipalib/plugins/internal.py:398
msgid "Redirection to PTR record"
msgstr ""

#: ipalib/plugins/internal.py:399
msgid "Zone found: ${zone}"
msgstr ""

#: ipalib/plugins/internal.py:400
msgid "Target reverse zone not found."
msgstr ""

#: ipalib/plugins/internal.py:401
msgid "Fetching DNS zones."
msgstr ""

#: ipalib/plugins/internal.py:402
msgid "An error occurred while fetching dns zones."
msgstr ""

#: ipalib/plugins/internal.py:403
msgid "You will be redirected to DNS Zone."
msgstr ""

#: ipalib/plugins/internal.py:404
msgid "Standard Record Types"
msgstr ""

#: ipalib/plugins/internal.py:405
msgid "Records for DNS Zone"
msgstr ""

#: ipalib/plugins/internal.py:406
msgid "Record Type"
msgstr ""

#: ipalib/plugins/internal.py:409
msgid "DNS Zone Settings"
msgstr ""

#: ipalib/plugins/internal.py:410
msgid "Add Permission"
msgstr ""

#: ipalib/plugins/internal.py:411
msgid "Remove Permission"
msgstr ""

#: ipalib/plugins/internal.py:414
msgid "Group Settings"
msgstr ""

#: ipalib/plugins/internal.py:415 ipalib/plugins/internal.py:487
#: ipalib/plugins/internal.py:583
msgid "External"
msgstr ""

#: ipalib/plugins/internal.py:416
msgid "Change to external group"
msgstr ""

#: ipalib/plugins/internal.py:417
msgid "Change to POSIX group"
msgstr ""

#: ipalib/plugins/internal.py:418
msgid "Normal"
msgstr ""

#: ipalib/plugins/internal.py:419
msgid "POSIX"
msgstr ""

#: ipalib/plugins/internal.py:420
msgid "Group Type"
msgstr ""

#: ipalib/plugins/internal.py:423 ipalib/plugins/internal.py:485
#: ipalib/plugins/internal.py:537 ipalib/plugins/internal.py:579
msgid "Any Host"
msgstr ""

#: ipalib/plugins/internal.py:424
msgid "Any Service"
msgstr ""

#: ipalib/plugins/internal.py:425 ipalib/plugins/internal.py:486
#: ipalib/plugins/internal.py:538 ipalib/plugins/internal.py:580
msgid "Anyone"
msgstr ""

#: ipalib/plugins/internal.py:426
msgid "Accessing"
msgstr ""

#: ipalib/plugins/internal.py:427 ipalib/plugins/internal.py:585
msgid "Rule status"
msgstr ""

#: ipalib/plugins/internal.py:428
msgid "Via Service"
msgstr ""

#: ipalib/plugins/internal.py:429 ipalib/plugins/internal.py:492
#: ipalib/plugins/internal.py:540 ipalib/plugins/internal.py:592
msgid "Specified Hosts and Groups"
msgstr ""

#: ipalib/plugins/internal.py:430
msgid "Specified Services and Groups"
msgstr ""

#: ipalib/plugins/internal.py:431 ipalib/plugins/internal.py:493
#: ipalib/plugins/internal.py:541 ipalib/plugins/internal.py:593
msgid "Specified Users and Groups"
msgstr ""

#: ipalib/plugins/internal.py:432 ipalib/plugins/internal.py:594
msgid "Who"
msgstr ""

#: ipalib/plugins/internal.py:440
msgid "Access Denied"
msgstr ""

#: ipalib/plugins/internal.py:441
msgid "Access Granted"
msgstr ""

#: ipalib/plugins/internal.py:442
msgid "Include Disabled"
msgstr ""

#: ipalib/plugins/internal.py:443
msgid "Include Enabled"
msgstr ""

#: ipalib/plugins/internal.py:444
msgid "HBAC Test"
msgstr ""

#: ipalib/plugins/internal.py:445
msgid "Matched"
msgstr ""

#: ipalib/plugins/internal.py:446
msgid "Missing values: "
msgstr ""

#: ipalib/plugins/internal.py:447
msgid "New Test"
msgstr ""

#: ipalib/plugins/internal.py:448
msgid "Rules"
msgstr ""

#: ipalib/plugins/internal.py:449
msgid "Run Test"
msgstr ""

#: ipalib/plugins/internal.py:450
msgid "Specify external ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:451
msgid "Unmatched"
msgstr ""

#: ipalib/plugins/internal.py:454
msgid "Host Certificate"
msgstr ""

#: ipalib/plugins/internal.py:455 ipalib/plugins/internal.py:548
msgid "Host Name"
msgstr ""

#: ipalib/plugins/internal.py:456 ipalib/plugins/internal.py:546
msgid "Delete Key, Unprovision"
msgstr ""

#: ipalib/plugins/internal.py:457
msgid "Host Settings"
msgstr ""

#: ipalib/plugins/internal.py:458
msgid "Enrolled"
msgstr ""

#: ipalib/plugins/internal.py:459
msgid "Enrollment"
msgstr ""

#: ipalib/plugins/internal.py:460
msgid "Fully Qualified Host Name"
msgstr ""

#: ipalib/plugins/internal.py:461
msgid "Kerberos Key"
msgstr ""

#: ipalib/plugins/internal.py:462 ipalib/plugins/internal.py:549
msgid "Kerberos Key Not Present"
msgstr ""

#: ipalib/plugins/internal.py:463
msgid "Kerberos Key Present, Host Provisioned"
msgstr ""

#: ipalib/plugins/internal.py:464
msgid "One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:465
msgid "One-Time-Password Not Present"
msgstr ""

#: ipalib/plugins/internal.py:466
msgid "One-Time-Password Present"
msgstr ""

#: ipalib/plugins/internal.py:467
msgid "Reset OTP"
msgstr ""

#: ipalib/plugins/internal.py:468
msgid "Reset One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:469
msgid "Set OTP"
msgstr ""

#: ipalib/plugins/internal.py:470
msgid "OTP set"
msgstr ""

#: ipalib/plugins/internal.py:471
msgid "Set One-Time-Password"
msgstr ""

#: ipalib/plugins/internal.py:473 ipalib/plugins/internal.py:553
msgid "Unprovision"
msgstr ""

#: ipalib/plugins/internal.py:474
msgid "Are you sure you want to unprovision this host?"
msgstr ""

#: ipalib/plugins/internal.py:475 ipalib/plugins/internal.py:555
msgid "Unprovisioning ${entity}"
msgstr ""

#: ipalib/plugins/internal.py:476
msgid "Host unprovisioned"
msgstr ""

#: ipalib/plugins/internal.py:479
msgid "Host Group Settings"
msgstr ""

#: ipalib/plugins/internal.py:482 ipalib/plugins/krbtpolicy.py:79
#: ipalib/plugins/krbtpolicy.py:80
msgid "Kerberos Ticket Policy"
msgstr ""

#: ipalib/plugins/internal.py:491
msgid "Netgroup Settings"
msgstr ""

#: ipalib/plugins/internal.py:494 ipalib/plugins/internal.py:542
#: ipalib/plugins/pwpolicy.py:444 ipalib/plugins/user.py:226
msgid "User"
msgstr ""

#: ipalib/plugins/internal.py:499 ipalib/plugins/internal.py:668
msgid "Identity"
msgstr ""

#: ipalib/plugins/internal.py:500
msgid "Permission with invalid target specification"
msgstr ""

#: ipalib/plugins/internal.py:505
msgid "Privilege Settings"
msgstr ""

#: ipalib/plugins/internal.py:508 ipalib/plugins/pwpolicy.py:224
msgid "Password Policy"
msgstr ""

#: ipalib/plugins/internal.py:511
msgid "Range Settings"
msgstr ""

#: ipalib/plugins/internal.py:512
msgid "Base ID"
msgstr ""

#: ipalib/plugins/internal.py:513
msgid "Primary RID base"
msgstr ""

#: ipalib/plugins/internal.py:514
msgid "Range size"
msgstr ""

#: ipalib/plugins/internal.py:515
msgid "Domain SID"
msgstr ""

#: ipalib/plugins/internal.py:516
msgid "Secondary RID base"
msgstr ""

#: ipalib/plugins/internal.py:518 ipalib/plugins/trust.py:142
msgid "Active Directory domain"
msgstr ""

#: ipalib/plugins/internal.py:519
msgid "Active Directory domain with POSIX attributes"
msgstr ""

#: ipalib/plugins/internal.py:520
msgid "Detect"
msgstr ""

#: ipalib/plugins/internal.py:521
msgid "Local domain"
msgstr ""

#: ipalib/plugins/internal.py:522
msgid "IPA trust"
msgstr ""

#: ipalib/plugins/internal.py:523
msgid "Active Directory winsync"
msgstr ""

#: ipalib/plugins/internal.py:526 ipalib/plugins/realmdomains.py:65
#: ipalib/plugins/realmdomains.py:66
msgid "Realm Domains"
msgstr ""

#: ipalib/plugins/internal.py:527
msgid "Check DNS"
msgstr ""

#: ipalib/plugins/internal.py:528
msgid "Do you also want to perform DNS check?"
msgstr ""

#: ipalib/plugins/internal.py:529
msgid "Force Update"
msgstr ""

#: ipalib/plugins/internal.py:532
msgid "Role Settings"
msgstr ""

#: ipalib/plugins/internal.py:545
msgid "Service Certificate"
msgstr ""

#: ipalib/plugins/internal.py:547
msgid "Service Settings"
msgstr ""

#: ipalib/plugins/internal.py:550
msgid "Provisioning"
msgstr ""

#: ipalib/plugins/internal.py:554
msgid "Are you sure you want to unprovision this service?"
msgstr ""

#: ipalib/plugins/internal.py:556
msgid "Service unprovisioned"
msgstr ""

#: ipalib/plugins/internal.py:557
msgid "Kerberos Key Present, Service Provisioned"
msgstr ""

#: ipalib/plugins/internal.py:560
msgid "SSH public keys"
msgstr ""

#: ipalib/plugins/internal.py:561
msgid "SSH public key:"
msgstr ""

#: ipalib/plugins/internal.py:562
msgid "Set SSH key"
msgstr ""

#: ipalib/plugins/internal.py:563
msgid "Show/Set key"
msgstr ""

#: ipalib/plugins/internal.py:564
msgid "Modified: key not set"
msgstr ""

#: ipalib/plugins/internal.py:565
msgid "Modified"
msgstr ""

#: ipalib/plugins/internal.py:566
msgid "New: key not set"
msgstr ""

#: ipalib/plugins/internal.py:567
msgid "New: key set"
msgstr ""

#: ipalib/plugins/internal.py:570
msgid "Groups"
msgstr ""

#: ipalib/plugins/internal.py:573 ipalib/plugins/sudocmdgroup.py:82
msgid "Commands"
msgstr ""

#: ipalib/plugins/internal.py:576
msgid "Allow"
msgstr ""

#: ipalib/plugins/internal.py:577
msgid "Any Command"
msgstr ""

#: ipalib/plugins/internal.py:578
msgid "Any Group"
msgstr ""

#: ipalib/plugins/internal.py:581
msgid "Run Commands"
msgstr ""

#: ipalib/plugins/internal.py:582
msgid "Deny"
msgstr ""

#: ipalib/plugins/internal.py:584
msgid "Access this host"
msgstr ""

#: ipalib/plugins/internal.py:586
msgid "Option added"
msgstr ""

#: ipalib/plugins/internal.py:587
msgid "${count} option(s) removed"
msgstr ""

#: ipalib/plugins/internal.py:589
msgid "As Whom"
msgstr ""

#: ipalib/plugins/internal.py:590
msgid "Specified Commands and Groups"
msgstr ""

#: ipalib/plugins/internal.py:591
msgid "Specified Groups"
msgstr ""

#: ipalib/plugins/internal.py:597
msgid "Account"
msgstr ""

#: ipalib/plugins/internal.py:598
msgid "Administrative account"
msgstr ""

#: ipalib/plugins/internal.py:599
msgid "SID blacklists"
msgstr ""

#: ipalib/plugins/internal.py:600
msgid "Trust Settings"
msgstr ""

#: ipalib/plugins/internal.py:601 ipalib/plugins/realmdomains.py:73
#: ipalib/plugins/trust.py:803
msgid "Domain"
msgstr ""

#: ipalib/plugins/internal.py:602
msgid "Establish using"
msgstr ""

#: ipalib/plugins/internal.py:603 ipalib/plugins/trust.py:219
#: ipalib/plugins/trust.py:1119
msgid "Domain NetBIOS name"
msgstr ""

#: ipalib/plugins/internal.py:604 ipalib/plugins/trust.py:223
#: ipalib/plugins/trust.py:1123
msgid "Domain Security Identifier"
msgstr ""

#: ipalib/plugins/internal.py:605
msgid "Pre-shared password"
msgstr ""

#: ipalib/plugins/internal.py:606 ipalib/plugins/trust.py:134
msgid "Trust direction"
msgstr ""

#: ipalib/plugins/internal.py:607 ipalib/plugins/trust.py:138
msgid "Trust status"
msgstr ""

#: ipalib/plugins/internal.py:608 ipalib/plugins/trust.py:136
msgid "Trust type"
msgstr ""

#: ipalib/plugins/internal.py:614
msgid "Account Settings"
msgstr ""

#: ipalib/plugins/internal.py:615
msgid "Account Status"
msgstr ""

#: ipalib/plugins/internal.py:616
msgid "Contact Settings"
msgstr ""

#: ipalib/plugins/internal.py:617
msgid "Employee Information"
msgstr ""

#: ipalib/plugins/internal.py:618
msgid "Error changing account status"
msgstr ""

#: ipalib/plugins/internal.py:619
msgid "Password expiration"
msgstr ""

#: ipalib/plugins/internal.py:620
msgid "Mailing Address"
msgstr ""

#: ipalib/plugins/internal.py:621
msgid "Misc. Information"
msgstr ""

#: ipalib/plugins/internal.py:622
msgid ""
"Are you sure you want to ${action} the user?<br/>The change will take effect "
"immediately."
msgstr ""

#: ipalib/plugins/internal.py:623
msgid "Click to ${action}"
msgstr ""

#: ipalib/plugins/internal.py:627 ipalib/plugins/passwd.py:80
msgid "Current Password"
msgstr ""

#: ipalib/plugins/internal.py:628
msgid "Current password is required"
msgstr ""

#: ipalib/plugins/internal.py:629
msgid "Your password expires in ${days} days."
msgstr ""

#: ipalib/plugins/internal.py:630
msgid "The password or username you entered is incorrect."
msgstr ""

#: ipalib/plugins/internal.py:631 ipalib/plugins/passwd.py:77
msgid "New Password"
msgstr ""

#: ipalib/plugins/internal.py:632
msgid "New password is required"
msgstr ""

#: ipalib/plugins/internal.py:634
msgid "Password change complete"
msgstr ""

#: ipalib/plugins/internal.py:635
msgid "Passwords must match"
msgstr ""

#: ipalib/plugins/internal.py:636
msgid "Password reset was not successful."
msgstr ""

#: ipalib/plugins/internal.py:637
msgid "Reset Password"
msgstr ""

#: ipalib/plugins/internal.py:638
msgid "Reset your password."
msgstr ""

#: ipalib/plugins/internal.py:639
msgid "Verify Password"
msgstr ""

#: ipalib/plugins/internal.py:642
msgid "Are you sure you want to delete selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:643
msgid "${count} item(s) deleted"
msgstr ""

#: ipalib/plugins/internal.py:644
msgid "Are you sure you want to disable selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:645
msgid "${count} item(s) disabled"
msgstr ""

#: ipalib/plugins/internal.py:646
msgid "Are you sure you want to enable selected entries?"
msgstr ""

#: ipalib/plugins/internal.py:647
msgid "${count} item(s) enabled"
msgstr ""

#: ipalib/plugins/internal.py:648
msgid "Some entries were not deleted"
msgstr ""

#: ipalib/plugins/internal.py:649
msgid "Quick Links"
msgstr ""

#: ipalib/plugins/internal.py:650
msgid "Select All"
msgstr ""

#: ipalib/plugins/internal.py:651
msgid ""
"Query returned more results than the configured size limit. Displaying the "
"first ${counter} results."
msgstr ""

#: ipalib/plugins/internal.py:652
msgid "Unselect All"
msgstr ""

#: ipalib/plugins/internal.py:656
msgid "Disabled"
msgstr ""

#: ipalib/plugins/internal.py:662
msgid "Audit"
msgstr ""

#: ipalib/plugins/internal.py:663
msgid "Automember"
msgstr ""

#: ipalib/plugins/internal.py:664
msgid "Automount"
msgstr ""

#: ipalib/plugins/internal.py:666
msgid "DNS"
msgstr ""

#: ipalib/plugins/internal.py:667
msgid "Host Based Access Control"
msgstr ""

#: ipalib/plugins/internal.py:669
msgid "IPA Server"
msgstr ""

#: ipalib/plugins/internal.py:670
msgid "Policy"
msgstr ""

#: ipalib/plugins/internal.py:671
msgid "Role Based Access Control"
msgstr ""

#: ipalib/plugins/internal.py:672
msgid "Sudo"
msgstr ""

#: ipalib/plugins/internal.py:673 ipalib/plugins/trust.py:208
msgid "Trusts"
msgstr ""

#: ipalib/plugins/internal.py:675
msgid "True"
msgstr ""

#: ipalib/plugins/internal.py:677
msgid "Next"
msgstr ""

#: ipalib/plugins/internal.py:678
msgid "Page"
msgstr ""

#: ipalib/plugins/internal.py:679
msgid "Prev"
msgstr ""

#: ipalib/plugins/internal.py:680
msgid "undo"
msgstr ""

#: ipalib/plugins/internal.py:681
msgid "undo all"
msgstr ""

#: ipalib/plugins/internal.py:683
msgid "Text does not match field pattern"
msgstr ""

#: ipalib/plugins/internal.py:684
msgid "Must be a decimal number"
msgstr ""

#: ipalib/plugins/internal.py:685
msgid "Must be an integer"
msgstr ""

#: ipalib/plugins/internal.py:686
msgid "Not a valid IP address"
msgstr ""

#: ipalib/plugins/internal.py:687
msgid "Not a valid IPv4 address"
msgstr ""

#: ipalib/plugins/internal.py:688
msgid "Not a valid IPv6 address"
msgstr ""

#: ipalib/plugins/internal.py:689
msgid "Maximum value is ${value}"
msgstr ""

#: ipalib/plugins/internal.py:690
msgid "Minimum value is ${value}"
msgstr ""

#: ipalib/plugins/internal.py:691
msgid "Not a valid network address"
msgstr ""

#: ipalib/plugins/internal.py:692
msgid "'${port}' is not a valid port"
msgstr ""

#: ipalib/plugins/internal.py:693
msgid "Required field"
msgstr ""

#: ipalib/plugins/internal.py:694
msgid "Unsupported value"
msgstr ""

#: ipalib/plugins/internal.py:699
msgid "Dict of I18N messages"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:25
msgid ""
"\n"
"Kerberos ticket policy\n"
"\n"
"There is a single Kerberos ticket policy. This policy defines the\n"
"maximum ticket lifetime and the maximum renewal age, the period during\n"
"which the ticket is renewable.\n"
"\n"
"You can also create a per-user ticket policy by specifying the user login.\n"
"\n"
"For changes to the global policy to take effect, restarting the KDC service\n"
"is required, which can be achieved using:\n"
"\n"
"service krb5kdc restart\n"
"\n"
"Changes to per-user policies take effect immediately for newly requested\n"
"tickets (e.g. when the user next runs kinit).\n"
"\n"
"EXAMPLES:\n"
"\n"
" Display the current Kerberos ticket policy:\n"
"  ipa krbtpolicy-show\n"
"\n"
" Reset the policy to the default:\n"
"  ipa krbtpolicy-reset\n"
"\n"
" Modify the policy to 8 hours max life, 1-day max renewal:\n"
"  ipa krbtpolicy-mod --maxlife=28800 --maxrenew=86400\n"
"\n"
" Display effective Kerberos ticket policy for user 'admin':\n"
"  ipa krbtpolicy-show admin\n"
"\n"
" Reset per-user policy for user 'admin':\n"
"  ipa krbtpolicy-reset admin\n"
"\n"
" Modify per-user policy for user 'admin':\n"
"  ipa krbtpolicy-mod admin --maxlife=3600\n"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:75
msgid "kerberos ticket policy settings"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:86
msgid "Manage ticket policy for specific user"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:91
msgid "Max life"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:92
msgid "Maximum ticket life (seconds)"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:97
msgid "Max renew"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:98
msgid "Maximum renewable age (seconds)"
msgstr ""

#: ipalib/plugins/krbtpolicy.py:112
msgid "Modify Kerberos ticket policy."
msgstr ""

#: ipalib/plugins/krbtpolicy.py:126
msgid "Display the current Kerberos ticket policy."
msgstr ""

#: ipalib/plugins/krbtpolicy.py:151
msgid "Reset Kerberos ticket policy to the default values."
msgstr ""

#: ipalib/plugins/migration.py:35
msgid ""
"\n"
"Migration to IPA\n"
"\n"
"Migrate users and groups from an LDAP server to IPA.\n"
"\n"
"This performs an LDAP query against the remote server searching for\n"
"users and groups in a container. In order to migrate passwords you need\n"
"to bind as a user that can read the userPassword attribute on the remote\n"
"server. This is generally restricted to high-level admins such as\n"
"cn=Directory Manager in 389-ds (this is the default bind user).\n"
"\n"
"The default user container is ou=People.\n"
"\n"
"The default group container is ou=Groups.\n"
"\n"
"Users and groups that already exist on the IPA server are skipped.\n"
"\n"
"Two LDAP schemas define how group members are stored: RFC2307 and\n"
"RFC2307bis. RFC2307bis uses member and uniquemember to specify group\n"
"members, RFC2307 uses memberUid. The default schema is RFC2307bis.\n"
"\n"
"The schema compat feature allows IPA to reformat data for systems that\n"
"do not support RFC2307bis. It is recommended that this feature is disabled\n"
"during migration to reduce system overhead. It can be re-enabled after\n"
"migration. To migrate with it enabled use the \"--with-compat\" option.\n"
"\n"
"Migrated users do not have Kerberos credentials, they have only their\n"
"LDAP password. To complete the migration process, users need to go\n"
"to http://ipa.example.com/ipa/migration and authenticate using their\n"
"LDAP password in order to generate their Kerberos credentials.\n"
"\n"
"Migration is disabled by default. Use the command ipa config-mod to\n"
"enable it:\n"
"\n"
" ipa config-mod --enable-migration=TRUE\n"
"\n"
"If a base DN is not provided with --basedn then IPA will use either\n"
"the value of defaultNamingContext if it is set or the first value\n"
"in namingContexts set in the root of the remote LDAP server.\n"
"\n"
"Users are added as members to the default user group. This can be a\n"
"time-intensive task so during migration this is done in a batch\n"
"mode for every 100 users. As a result there will be a window in which\n"
"users will be added to IPA but will not be members of the default\n"
"user group.\n"
"\n"
"EXAMPLES:\n"
"\n"
" The simplest migration, accepting all defaults:\n"
"   ipa migrate-ds ldap://ds.example.com:389\n"
"\n"
" Specify the user and group container. This can be used to migrate user\n"
" and group data from an IPA v1 server:\n"
"   ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n"
"       --group-container='cn=groups,cn=accounts' \\\n"
"       ldap://ds.example.com:389\n"
"\n"
" Since IPA v2 server already contain predefined groups that may collide "
"with\n"
" groups in migrated (IPA v1) server (for example admins, ipausers), users\n"
" having colliding group as their primary group may happen to belong to\n"
" an unknown group on new IPA v2 server.\n"
" Use --group-overwrite-gid option to overwrite GID of already existing "
"groups\n"
" to prevent this issue:\n"
"    ipa migrate-ds --group-overwrite-gid \\\n"
"        --user-container='cn=users,cn=accounts' \\\n"
"        --group-container='cn=groups,cn=accounts' \\\n"
"        ldap://ds.example.com:389\n"
"\n"
" Migrated users or groups may have object class and accompanied attributes\n"
" unknown to the IPA v2 server. These object classes and attributes may be\n"
" left out of the migration process:\n"
"    ipa migrate-ds --user-container='cn=users,cn=accounts' \\\n"
"       --group-container='cn=groups,cn=accounts' \\\n"
"       --user-ignore-objectclass=radiusprofile \\\n"
"       --user-ignore-attribute=radiusgroupname \\\n"
"       ldap://ds.example.com:389\n"
"\n"
"LOGGING\n"
"\n"
"Migration will log warnings and errors to the Apache error log. This\n"
"file should be evaluated post-migration to correct or investigate any\n"
"issues that were discovered.\n"
"\n"
"For every 100 users migrated an info-level message will be displayed to\n"
"give the current progress and duration to make it possible to track\n"
"the progress of migration.\n"
"\n"
"If the log level is debug, either by setting debug = True in\n"
"/etc/ipa/default.conf or /etc/ipa/server.conf, then an entry will be "
"printed\n"
"for each user added plus a summary when the default user group is\n"
"updated.\n"
msgstr ""

#: ipalib/plugins/migration.py:130
#, python-format
msgid ""
"Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually."
msgstr ""

#: ipalib/plugins/migration.py:131
#, python-format
msgid ""
"Unable to determine if Kerberos principal %s already exists. Use 'ipa user-"
"mod' to set it manually."
msgstr ""

#: ipalib/plugins/migration.py:132
msgid ""
"Failed to add user to the default group. Use 'ipa group-add-member' to add "
"manually."
msgstr ""

#: ipalib/plugins/migration.py:133
msgid "Migration of LDAP search reference is not supported."
msgstr ""

#: ipalib/plugins/migration.py:134
msgid "Malformed DN"
msgstr ""

#: ipalib/plugins/migration.py:151
#, python-format
msgid "%(user)s is not a POSIX user"
msgstr ""

#: ipalib/plugins/migration.py:419
msgid ""
". Check GID of the existing group. Use --group-overwrite-gid option to "
"overwrite the GID"
msgstr ""

#: ipalib/plugins/migration.py:434
msgid "Invalid LDAP URI."
msgstr ""

#: ipalib/plugins/migration.py:439
msgid "Migrate users and groups from DS to IPA."
msgstr ""

#: ipalib/plugins/migration.py:486
msgid "LDAP URI"
msgstr ""

#: ipalib/plugins/migration.py:487
msgid "LDAP URI of DS server to migrate from"
msgstr ""

#: ipalib/plugins/migration.py:493
msgid "bind password"
msgstr ""

#: ipalib/plugins/migration.py:500
msgid "Bind DN"
msgstr ""

#: ipalib/plugins/migration.py:506
msgid "User container"
msgstr ""

#: ipalib/plugins/migration.py:507
msgid "DN of container for users in DS relative to base DN"
msgstr ""

#: ipalib/plugins/migration.py:513
msgid "Group container"
msgstr ""

#: ipalib/plugins/migration.py:514
msgid "DN of container for groups in DS relative to base DN"
msgstr ""

#: ipalib/plugins/migration.py:520
msgid "User object class"
msgstr ""

#: ipalib/plugins/migration.py:521
msgid "Objectclasses used to search for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:528
msgid "Group object class"
msgstr ""

#: ipalib/plugins/migration.py:529
msgid "Objectclasses used to search for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:536
msgid "Ignore user object class"
msgstr ""

#: ipalib/plugins/migration.py:537
msgid "Objectclasses to be ignored for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:544
msgid "Ignore user attribute"
msgstr ""

#: ipalib/plugins/migration.py:545
msgid "Attributes to be ignored for user entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:552
msgid "Ignore group object class"
msgstr ""

#: ipalib/plugins/migration.py:553
msgid "Objectclasses to be ignored for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:560
msgid "Ignore group attribute"
msgstr ""

#: ipalib/plugins/migration.py:561
msgid "Attributes to be ignored for group entries in DS"
msgstr ""

#: ipalib/plugins/migration.py:568
msgid "Overwrite GID"
msgstr ""

#: ipalib/plugins/migration.py:569
msgid ""
"When migrating a group already existing in IPA domain overwrite the group "
"GID and report as success"
msgstr ""

#: ipalib/plugins/migration.py:574
msgid "LDAP schema"
msgstr ""

#: ipalib/plugins/migration.py:575
msgid ""
"The schema used on the LDAP server. Supported values are RFC2307 and "
"RFC2307bis. The default is RFC2307bis"
msgstr ""

#: ipalib/plugins/migration.py:581
msgid "Continue"
msgstr ""

#: ipalib/plugins/migration.py:582
msgid ""
"Continuous operation mode. Errors are reported but the process continues"
msgstr ""

#: ipalib/plugins/migration.py:587
msgid "Base DN"
msgstr ""

#: ipalib/plugins/migration.py:588
msgid "Base DN on remote LDAP server"
msgstr ""

#: ipalib/plugins/migration.py:592
msgid "Ignore compat plugin"
msgstr ""

#: ipalib/plugins/migration.py:593
msgid "Allows migration despite the usage of compat plugin"
msgstr ""

#: ipalib/plugins/migration.py:601
msgid "Lists of objects migrated; categorized by type."
msgstr ""

#: ipalib/plugins/migration.py:605
msgid "Lists of objects that could not be migrated; categorized by type."
msgstr ""

#: ipalib/plugins/migration.py:609
msgid "False if migration mode was disabled."
msgstr ""

#: ipalib/plugins/migration.py:613
msgid "False if migration fails because the compatibility plug-in is enabled."
msgstr ""

#: ipalib/plugins/migration.py:617
#, python-format
msgid "%s to exclude from migration"
msgstr ""

#: ipalib/plugins/migration.py:619
msgid ""
"search results for objects to be migrated\n"
"have been truncated by the server;\n"
"migration process might be incomplete\n"
msgstr ""

#: ipalib/plugins/migration.py:624
msgid "Migration mode is disabled. Use 'ipa config-mod' to enable it."
msgstr ""

#: ipalib/plugins/migration.py:627
msgid ""
"Passwords have been migrated in pre-hashed format.\n"
"IPA is unable to generate Kerberos keys unless provided\n"
"with clear text passwords. All migrated users need to\n"
"login at https://your.domain/ipa/migration/ before they\n"
"can use their Kerberos accounts."
msgstr ""

#: ipalib/plugins/migration.py:713
#, python-format
msgid ""
"%(container)s LDAP search did not return any result (search base: "
"%(search_base)s, objectclass: %(objectclass)s)"
msgstr ""

#: ipalib/plugins/migration.py:745 ipalib/plugins/user.py:519
msgid "Default group for new users not found"
msgstr ""

#: ipalib/plugins/misc.py:25
msgid ""
"\n"
"Misc plug-ins\n"
msgstr ""

#: ipalib/plugins/misc.py:36
msgid "Show environment variables."
msgstr ""

#: ipalib/plugins/misc.py:38
#, python-format
msgid "%(count)d variables"
msgstr ""

#: ipalib/plugins/misc.py:47 ipalib/plugins/misc.py:115
msgid ""
"retrieve and print all attributes from the server. Affects command output."
msgstr ""

#: ipalib/plugins/misc.py:61
msgid "Total number of variables env (>= count)"
msgstr ""

#: ipalib/plugins/misc.py:66
msgid "Number of variables returned (<= total)"
msgstr ""

#: ipalib/plugins/misc.py:106
msgid "Show all loaded plugins."
msgstr ""

#: ipalib/plugins/misc.py:109
#, python-format
msgid "%(count)d plugin loaded"
msgid_plural "%(count)d plugins loaded"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/misc.py:126
msgid "Number of plugins loaded"
msgstr ""

#: ipalib/plugins/netgroup.py:28
msgid ""
"\n"
"Netgroups\n"
"\n"
"A netgroup is a group used for permission checking. It can contain both\n"
"user and host values.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new netgroup:\n"
"   ipa netgroup-add --desc=\"NFS admins\" admins\n"
"\n"
" Add members to the netgroup:\n"
"   ipa netgroup-add-member --users=tuser1 --users=tuser2 admins\n"
"\n"
" Remove a member from the netgroup:\n"
"   ipa netgroup-remove-member --users=tuser2 admins\n"
"\n"
" Display information about a netgroup:\n"
"   ipa netgroup-show admins\n"
"\n"
" Delete a netgroup:\n"
"   ipa netgroup-del admins\n"
msgstr ""

#: ipalib/plugins/netgroup.py:69
msgid "Member Host"
msgstr ""

#: ipalib/plugins/netgroup.py:81
msgid "netgroup"
msgstr ""

#: ipalib/plugins/netgroup.py:82
msgid "netgroups"
msgstr ""

#: ipalib/plugins/netgroup.py:108
msgid "Netgroups"
msgstr ""

#: ipalib/plugins/netgroup.py:109
msgid "Netgroup"
msgstr ""

#: ipalib/plugins/netgroup.py:116
msgid "Netgroup name"
msgstr ""

#: ipalib/plugins/netgroup.py:123
msgid "Netgroup description"
msgstr ""

#: ipalib/plugins/netgroup.py:129
msgid "NIS domain name"
msgstr ""

#: ipalib/plugins/netgroup.py:134
msgid "IPA unique ID"
msgstr ""

#: ipalib/plugins/netgroup.py:156
msgid "Add a new netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:159
#, python-format
msgid "Added netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:161
#, python-format
msgid ""
"hostgroup with name \"%s\" already exists. Hostgroups and netgroups share a "
"common namespace"
msgstr ""

#: ipalib/plugins/netgroup.py:193
msgid "Delete a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:195
#, python-format
msgid "Deleted netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:201
msgid "Modify a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:204
#, python-format
msgid "Modified netgroup \"%(value)s\""
msgstr ""

#: ipalib/plugins/netgroup.py:222
msgid "Search for a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:227
#, python-format
msgid "%(count)d netgroup matched"
msgid_plural "%(count)d netgroups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/netgroup.py:237
msgid "search for managed groups"
msgstr ""

#: ipalib/plugins/netgroup.py:260
msgid "Display information about a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:268
msgid "Add members to a netgroup."
msgstr ""

#: ipalib/plugins/netgroup.py:284
msgid "Remove members from a netgroup."
msgstr ""

#: ipalib/plugins/passwd.py:29
msgid ""
"\n"
"Set a user's password\n"
"\n"
"If someone other than a user changes that user's password (e.g., Helpdesk\n"
"resets it) then the password will need to be changed the first time it\n"
"is used. This is so the end-user is the only one who knows the password.\n"
"\n"
"The IPA password policy controls how often a password may be changed,\n"
"what strength requirements exist, and the length of the password history.\n"
"\n"
"EXAMPLES:\n"
"\n"
" To reset your own password:\n"
"   ipa passwd\n"
"\n"
" To change another user's password:\n"
"   ipa passwd tuser1\n"
msgstr ""

#: ipalib/plugins/passwd.py:65
msgid "Set a user's password."
msgstr ""

#: ipalib/plugins/passwd.py:89
#, python-format
msgid "Changed password for \"%(value)s\""
msgstr ""

#: ipalib/plugins/passwd.py:115
msgid "Invalid credentials"
msgstr ""

#: ipalib/plugins/permission.py:27
msgid ""
"\n"
"Permissions\n"
"\n"
"A permission enables fine-grained delegation of rights. A permission is\n"
"a human-readable form of a 389-ds Access Control Rule, or instruction "
"(ACI).\n"
"A permission grants the right to perform a specific task such as adding a\n"
"user, modifying a group, etc.\n"
"\n"
"A permission may not contain other permissions.\n"
"\n"
"* A permission grants access to read, write, add or delete.\n"
"* A privilege combines similar permissions (for example all the permissions\n"
"  needed to add a user).\n"
"* A role grants a set of privileges to users, groups, hosts or hostgroups.\n"
"\n"
"A permission is made up of a number of different parts:\n"
"\n"
"1. The name of the permission.\n"
"2. The target of the permission.\n"
"3. The rights granted by the permission.\n"
"\n"
"Rights define what operations are allowed, and may be one or more\n"
"of the following:\n"
"1. write - write one or more attributes\n"
"2. read - read one or more attributes\n"
"3. add - add a new entry to the tree\n"
"4. delete - delete an existing entry\n"
"5. all - all permissions are granted\n"
"\n"
"Read permission is granted for most attributes by default so the read\n"
"permission is not expected to be used very often.\n"
"\n"
"Note the distinction between attributes and entries. The permissions are\n"
"independent, so being able to add a user does not mean that the user will\n"
"be editable.\n"
"\n"
"There are a number of allowed targets:\n"
"1. type: a type of object (user, group, etc).\n"
"2. memberof: a member of a group or hostgroup\n"
"3. filter: an LDAP filter\n"
"4. subtree: an LDAP filter specifying part of the LDAP DIT. This is a\n"
"   super-set of the \"type\" target.\n"
"5. targetgroup: grant access to modify a specific group (such as granting\n"
"   the rights to manage group membership)\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a permission that grants the creation of users:\n"
"   ipa permission-add --type=user --permissions=add \"Add Users\"\n"
"\n"
" Add a permission that grants the ability to manage group membership:\n"
"   ipa permission-add --attrs=member --permissions=write --type=group "
"\"Manage Group Members\"\n"
msgstr ""

#: ipalib/plugins/permission.py:85
msgid "Permission Type"
msgstr ""

#: ipalib/plugins/permission.py:107
msgid "permission"
msgstr ""

#: ipalib/plugins/permission.py:108
msgid "permissions"
msgstr ""

#: ipalib/plugins/permission.py:128
msgid "Permission name"
msgstr ""

#: ipalib/plugins/permission.py:136
msgid "Permissions to grant (read, write, add, delete, all)"
msgstr ""

#: ipalib/plugins/permission.py:151
msgid ""
"Type of IPA object (user, group, host, hostgroup, service, netgroup, dns)"
msgstr ""

#: ipalib/plugins/permission.py:157
msgid "Member of group"
msgstr ""

#: ipalib/plugins/permission.py:158
msgid "Target members of a group"
msgstr ""

#: ipalib/plugins/permission.py:170
msgid "Subtree to apply permissions to"
msgstr ""

#: ipalib/plugins/permission.py:176
msgid "User group to apply permissions to"
msgstr ""

#: ipalib/plugins/permission.py:201
msgid "Add a new permission."
msgstr ""

#: ipalib/plugins/permission.py:203 ipalib/plugins/permission.py:259
#, python-format
msgid "Added permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:257
msgid "Add a system permission without an ACI"
msgstr ""

#: ipalib/plugins/permission.py:265
msgid "Permission type"
msgstr ""

#: ipalib/plugins/permission.py:292
msgid "Delete a permission."
msgstr ""

#: ipalib/plugins/permission.py:294
#, python-format
msgid "Deleted permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:300
msgid "force delete of SYSTEM permissions"
msgstr ""

#: ipalib/plugins/permission.py:308
msgid "A SYSTEM permission may not be removed"
msgstr ""

#: ipalib/plugins/permission.py:320
msgid "Modify a permission."
msgstr ""

#: ipalib/plugins/permission.py:322
#, python-format
msgid "Modified permission \"%(value)s\""
msgstr ""

#: ipalib/plugins/permission.py:329
msgid "A SYSTEM permission may not be modified"
msgstr ""

#: ipalib/plugins/permission.py:354
msgid "New name can not be empty"
msgstr ""

#: ipalib/plugins/permission.py:410
msgid "Search for permissions."
msgstr ""

#: ipalib/plugins/permission.py:413
#, python-format
msgid "%(count)d permission matched"
msgid_plural "%(count)d permissions matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/permission.py:492
msgid "Display information about a permission."
msgstr ""

#: ipalib/plugins/ping.py:26
msgid ""
"\n"
"Ping the remote IPA server to ensure it is running.\n"
"\n"
"The ping command sends an echo request to an IPA server. The server\n"
"returns its version information. This is used by an IPA client\n"
"to confirm that the server is available and accepting requests.\n"
"\n"
"The server from xmlrpc_uri in /etc/ipa/default.conf is contacted first.\n"
"If it does not respond then the client will contact any servers defined\n"
"by ldap SRV records in DNS.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Ping an IPA server:\n"
"   ipa ping\n"
"   ------------------------------------------\n"
"   IPA server version 2.1.9. API version 2.20\n"
"   ------------------------------------------\n"
"\n"
" Ping an IPA server verbosely:\n"
"   ipa -v ping\n"
"   ipa: INFO: trying https://ipa.example.com/ipa/xml\n"
"   ipa: INFO: Forwarding 'ping' to server 'https://ipa.example.com/ipa/xml'\n"
"   -----------------------------------------------------\n"
"   IPA server version 2.1.9. API version 2.20\n"
"   -----------------------------------------------------\n"
msgstr ""

#: ipalib/plugins/ping.py:59
msgid "Ping a remote server."
msgstr ""

#: ipalib/plugins/pkinit.py:26
msgid ""
"\n"
"Kerberos pkinit options\n"
"\n"
"Enable or disable anonymous pkinit using the principal\n"
"WELLKNOWN/ANONYMOUS@REALM. The server must have been installed with\n"
"pkinit support.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Enable anonymous pkinit:\n"
"  ipa pkinit-anonymous enable\n"
"\n"
" Disable anonymous pkinit:\n"
"  ipa pkinit-anonymous disable\n"
"\n"
"For more information on anonymous pkinit see:\n"
"\n"
"http://k5wiki.kerberos.org/wiki/Projects/Anonymous_pkinit\n"
msgstr ""

#: ipalib/plugins/pkinit.py:50
msgid "pkinit"
msgstr ""

#: ipalib/plugins/pkinit.py:52
msgid "PKINIT"
msgstr ""

#: ipalib/plugins/pkinit.py:64
#, python-format
msgid "Unknown command %s"
msgstr ""

#: ipalib/plugins/pkinit.py:68
msgid "Enable or Disable Anonymous PKINIT."
msgstr ""

#: ipalib/plugins/privilege.py:23
msgid ""
"\n"
"Privileges\n"
"\n"
"A privilege combines permissions into a logical task. A permission provides\n"
"the rights to do a single task. There are some IPA operations that require\n"
"multiple permissions to succeed. A privilege is where permissions are\n"
"combined in order to perform a specific task.\n"
"\n"
"For example, adding a user requires the following permissions:\n"
" * Creating a new user entry\n"
" * Resetting a user password\n"
" * Adding the new user to the default IPA users group\n"
"\n"
"Combining these three low-level tasks into a higher level task in the\n"
"form of a privilege named \"Add User\" makes it easier to manage Roles.\n"
"\n"
"A privilege may not contain other privileges.\n"
"\n"
"See role and permission for additional information.\n"
msgstr ""

#: ipalib/plugins/privilege.py:49
msgid "privilege"
msgstr ""

#: ipalib/plugins/privilege.py:50
msgid "privileges"
msgstr ""

#: ipalib/plugins/privilege.py:62
msgid "Privileges"
msgstr ""

#: ipalib/plugins/privilege.py:63
msgid "Privilege"
msgstr ""

#: ipalib/plugins/privilege.py:68
msgid "Privilege name"
msgstr ""

#: ipalib/plugins/privilege.py:74
msgid "Privilege description"
msgstr ""

#: ipalib/plugins/privilege.py:82
msgid "Add a new privilege."
msgstr ""

#: ipalib/plugins/privilege.py:84
#, python-format
msgid "Added privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:90
msgid "Delete a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:92
#, python-format
msgid "Deleted privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:98
msgid "Modify a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:100
#, python-format
msgid "Modified privilege \"%(value)s\""
msgstr ""

#: ipalib/plugins/privilege.py:106
msgid "Search for privileges."
msgstr ""

#: ipalib/plugins/privilege.py:109
#, python-format
msgid "%(count)d privilege matched"
msgid_plural "%(count)d privileges matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/privilege.py:116
msgid "Display information about a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:122
msgid "Add members to a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:139
msgid "Add permissions to a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:154
msgid "Number of permissions added"
msgstr ""

#: ipalib/plugins/privilege.py:162
msgid "Remove permissions from a privilege."
msgstr ""

#: ipalib/plugins/privilege.py:179
msgid "Number of permissions removed"
msgstr ""

#: ipalib/plugins/pwpolicy.py:30
msgid ""
"\n"
"Password policy\n"
"\n"
"A password policy sets limitations on IPA passwords, including maximum\n"
"lifetime, minimum lifetime, the number of passwords to save in\n"
"history, the number of character classes required (for stronger passwords)\n"
"and the minimum password length.\n"
"\n"
"By default there is a single, global policy for all users. You can also\n"
"create a password policy to apply to a group. Each user is only subject\n"
"to one password policy, either the group policy or the global policy. A\n"
"group policy stands alone; it is not a super-set of the global policy plus\n"
"custom settings.\n"
"\n"
"Each group password policy requires a unique priority setting. If a user\n"
"is in multiple groups that have password policies, this priority determines\n"
"which password policy is applied. A lower value indicates a higher priority\n"
"policy.\n"
"\n"
"Group password policies are automatically removed when the groups they\n"
"are associated with are removed.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Modify the global policy:\n"
"   ipa pwpolicy-mod --minlength=10\n"
"\n"
" Add a new group password policy:\n"
"   ipa pwpolicy-add --maxlife=90 --minlife=1 --history=10 --minclasses=3 --"
"minlength=8 --priority=10 localadmins\n"
"\n"
" Display the global password policy:\n"
"   ipa pwpolicy-show\n"
"\n"
" Display a group password policy:\n"
"   ipa pwpolicy-show localadmins\n"
"\n"
" Display the policy that would be applied to a given user:\n"
"   ipa pwpolicy-show --user=tuser1\n"
"\n"
" Modify a group password policy:\n"
"   ipa pwpolicy-mod --minclasses=2 localadmins\n"
msgstr ""

#: ipalib/plugins/pwpolicy.py:90
#, python-format
msgid "priority must be a unique value (%(prio)d already used by %(gname)s)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:180
msgid "password policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:181
msgid "password policies"
msgstr ""

#: ipalib/plugins/pwpolicy.py:205
msgid "Max failures"
msgstr ""

#: ipalib/plugins/pwpolicy.py:206
msgid "Consecutive failures before lockout"
msgstr ""

#: ipalib/plugins/pwpolicy.py:211
msgid "Failure reset interval"
msgstr ""

#: ipalib/plugins/pwpolicy.py:212
msgid "Period after which failure count will be reset (seconds)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:217
msgid "Lockout duration"
msgstr ""

#: ipalib/plugins/pwpolicy.py:218
msgid "Period for which lockout is enforced (seconds)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:223
msgid "Password Policies"
msgstr ""

#: ipalib/plugins/pwpolicy.py:229
msgid "Group"
msgstr ""

#: ipalib/plugins/pwpolicy.py:230
msgid "Manage password policy for specific group"
msgstr ""

#: ipalib/plugins/pwpolicy.py:235
msgid "Max lifetime (days)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:236
msgid "Maximum password lifetime (in days)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:242
msgid "Min lifetime (hours)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:243
msgid "Minimum password lifetime (in hours)"
msgstr ""

#: ipalib/plugins/pwpolicy.py:248
msgid "History size"
msgstr ""

#: ipalib/plugins/pwpolicy.py:249
msgid "Password history size"
msgstr ""

#: ipalib/plugins/pwpolicy.py:254
msgid "Character classes"
msgstr ""

#: ipalib/plugins/pwpolicy.py:255
msgid "Minimum number of character classes"
msgstr ""

#: ipalib/plugins/pwpolicy.py:261
msgid "Min length"
msgstr ""

#: ipalib/plugins/pwpolicy.py:262
msgid "Minimum length of password"
msgstr ""

#: ipalib/plugins/pwpolicy.py:268
msgid "Priority of the policy (higher number means lower priority"
msgstr ""

#: ipalib/plugins/pwpolicy.py:322
msgid "Maximum password life must be greater than minimum."
msgstr ""

#: ipalib/plugins/pwpolicy.py:341
msgid "Add a new group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:368
msgid "Delete a group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:380
msgid "cannot delete global password policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:396
msgid "Modify a group password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:407
msgid "priority cannot be set on global policy"
msgstr ""

#: ipalib/plugins/pwpolicy.py:440
msgid "Display information about password policy."
msgstr ""

#: ipalib/plugins/pwpolicy.py:445
msgid "Display effective policy for a specific user"
msgstr ""

#: ipalib/plugins/pwpolicy.py:470
msgid "Search for group password policies."
msgstr ""

#: ipalib/plugins/realmdomains.py:30
msgid ""
"\n"
"Realm domains\n"
"\n"
"Manage the list of domains associated with IPA realm.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Display the current list of realm domains:\n"
"   ipa realmdomains-show\n"
"\n"
" Replace the list of realm domains:\n"
"   ipa realmdomains-mod --domain=example.com\n"
"   ipa realmdomains-mod --domain={example1.com,example2.com,example3.com}\n"
"\n"
" Add a domain to the list of realm domains:\n"
"   ipa realmdomains-mod --add-domain=newdomain.com\n"
"\n"
" Delete a domain from the list of realm domains:\n"
"   ipa realmdomains-mod --del-domain=olddomain.com\n"
msgstr ""

#: ipalib/plugins/realmdomains.py:61
msgid "Realm domains"
msgstr ""

#: ipalib/plugins/realmdomains.py:79
msgid "Add domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:85
msgid "Delete domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:93
msgid "Modify realm domains."
msgstr ""

#: ipalib/plugins/realmdomains.py:98
msgid "Force adding domain even if not in DNS"
msgstr ""

#: ipalib/plugins/realmdomains.py:111
msgid ""
"you cannot specify the --domain option together with --add-domain or --del-"
"domain"
msgstr ""

#: ipalib/plugins/realmdomains.py:113 ipalib/plugins/realmdomains.py:133
msgid "cannot delete domain of IPA server"
msgstr ""

#: ipalib/plugins/realmdomains.py:118
#, python-format
msgid "no SOA or NS records found for domains: %s"
msgstr ""

#: ipalib/plugins/realmdomains.py:127
#, python-format
msgid "no SOA or NS records found for domain %s"
msgstr ""

#: ipalib/plugins/realmdomains.py:190
msgid "Display the list of realm domains."
msgstr ""

#: ipalib/plugins/role.py:26
msgid ""
"\n"
"Roles\n"
"\n"
"A role is used for fine-grained delegation. A permission grants the ability\n"
"to perform given low-level tasks (add a user, modify a group, etc.). A\n"
"privilege combines one or more permissions into a higher-level abstraction\n"
"such as useradmin. A useradmin would be able to add, delete and modify "
"users.\n"
"\n"
"Privileges are assigned to Roles.\n"
"\n"
"Users, groups, hosts and hostgroups may be members of a Role.\n"
"\n"
"Roles can not contain other roles.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new role:\n"
"   ipa role-add --desc=\"Junior-level admin\" junioradmin\n"
"\n"
" Add some privileges to this role:\n"
"   ipa role-add-privilege --privileges=addusers junioradmin\n"
"   ipa role-add-privilege --privileges=change_password junioradmin\n"
"   ipa role-add-privilege --privileges=add_user_to_default_group "
"junioradmin\n"
"\n"
" Add a group of users to this role:\n"
"   ipa group-add --desc=\"User admins\" useradmins\n"
"   ipa role-add-member --groups=useradmins junioradmin\n"
"\n"
" Display information about a role:\n"
"   ipa role-show junioradmin\n"
"\n"
" The result of this is that any users in the group 'junioradmin' can\n"
" add users, reset passwords or add a user to the default IPA user group.\n"
msgstr ""

#: ipalib/plugins/role.py:66
msgid "role"
msgstr ""

#: ipalib/plugins/role.py:67
msgid "roles"
msgstr ""

#: ipalib/plugins/role.py:82
msgid "Role"
msgstr ""

#: ipalib/plugins/role.py:87
msgid "Role name"
msgstr ""

#: ipalib/plugins/role.py:93
msgid "A description of this role-group"
msgstr ""

#: ipalib/plugins/role.py:101
msgid "Add a new role."
msgstr ""

#: ipalib/plugins/role.py:103
#, python-format
msgid "Added role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:109
msgid "Delete a role."
msgstr ""

#: ipalib/plugins/role.py:111
#, python-format
msgid "Deleted role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:117
msgid "Modify a role."
msgstr ""

#: ipalib/plugins/role.py:119
#, python-format
msgid "Modified role \"%(value)s\""
msgstr ""

#: ipalib/plugins/role.py:125
msgid "Search for roles."
msgstr ""

#: ipalib/plugins/role.py:128
#, python-format
msgid "%(count)d role matched"
msgid_plural "%(count)d roles matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/role.py:135
msgid "Display information about a role."
msgstr ""

#: ipalib/plugins/role.py:141
msgid "Add members to a role."
msgstr ""

#: ipalib/plugins/role.py:147
msgid "Remove members from a role."
msgstr ""

#: ipalib/plugins/role.py:153
msgid "Add privileges to a role."
msgstr ""

#: ipalib/plugins/role.py:168
msgid "Number of privileges added"
msgstr ""

#: ipalib/plugins/role.py:176
msgid "Remove privileges from a role."
msgstr ""

#: ipalib/plugins/role.py:191
msgid "Number of privileges removed"
msgstr ""

#: ipalib/plugins/selfservice.py:28
msgid ""
"\n"
"Self-service Permissions\n"
"\n"
"A permission enables fine-grained delegation of permissions. Access Control\n"
"Rules, or instructions (ACIs), grant permission to permissions to perform\n"
"given tasks such as adding a user, modifying a group, etc.\n"
"\n"
"A Self-service permission defines what an object can change in its own "
"entry.\n"
"\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a self-service rule to allow users to manage their address (using Bash\n"
" brace expansion):\n"
"   ipa selfservice-add --permissions=write --attrs={street,postalCode,l,c,"
"st} \"Users manage their own address\"\n"
"\n"
" When managing the list of attributes you need to include all attributes\n"
" in the list, including existing ones.\n"
" Add telephoneNumber to the list (using Bash brace expansion):\n"
"   ipa selfservice-mod --attrs={street,postalCode,l,c,st,telephoneNumber} "
"\"Users manage their own address\"\n"
"\n"
" Display our updated rule:\n"
"   ipa selfservice-show \"Users manage their own address\"\n"
"\n"
" Delete a rule:\n"
"   ipa selfservice-del \"Users manage their own address\"\n"
msgstr ""

#: ipalib/plugins/selfservice.py:71
msgid "self service permission"
msgstr ""

#: ipalib/plugins/selfservice.py:72
msgid "self service permissions"
msgstr ""

#: ipalib/plugins/selfservice.py:73
msgid "Self Service Permissions"
msgstr ""

#: ipalib/plugins/selfservice.py:74
msgid "Self Service Permission"
msgstr ""

#: ipalib/plugins/selfservice.py:79 ipalib/plugins/selfservice.py:80
msgid "Self-service name"
msgstr ""

#: ipalib/plugins/selfservice.py:94
msgid "Attributes to which the permission applies."
msgstr ""

#: ipalib/plugins/selfservice.py:123
msgid "Add a new self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:125
#, python-format
msgid "Added selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:145
msgid "Delete a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:148
#, python-format
msgid "Deleted selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:163
msgid "Modify a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:165
#, python-format
msgid "Modified selfservice \"%(value)s\""
msgstr ""

#: ipalib/plugins/selfservice.py:185
msgid "Search for a self-service permission."
msgstr ""

#: ipalib/plugins/selfservice.py:188
#, python-format
msgid "%(count)d selfservice matched"
msgid_plural "%(count)d selfservices matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/selfservice.py:212
msgid "Display information about a self-service permission."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:26
msgid ""
"\n"
"SELinux User Mapping\n"
"\n"
"Map IPA users to SELinux users by host.\n"
"\n"
"Hosts, hostgroups, users and groups can be either defined within\n"
"the rule or it may point to an existing HBAC rule. When using\n"
"--hbacrule option to selinuxusermap-find an exact match is made on the\n"
"HBAC rule name, so only one or zero entries will be returned.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a rule, \"test1\", that sets all users to xguest_u:s0 on the host "
"\"server\":\n"
"   ipa selinuxusermap-add --usercat=all --selinuxuser=xguest_u:s0 test1\n"
"   ipa selinuxusermap-add-host --hosts=server.example.com test1\n"
"\n"
" Create a rule, \"test2\", that sets all users to guest_u:s0 and uses an "
"existing HBAC rule for users and hosts:\n"
"   ipa selinuxusermap-add --usercat=all --hbacrule=webserver --"
"selinuxuser=guest_u:s0 test2\n"
"\n"
" Display the properties of a rule:\n"
"   ipa selinuxusermap-show test2\n"
"\n"
" Create a rule for a specific user. This sets the SELinux context for\n"
" user john to unconfined_u:s0-s0:c0.c1023 on any machine:\n"
"   ipa selinuxusermap-add --hostcat=all --selinuxuser=unconfined_u:s0-s0:c0."
"c1023 john_unconfined\n"
"   ipa selinuxusermap-add-user --users=john john_unconfined\n"
"\n"
" Disable a rule:\n"
"   ipa selinuxusermap-disable test1\n"
"\n"
" Enable a rule:\n"
"   ipa selinuxusermap-enable test1\n"
"\n"
" Find a rule referencing a specific HBAC rule:\n"
"   ipa selinuxusermap-find --hbacrule=allow_some\n"
"\n"
" Remove a rule:\n"
"   ipa selinuxusermap-del john_unconfined\n"
"\n"
"SEEALSO:\n"
"\n"
" The list controlling the order in which the SELinux user map is applied\n"
" and the default SELinux user are available in the config-show command.\n"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:71
msgid "HBAC rule and local members cannot both be set"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:98
msgid "Invalid SELinux user name, only a-Z and _ are allowed"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:100
msgid "Invalid MLS value, must match s[0-15](-s[0-15])"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:103
msgid ""
"Invalid MCS value, must match c[0-1023].c[0-1023] and/or c[0-1023]-c[0-c0123]"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:118
msgid "SELinux user map list not found in configuration"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:123
#, python-format
msgid "SELinux user %(user)s not found in ordering list (in config)"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:134
msgid "SELinux User Map rule"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:135
msgid "SELinux User Map rules"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:152
msgid "SELinux User Maps"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:153
msgid "SELinux User Map"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:163
msgid "SELinux User"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:168
msgid "HBAC Rule that defines the users, groups and hostgroups"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:228
#, python-format
msgid "HBAC rule %(rule)s not found"
msgstr ""

#: ipalib/plugins/selinuxusermap.py:247
msgid "Create a new SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:249
#, python-format
msgid "Added SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:284
msgid "Delete a SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:286
#, python-format
msgid "Deleted SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:292
msgid "Modify a SELinux User Map."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:294
#, python-format
msgid "Modified SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:348
msgid "Search for SELinux User Maps."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:351
#, python-format
msgid "%(count)d SELinux User Map matched"
msgid_plural "%(count)d SELinux User Maps matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/selinuxusermap.py:381
msgid "Display the properties of a SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:392
msgid "Enable an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:394
#, python-format
msgid "Enabled SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:419
msgid "Disable an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:421
#, python-format
msgid "Disabled SELinux User Map \"%(value)s\""
msgstr ""

#: ipalib/plugins/selinuxusermap.py:446
msgid "Add users and groups to an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:469
msgid "Remove users and groups from an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:478
msgid "Add target hosts and hostgroups to an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/selinuxusermap.py:501
msgid "Remove target hosts and hostgroups from an SELinux User Map rule."
msgstr ""

#: ipalib/plugins/service.py:35
msgid ""
"\n"
"Services\n"
"\n"
"A IPA service represents a service that runs on a host. The IPA service\n"
"record can store a Kerberos principal, an SSL certificate, or both.\n"
"\n"
"An IPA service can be managed directly from a machine, provided that\n"
"machine has been given the correct permission. This is true even for\n"
"machines other than the one the service is associated with. For example,\n"
"requesting an SSL certificate using the host service principal credentials\n"
"of the host. To manage a service using host credentials you need to\n"
"kinit as the host:\n"
"\n"
" # kinit -kt /etc/krb5.keytab host/ipa.example.com@EXAMPLE.COM\n"
"\n"
"Adding an IPA service allows the associated service to request an SSL\n"
"certificate or keytab, but this is performed as a separate step; they\n"
"are not produced as a result of adding the service.\n"
"\n"
"Only the public aspect of a certificate is stored in a service record;\n"
"the private key is not stored.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new IPA service:\n"
"   ipa service-add HTTP/web.example.com\n"
"\n"
" Allow a host to manage an IPA service certificate:\n"
"   ipa service-add-host --hosts=web.example.com HTTP/web.example.com\n"
"   ipa role-add-member --hosts=web.example.com certadmin\n"
"\n"
" Override a default list of supported PAC types for the service:\n"
"   ipa service-mod HTTP/web.example.com --pac-type=MS-PAC\n"
"\n"
"   A typical use case where overriding the PAC type is needed is NFS.\n"
"   Currently the related code in the Linux kernel can only handle Kerberos\n"
"   tickets up to a maximal size. Since the PAC data can become quite large "
"it\n"
"   is recommended to set --pac-type=NONE for NFS services.\n"
"\n"
" Delete an IPA service:\n"
"   ipa service-del HTTP/web.example.com\n"
"\n"
" Find all IPA services associated with a host:\n"
"   ipa service-find web.example.com\n"
"\n"
" Find all HTTP services:\n"
"   ipa service-find HTTP\n"
"\n"
" Disable the service Kerberos key and SSL certificate:\n"
"   ipa service-disable HTTP/web.example.com\n"
"\n"
" Request a certificate for an IPA service:\n"
"   ipa cert-request --principal=HTTP/web.example.com example.csr\n"
"\n"
" Generate and retrieve a keytab for an IPA service:\n"
"   ipa-getkeytab -s ipa.example.com -p HTTP/web.example.com -k /etc/httpd/"
"httpd.keytab\n"
"\n"
msgstr ""

#: ipalib/plugins/service.py:133
msgid "Requires pre-authentication"
msgstr ""

#: ipalib/plugins/service.py:134
msgid "Pre-authentication is required for the service"
msgstr ""

#: ipalib/plugins/service.py:139
msgid "Trusted for delegation"
msgstr ""

#: ipalib/plugins/service.py:140
msgid "Client credentials may be delegated to the service"
msgstr ""

#: ipalib/plugins/service.py:159
msgid "missing service"
msgstr ""

#: ipalib/plugins/service.py:163
msgid "blank service"
msgstr ""

#: ipalib/plugins/service.py:167
msgid "unable to determine realm"
msgstr ""

#: ipalib/plugins/service.py:240
msgid "This principal is required by the IPA master"
msgstr ""

#: ipalib/plugins/service.py:295
msgid "service"
msgstr ""

#: ipalib/plugins/service.py:296
msgid "services"
msgstr ""

#: ipalib/plugins/service.py:322
msgid "Service principal"
msgstr ""

#: ipalib/plugins/service.py:334
msgid "PAC type"
msgstr ""

#: ipalib/plugins/service.py:335
msgid ""
"Override default list of supported PAC types. Use 'NONE' to disable PAC "
"support for this service, e.g. this might be necessary for NFS services."
msgstr ""

#: ipalib/plugins/service.py:356
msgid "NONE value cannot be combined with other PAC types"
msgstr ""

#: ipalib/plugins/service.py:362
msgid "Add a new IPA new service."
msgstr ""

#: ipalib/plugins/service.py:364
#, python-format
msgid "Added service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:370
msgid "force principal name even if not in DNS"
msgstr ""

#: ipalib/plugins/service.py:384
#, python-format
msgid "The host '%s' does not exist to add a service to."
msgstr ""

#: ipalib/plugins/service.py:424
msgid "Delete an IPA service."
msgstr ""

#: ipalib/plugins/service.py:426
#, python-format
msgid "Deleted service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:469
msgid "Modify an existing IPA service."
msgstr ""

#: ipalib/plugins/service.py:471
#, python-format
msgid "Modified service \"%(value)s\""
msgstr ""

#: ipalib/plugins/service.py:517
msgid "Search for IPA services."
msgstr ""

#: ipalib/plugins/service.py:520
#, python-format
msgid "%(count)d service matched"
msgid_plural "%(count)d services matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/service.py:555
msgid "Display information about an IPA service."
msgstr ""

#: ipalib/plugins/service.py:590
msgid "Add hosts that can manage this service."
msgstr ""

#: ipalib/plugins/service.py:599
msgid "Remove hosts that can manage this service."
msgstr ""

#: ipalib/plugins/service.py:608
msgid "Disable the Kerberos key and SSL certificate of a service."
msgstr ""

#: ipalib/plugins/service.py:611
#, python-format
msgid "Disabled service \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:29
msgid ""
"\n"
"Sudo Commands\n"
"\n"
"Commands used as building blocks for sudo\n"
"\n"
"EXAMPLES:\n"
"\n"
" Create a new command\n"
"   ipa sudocmd-add --desc='For reading log files' /usr/bin/less\n"
"\n"
" Remove a command\n"
"   ipa sudocmd-del /usr/bin/less\n"
"\n"
msgstr ""

#: ipalib/plugins/sudocmd.py:44 ipalib/plugins/sudocmdgroup.py:48
msgid "commands for controlling sudo configuration"
msgstr ""

#: ipalib/plugins/sudocmd.py:51
msgid "sudo command"
msgstr ""

#: ipalib/plugins/sudocmd.py:52
msgid "sudo commands"
msgstr ""

#: ipalib/plugins/sudocmd.py:66
msgid "Sudo Commands"
msgstr ""

#: ipalib/plugins/sudocmd.py:67 ipalib/plugins/sudocmd.py:72
msgid "Sudo Command"
msgstr ""

#: ipalib/plugins/sudocmd.py:78
msgid "A description of this command"
msgstr ""

#: ipalib/plugins/sudocmd.py:101
msgid "Create new Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:103
#, python-format
msgid "Added Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:108
msgid "Delete Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:110
#, python-format
msgid "Deleted Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:141
msgid "Modify Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmd.py:143
#, python-format
msgid "Modified Sudo Command \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmd.py:148
msgid "Search for Sudo Commands."
msgstr ""

#: ipalib/plugins/sudocmd.py:151
#, python-format
msgid "%(count)d Sudo Command matched"
msgid_plural "%(count)d Sudo Commands matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudocmd.py:157
msgid "Display Sudo Command."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:25
msgid ""
"\n"
"Groups of Sudo Commands\n"
"\n"
"Manage groups of Sudo Commands.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new Sudo Command Group:\n"
"   ipa sudocmdgroup-add --desc='administrators commands' admincmds\n"
"\n"
" Remove a Sudo Command Group:\n"
"   ipa sudocmdgroup-del admincmds\n"
"\n"
" Manage Sudo Command Group membership, commands:\n"
"   ipa sudocmdgroup-add-member --sudocmds=/usr/bin/less --sudocmds=/usr/bin/"
"vim admincmds\n"
"\n"
" Manage Sudo Command Group membership, commands:\n"
"   ipa group-remove-member --sudocmds=/usr/bin/less admincmds\n"
"\n"
" Show a Sudo Command Group:\n"
"   ipa group-show localadmins\n"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:55
msgid "sudo command group"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:56
msgid "sudo command groups"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:67 ipalib/plugins/sudocmdgroup.py:72
msgid "Sudo Command Group"
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:95
msgid "Create new Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:97
#, python-format
msgid "Added Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:103
msgid "Delete Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:105
#, python-format
msgid "Deleted Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:111
msgid "Modify Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:113
#, python-format
msgid "Modified Sudo Command Group \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:119
msgid "Search for Sudo Command Groups."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:122
#, python-format
msgid "%(count)d Sudo Command Group matched"
msgid_plural "%(count)d Sudo Command Groups matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudocmdgroup.py:130
msgid "Display Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:136
msgid "Add members to Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudocmdgroup.py:142
msgid "Remove members from Sudo Command Group."
msgstr ""

#: ipalib/plugins/sudorule.py:26
msgid ""
"\n"
"Sudo Rules\n"
"\n"
"Sudo (su \"do\") allows a system administrator to delegate authority to\n"
"give certain users (or groups of users) the ability to run some (or all)\n"
"commands as root or another user while providing an audit trail of the\n"
"commands and their arguments.\n"
"\n"
"FreeIPA provides a means to configure the various aspects of Sudo:\n"
"   Users: The user(s)/group(s) allowed to invoke Sudo.\n"
"   Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke "
"Sudo.\n"
"   Allow Command: The specific command(s) permitted to be run via Sudo.\n"
"   Deny Command: The specific command(s) prohibited to be run via Sudo.\n"
"   RunAsUser: The user(s) or group(s) of users whose rights Sudo will be "
"invoked with.\n"
"   RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.\n"
"   Options: The various Sudoers Options that can modify Sudo's behavior.\n"
"\n"
"An order can be added to a sudorule to control the order in which they\n"
"are evaluated (if the client supports it). This order is an integer and\n"
"must be unique.\n"
"\n"
"FreeIPA provides a designated binddn to use with Sudo located at:\n"
"uid=sudo,cn=sysaccounts,cn=etc,dc=example,dc=com\n"
"\n"
"To enable the binddn run the following command to set the password:\n"
"LDAPTLS_CACERT=/etc/ipa/ca.crt /usr/bin/ldappasswd -S -W -h ipa.example.com -"
"ZZ -D \"cn=Directory Manager\" uid=sudo,cn=sysaccounts,cn=etc,dc=example,"
"dc=com\n"
"\n"
"For more information, see the FreeIPA Documentation to Sudo.\n"
msgstr ""

#: ipalib/plugins/sudorule.py:58
msgid "Commands for controlling sudo configuration"
msgstr ""

#: ipalib/plugins/sudorule.py:61
msgid "this option has been deprecated."
msgstr ""

#: ipalib/plugins/sudorule.py:77
msgid "sudo rule"
msgstr ""

#: ipalib/plugins/sudorule.py:78
msgid "sudo rules"
msgstr ""

#: ipalib/plugins/sudorule.py:100
msgid "Sudo Rules"
msgstr ""

#: ipalib/plugins/sudorule.py:101
msgid "Sudo Rule"
msgstr ""

#: ipalib/plugins/sudorule.py:131
msgid "Command category"
msgstr ""

#: ipalib/plugins/sudorule.py:132
msgid "Command category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:137
msgid "RunAs User category"
msgstr ""

#: ipalib/plugins/sudorule.py:138
msgid "RunAs User category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:143
msgid "RunAs Group category"
msgstr ""

#: ipalib/plugins/sudorule.py:144
msgid "RunAs Group category the rule applies to"
msgstr ""

#: ipalib/plugins/sudorule.py:149
msgid "Sudo order"
msgstr ""

#: ipalib/plugins/sudorule.py:150
msgid "integer to order the Sudo rules"
msgstr ""

#: ipalib/plugins/sudorule.py:171
msgid "Sudo Allow Commands"
msgstr ""

#: ipalib/plugins/sudorule.py:175
msgid "Sudo Deny Commands"
msgstr ""

#: ipalib/plugins/sudorule.py:179
msgid "Sudo Allow Command Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:183
msgid "Sudo Deny Command Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:187
msgid "RunAs Users"
msgstr ""

#: ipalib/plugins/sudorule.py:188
msgid "Run as a user"
msgstr ""

#: ipalib/plugins/sudorule.py:192
msgid "Groups of RunAs Users"
msgstr ""

#: ipalib/plugins/sudorule.py:193
msgid "Run as any user within a specified group"
msgstr ""

#: ipalib/plugins/sudorule.py:198
msgid "External User"
msgstr ""

#: ipalib/plugins/sudorule.py:199
msgid "External User the rule applies to (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:203
msgid "RunAs External User"
msgstr ""

#: ipalib/plugins/sudorule.py:204
msgid "External User the commands can run as (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:208
msgid "RunAs External Group"
msgstr ""

#: ipalib/plugins/sudorule.py:209
msgid "External Group the commands can run as (sudorule-find only)"
msgstr ""

#: ipalib/plugins/sudorule.py:212 ipalib/plugins/sudorule.py:612
#: ipalib/plugins/sudorule.py:665
msgid "Sudo Option"
msgstr ""

#: ipalib/plugins/sudorule.py:216
msgid "RunAs Groups"
msgstr ""

#: ipalib/plugins/sudorule.py:217
msgid "Run with the gid of a specified POSIX group"
msgstr ""

#: ipalib/plugins/sudorule.py:224
#, python-format
msgid "order must be a unique value (%(order)d already used by %(rule)s)"
msgstr ""

#: ipalib/plugins/sudorule.py:246
msgid "Create new Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:255
#, python-format
msgid "Added Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:261
msgid "Delete Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:263
#, python-format
msgid "Deleted Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:269
msgid "Modify Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:271
#, python-format
msgid "Modified Sudo Rule \"%(value)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:294
msgid ""
"command category cannot be set to 'all' while there are allow or deny "
"commands"
msgstr ""

#: ipalib/plugins/sudorule.py:296
msgid "user runAs category cannot be set to 'all' while there are users"
msgstr ""

#: ipalib/plugins/sudorule.py:298
msgid "group runAs category cannot be set to 'all' while there are groups"
msgstr ""

#: ipalib/plugins/sudorule.py:306
msgid "Search for Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:309
#, python-format
msgid "%(count)d Sudo Rule matched"
msgid_plural "%(count)d Sudo Rules matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/sudorule.py:316
msgid "Display Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:322
msgid "Enable a Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:340
#, python-format
msgid "Enabled Sudo Rule \"%s\""
msgstr ""

#: ipalib/plugins/sudorule.py:346
msgid "Disable a Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:364
#, python-format
msgid "Disabled Sudo Rule \"%s\""
msgstr ""

#: ipalib/plugins/sudorule.py:370 ipalib/plugins/sudorule.py:399
msgid "Add commands and sudo command groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:382 ipalib/plugins/sudorule.py:411
msgid "commands cannot be added when command category='all'"
msgstr ""

#: ipalib/plugins/sudorule.py:390 ipalib/plugins/sudorule.py:418
msgid "Remove commands and sudo command groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:427
msgid "Add users and groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:450
msgid "Remove users and groups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:463
msgid "Add hosts and hostgroups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:486
msgid "Remove hosts and hostgroups affected by Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:498
msgid "Add users and groups for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:517 ipalib/plugins/sudorule.py:574
msgid "users cannot be added when runAs user or runAs group category='all'"
msgstr ""

#: ipalib/plugins/sudorule.py:523
#, python-format
msgid "RunAsUser does not accept '%(name)s' as a user name"
msgstr ""

#: ipalib/plugins/sudorule.py:529
#, python-format
msgid "RunAsUser does not accept '%(name)s' as a group name"
msgstr ""

#: ipalib/plugins/sudorule.py:542
msgid "Remove users and groups for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:555
msgid "Add group for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:580
#, python-format
msgid "RunAsGroup does not accept '%(name)s' as a group name"
msgstr ""

#: ipalib/plugins/sudorule.py:593
msgid "Remove group for Sudo to execute as."
msgstr ""

#: ipalib/plugins/sudorule.py:606
msgid "Add an option to the Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:649
#, python-format
msgid "Added option \"%(option)s\" to Sudo Rule \"%(rule)s\""
msgstr ""

#: ipalib/plugins/sudorule.py:659
msgid "Remove an option from Sudo Rule."
msgstr ""

#: ipalib/plugins/sudorule.py:705
#, python-format
msgid "Removed option \"%(option)s\" from Sudo Rule \"%(rule)s\""
msgstr ""

#: ipalib/plugins/trust.py:49
msgid ""
"\n"
"Cross-realm trusts\n"
"\n"
"Manage trust relationship between IPA and Active Directory domains.\n"
"\n"
"In order to allow users from a remote domain to access resources in IPA\n"
"domain, trust relationship needs to be established. Currently IPA supports\n"
"only trusts between IPA and Active Directory domains under control of "
"Windows\n"
"Server 2008 or later, with functional level 2008 or later.\n"
"\n"
"Please note that DNS on both IPA and Active Directory domain sides should "
"be\n"
"configured properly to discover each other. Trust relationship relies on\n"
"ability to discover special resources in the other domain via DNS records.\n"
"\n"
"Examples:\n"
"\n"
"1. Establish cross-realm trust with Active Directory using AD administrator\n"
"   credentials:\n"
"\n"
"   ipa trust-add --type=ad <ad.domain> --admin <AD domain administrator> --"
"password\n"
"\n"
"2. List all existing trust relationships:\n"
"\n"
"   ipa trust-find\n"
"\n"
"3. Show details of the specific trust relationship:\n"
"\n"
"   ipa trust-show <ad.domain>\n"
"\n"
"4. Delete existing trust relationship:\n"
"\n"
"   ipa trust-del <ad.domain>\n"
"\n"
"Once trust relationship is established, remote users will need to be mapped\n"
"to local POSIX groups in order to actually use IPA resources. The mapping "
"should\n"
"be done via use of external membership of non-POSIX group and then this "
"group\n"
"should be included into one of local POSIX groups.\n"
"\n"
"Example:\n"
"\n"
"1. Create group for the trusted domain admins' mapping and their local POSIX "
"group:\n"
"\n"
"   ipa group-add --desc='<ad.domain> admins external map' ad_admins_external "
"--external\n"
"   ipa group-add --desc='<ad.domain> admins' ad_admins\n"
"\n"
"2. Add security identifier of Domain Admins of the <ad.domain> to the "
"ad_admins_external\n"
"   group:\n"
"\n"
"   ipa group-add-member ad_admins_external --external 'AD\\Domain Admins'\n"
"\n"
"3. Allow members of ad_admins_external group to be associated with ad_admins "
"POSIX group:\n"
"\n"
"   ipa group-add-member ad_admins --groups ad_admins_external\n"
"\n"
"4. List members of external members of ad_admins_external group to see their "
"SIDs:\n"
"\n"
"   ipa group-show ad_admins_external\n"
"\n"
"\n"
"GLOBAL TRUST CONFIGURATION\n"
"\n"
"When IPA AD trust subpackage is installed and ipa-adtrust-install is run,\n"
"a local domain configuration (SID, GUID, NetBIOS name) is generated. These\n"
"identifiers are then used when communicating with a trusted domain of the\n"
"particular type.\n"
"\n"
"1. Show global trust configuration for Active Directory type of trusts:\n"
"\n"
"   ipa trustconfig-show --type ad\n"
"\n"
"2. Modify global configuration for all trusts of Active Directory type and "
"set\n"
"   a different fallback primary group (fallback primary group GID is used "
"as\n"
"   a primary user GID if user authenticating to IPA domain does not have any "
"other\n"
"   primary GID already set):\n"
"\n"
"   ipa trustconfig-mod --type ad --fallback-primary-group \"alternative AD "
"group\"\n"
"\n"
"3. Change primary fallback group back to default hidden group (any group "
"with\n"
"   posixGroup object class is allowed):\n"
"\n"
"   ipa trustconfig-mod --type ad --fallback-primary-group \"Default SMB Group"
"\"\n"
msgstr ""

#: ipalib/plugins/trust.py:141
msgid "Non-Active Directory domain"
msgstr ""

#: ipalib/plugins/trust.py:143
msgid "RFC4120-compliant Kerberos realm"
msgstr ""

#: ipalib/plugins/trust.py:144
msgid "Trusting forest"
msgstr ""

#: ipalib/plugins/trust.py:145
msgid "Trusted forest"
msgstr ""

#: ipalib/plugins/trust.py:146
msgid "Two-way trust"
msgstr ""

#: ipalib/plugins/trust.py:147
msgid "Established and verified"
msgstr ""

#: ipalib/plugins/trust.py:148
msgid "Waiting for confirmation by remote side"
msgstr ""

#: ipalib/plugins/trust.py:149
msgid "Unknown"
msgstr ""

#: ipalib/plugins/trust.py:153
msgid "Trust type (ad for Active Directory, default)"
msgstr ""

#: ipalib/plugins/trust.py:197
msgid "trust"
msgstr ""

#: ipalib/plugins/trust.py:198
msgid "trusts"
msgstr ""

#: ipalib/plugins/trust.py:209
msgid "Trust"
msgstr ""

#: ipalib/plugins/trust.py:214 ipa-client/ipa-rmkeytab.c:176
msgid "Realm name"
msgstr ""

#: ipalib/plugins/trust.py:228
msgid "SID blacklist incoming"
msgstr ""

#: ipalib/plugins/trust.py:233
msgid "SID blacklist outgoing"
msgstr ""

#: ipalib/plugins/trust.py:250
#, python-format
msgid "invalid SID: %(value)s"
msgstr ""

#: ipalib/plugins/trust.py:274
msgid ""
"\n"
"Add new trust to use.\n"
"\n"
"This command establishes trust relationship to another domain\n"
"which becomes 'trusted'. As result, users of the trusted domain\n"
"may access resources of this domain.\n"
"\n"
"Only trusts to Active Directory domains are supported right now.\n"
"\n"
"The command can be safely run multiple times against the same domain,\n"
"this will cause change to trust relationship credentials on both\n"
"sides.\n"
"    "
msgstr ""

#: ipalib/plugins/trust.py:298
msgid "Active Directory domain administrator"
msgstr ""

#: ipalib/plugins/trust.py:302
msgid "Active directory domain administrator's password"
msgstr ""

#: ipalib/plugins/trust.py:307
msgid "Domain controller for the Active Directory domain (optional)"
msgstr ""

#: ipalib/plugins/trust.py:311
msgid "Shared secret for the trust"
msgstr ""

#: ipalib/plugins/trust.py:316
msgid "First Posix ID of the range reserved for the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:320
msgid "Size of the ID range reserved for the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:325
msgid "Type of trusted domain ID range, one of {vals}"
msgstr ""

#: ipalib/plugins/trust.py:331
#, python-format
msgid "Added Active Directory trust for realm \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:372 ipalib/plugins/trust.py:414
#: ipalib/plugins/trust.py:434 ipalib/plugins/trust.py:444
#: ipalib/plugins/trust.py:671 ipalib/plugins/trust.py:697
#: ipalib/plugins/trust.py:1230 ipalib/plugins/trust.py:1242
msgid "AD Trust setup"
msgstr ""

#: ipalib/plugins/trust.py:374 ipalib/plugins/trust.py:1232
msgid ""
"Cannot perform join operation without Samba 4 support installed. Make sure "
"you have installed server-trust-ad sub-package of IPA"
msgstr ""

#: ipalib/plugins/trust.py:382
msgid "missing base_id"
msgstr ""

#: ipalib/plugins/trust.py:384
msgid "pysss_murmur is not available on the server and no base-id is given."
msgstr ""

#: ipalib/plugins/trust.py:390 ipalib/plugins/trust.py:394
msgid "trust type"
msgstr ""

#: ipalib/plugins/trust.py:395
msgid "only \"ad\" is supported"
msgstr ""

#: ipalib/plugins/trust.py:405
msgid "Realm-domain mismatch"
msgstr ""

#: ipalib/plugins/trust.py:406
msgid ""
"To estabilish trust with Active Directory, the domain name and the realm "
"name of the IPA server must match"
msgstr ""

#: ipalib/plugins/trust.py:436
msgid "Trusted domain and administrator account use different realms"
msgstr ""

#: ipalib/plugins/trust.py:445
msgid "Realm administrator password should be specified"
msgstr ""

#: ipalib/plugins/trust.py:466
msgid "id range type"
msgstr ""

#: ipalib/plugins/trust.py:468
msgid ""
"Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-"
"type when adding an AD trust."
msgstr ""

#: ipalib/plugins/trust.py:478
msgid "id range"
msgstr ""

#: ipalib/plugins/trust.py:480
msgid ""
"An id range already exists for this trust. You should either delete the old "
"range, or exclude --base-id/--range-size options from the command."
msgstr ""

#: ipalib/plugins/trust.py:502
msgid "range exists"
msgstr ""

#: ipalib/plugins/trust.py:504
msgid ""
"ID range with the same name but different domain SID already exists. The ID "
"range for the new trusted domain must be created manually."
msgstr ""

#: ipalib/plugins/trust.py:511
msgid "range type change"
msgstr ""

#: ipalib/plugins/trust.py:512
msgid ""
"ID range for the trusted domain already exists, but it has a different type. "
"Please remove the old range manually, or do not enforce type via --range-"
"type option."
msgstr ""

#: ipalib/plugins/trust.py:631
#, python-format
msgid "Re-established trust to domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:646
#, python-format
msgid "Unable to resolve domain controller for '%s' domain. "
msgstr ""

#: ipalib/plugins/trust.py:652
msgid ""
"Forward policy is defined for it in IPA DNS, perhaps forwarder points to "
"incorrect host?"
msgstr ""

#: ipalib/plugins/trust.py:655
#, python-format
msgid ""
"IPA manages DNS, please verify your DNS configuration and make sure that "
"service records of the '%(domain)s' domain can be resolved. Examples how to "
"configure DNS with CLI commands or the Web UI can be found in the "
"documentation. "
msgstr ""

#: ipalib/plugins/trust.py:665
#, python-format
msgid ""
"Since IPA does not manage DNS records, ensure DNS is configured to resolve "
"'%(domain)s' domain from IPA hosts and back."
msgstr ""

#: ipalib/plugins/trust.py:672
msgid "Unable to verify write permissions to the AD"
msgstr ""

#: ipalib/plugins/trust.py:698
msgid "Not enough arguments specified to perform trust setup"
msgstr ""

#: ipalib/plugins/trust.py:701
msgid "Delete a trust."
msgstr ""

#: ipalib/plugins/trust.py:703
#, python-format
msgid "Deleted trust \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:706
msgid ""
"\n"
"    Modify a trust (for future use).\n"
"\n"
"    Currently only the default option to modify the LDAP attributes is\n"
"    available. More specific options will be added in coming releases.\n"
"    "
msgstr ""

#: ipalib/plugins/trust.py:713
#, python-format
msgid "Modified trust \"%(value)s\" (change will be effective in 60 seconds)"
msgstr ""

#: ipalib/plugins/trust.py:724
msgid "Search for trusts."
msgstr ""

#: ipalib/plugins/trust.py:729
#, python-format
msgid "%(count)d trust matched"
msgid_plural "%(count)d trusts matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/trust.py:755
msgid "Display information about a trust."
msgstr ""

#: ipalib/plugins/trust.py:792
msgid "trust configuration"
msgstr ""

#: ipalib/plugins/trust.py:798 ipalib/plugins/trust.py:799
msgid "Global Trust Configuration"
msgstr ""

#: ipalib/plugins/trust.py:807
msgid "Security Identifier"
msgstr ""

#: ipalib/plugins/trust.py:811
msgid "NetBIOS name"
msgstr ""

#: ipalib/plugins/trust.py:815
msgid "Domain GUID"
msgstr ""

#: ipalib/plugins/trust.py:820
msgid "Fallback primary group"
msgstr ""

#: ipalib/plugins/trust.py:832
msgid "unsupported trust type"
msgstr ""

#: ipalib/plugins/trust.py:895
msgid "Modify global trust configuration."
msgstr ""

#: ipalib/plugins/trust.py:898
#, python-format
msgid "Modified \"%(value)s\" trust configuration"
msgstr ""

#: ipalib/plugins/trust.py:917
msgid "Show global trust configuration."
msgstr ""

#: ipalib/plugins/trust.py:943
msgid "Resolve security identifiers of users and groups in trusted domains"
msgstr ""

#: ipalib/plugins/trust.py:947
msgid "Security Identifiers (SIDs)"
msgstr ""

#: ipalib/plugins/trust.py:953
msgid "Name"
msgstr ""

#: ipalib/plugins/trust.py:954
msgid "SID"
msgstr ""

#: ipalib/plugins/trust.py:985
msgid "Determine whether ipa-adtrust-install has been run on this system"
msgstr ""

#: ipalib/plugins/trust.py:1012
msgid ""
"Determine whether Schema Compatibility plugin is configured to serve trusted "
"domain users and groups"
msgstr ""

#: ipalib/plugins/trust.py:1065
msgid "Determine whether ipa-adtrust-install has been run with sidgen task"
msgstr ""

#: ipalib/plugins/trust.py:1081
msgid "sidgen_was_run"
msgstr ""

#: ipalib/plugins/trust.py:1083
msgid ""
"This command relies on the existence of the \"editors\" group, but this "
"group was not found."
msgstr ""

#: ipalib/plugins/trust.py:1102
msgid "trust domain"
msgstr ""

#: ipalib/plugins/trust.py:1103
msgid "trust domains"
msgstr ""

#: ipalib/plugins/trust.py:1108
msgid "Trusted domains"
msgstr ""

#: ipalib/plugins/trust.py:1109
msgid "Trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:1113
msgid "Domain name"
msgstr ""

#: ipalib/plugins/trust.py:1126
msgid "Trusted domain partner"
msgstr ""

#: ipalib/plugins/trust.py:1146
msgid "Search domains of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1153
msgid "Modify trustdomain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1160
msgid "Allow access from the trusted domain"
msgstr ""

#: ipalib/plugins/trust.py:1171
msgid "Remove infromation about the domain associated with the trust."
msgstr ""

#: ipalib/plugins/trust.py:1173
#, python-format
msgid "Removed information about the trusted domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1182
msgid ""
"cannot delete root domain of the trust, use trust-del to delete the trust "
"itself"
msgstr ""

#: ipalib/plugins/trust.py:1223
msgid "Refresh list of the domains associated with the trust"
msgstr ""

#: ipalib/plugins/trust.py:1253
msgid "List of trust domains successfully refreshed"
msgstr ""

#: ipalib/plugins/trust.py:1255
msgid "No new trust domains were found"
msgstr ""

#: ipalib/plugins/trust.py:1265
msgid "Allow use of IPA resources by the domain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1268
#, python-format
msgid "Enabled trust domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1275
msgid "Root domain of the trust is always enabled for the existing trust"
msgstr ""

#: ipalib/plugins/trust.py:1305
msgid "Disable use of IPA resources by the domain of the trust"
msgstr ""

#: ipalib/plugins/trust.py:1308
#, python-format
msgid "Disabled trust domain \"%(value)s\""
msgstr ""

#: ipalib/plugins/trust.py:1315
msgid ""
"cannot disable root domain of the trust, use trust-del to delete the trust "
"itself"
msgstr ""

#: ipalib/plugins/user.py:41
msgid ""
"\n"
"Users\n"
"\n"
"Manage user entries. All users are POSIX users.\n"
"\n"
"IPA supports a wide range of username formats, but you need to be aware of "
"any\n"
"restrictions that may apply to your particular environment. For example,\n"
"usernames that start with a digit or usernames that exceed a certain length\n"
"may cause problems for some UNIX systems.\n"
"Use 'ipa config-mod' to change the username format allowed by IPA tools.\n"
"\n"
"Disabling a user account prevents that user from obtaining new Kerberos\n"
"credentials. It does not invalidate any credentials that have already\n"
"been issued.\n"
"\n"
"Password management is not a part of this module. For more information\n"
"about this topic please see: ipa help passwd\n"
"\n"
"Account lockout on password failure happens per IPA master. The user-status\n"
"command can be used to identify which master the user is locked out on.\n"
"It is on that master the administrator must unlock the user.\n"
"\n"
"EXAMPLES:\n"
"\n"
" Add a new user:\n"
"   ipa user-add --first=Tim --last=User --password tuser1\n"
"\n"
" Find all users whose entries include the string \"Tim\":\n"
"   ipa user-find Tim\n"
"\n"
" Find all users with \"Tim\" as the first name:\n"
"   ipa user-find --first=Tim\n"
"\n"
" Disable a user account:\n"
"   ipa user-disable tuser1\n"
"\n"
" Enable a user account:\n"
"   ipa user-enable tuser1\n"
"\n"
" Delete a user:\n"
"   ipa user-del tuser1\n"
msgstr ""

#: ipalib/plugins/user.py:89
msgid "Kerberos keys available"
msgstr ""

#: ipalib/plugins/user.py:98
msgid "Server"
msgstr ""

#: ipalib/plugins/user.py:101
msgid "Failed logins"
msgstr ""

#: ipalib/plugins/user.py:104
msgid "Last successful authentication"
msgstr ""

#: ipalib/plugins/user.py:107
msgid "Last failed authentication"
msgstr ""

#: ipalib/plugins/user.py:110
msgid "Time now"
msgstr ""

#: ipalib/plugins/user.py:125
msgid "must be TRUE or FALSE"
msgstr ""

#: ipalib/plugins/user.py:197
msgid "user"
msgstr ""

#: ipalib/plugins/user.py:198
msgid "users"
msgstr ""

#: ipalib/plugins/user.py:234
msgid "User login"
msgstr ""

#: ipalib/plugins/user.py:241
msgid "First name"
msgstr ""

#: ipalib/plugins/user.py:245
msgid "Last name"
msgstr ""

#: ipalib/plugins/user.py:248
msgid "Full name"
msgstr ""

#: ipalib/plugins/user.py:253
msgid "Display name"
msgstr ""

#: ipalib/plugins/user.py:258
msgid "Initials"
msgstr ""

#: ipalib/plugins/user.py:264
msgid "Home directory"
msgstr ""

#: ipalib/plugins/user.py:267
msgid "GECOS"
msgstr ""

#: ipalib/plugins/user.py:273
msgid "Login shell"
msgstr ""

#: ipalib/plugins/user.py:277
msgid "Kerberos principal"
msgstr ""

#: ipalib/plugins/user.py:285
msgid "Email address"
msgstr ""

#: ipalib/plugins/user.py:290
msgid "Prompt to set the user password"
msgstr ""

#: ipalib/plugins/user.py:296
msgid "Generate a random user password"
msgstr ""

#: ipalib/plugins/user.py:306
msgid "UID"
msgstr ""

#: ipalib/plugins/user.py:307
msgid "User ID Number (system will assign one if not provided)"
msgstr ""

#: ipalib/plugins/user.py:312
msgid "Group ID Number"
msgstr ""

#: ipalib/plugins/user.py:317
msgid "Street address"
msgstr ""

#: ipalib/plugins/user.py:321
msgid "City"
msgstr ""

#: ipalib/plugins/user.py:325
msgid "State/Province"
msgstr ""

#: ipalib/plugins/user.py:328
msgid "ZIP"
msgstr ""

#: ipalib/plugins/user.py:332
msgid "Telephone Number"
msgstr ""

#: ipalib/plugins/user.py:335
msgid "Mobile Telephone Number"
msgstr ""

#: ipalib/plugins/user.py:338
msgid "Pager Number"
msgstr ""

#: ipalib/plugins/user.py:342
msgid "Fax Number"
msgstr ""

#: ipalib/plugins/user.py:346
msgid "Org. Unit"
msgstr ""

#: ipalib/plugins/user.py:349
msgid "Job Title"
msgstr ""

#: ipalib/plugins/user.py:352
msgid "Manager"
msgstr ""

#: ipalib/plugins/user.py:355
msgid "Car License"
msgstr ""

#: ipalib/plugins/user.py:358
msgid "Account disabled"
msgstr ""

#: ipalib/plugins/user.py:385 ipalib/plugins/user.py:389
#, python-format
msgid "invalid e-mail format: %(email)s"
msgstr ""

#: ipalib/plugins/user.py:415
#, python-format
msgid "manager %(manager)s not found"
msgstr ""

#: ipalib/plugins/user.py:434
msgid "Add a new user."
msgstr ""

#: ipalib/plugins/user.py:436
#, python-format
msgid "Added user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:443
msgid "Don't create user private group"
msgstr ""

#: ipalib/plugins/user.py:487 ipalib/plugins/user.py:623
#, python-format
msgid "can be at most %(len)d characters"
msgstr ""

#: ipalib/plugins/user.py:522
msgid "Default group for new users is not POSIX"
msgstr ""

#: ipalib/plugins/user.py:596
msgid "Delete a user."
msgstr ""

#: ipalib/plugins/user.py:598
#, python-format
msgid "Deleted user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:609
msgid "Modify a user."
msgstr ""

#: ipalib/plugins/user.py:611
#, python-format
msgid "Modified user \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:664
msgid "Search for users."
msgstr ""

#: ipalib/plugins/user.py:671
msgid "Self"
msgstr ""

#: ipalib/plugins/user.py:672
msgid "Display user record for current Kerberos principal"
msgstr ""

#: ipalib/plugins/user.py:703
#, python-format
msgid "%(count)d user matched"
msgid_plural "%(count)d users matched"
msgstr[0] ""
msgstr[1] ""

#: ipalib/plugins/user.py:710
msgid "Display information about a user."
msgstr ""

#: ipalib/plugins/user.py:726
msgid "Disable a user account."
msgstr ""

#: ipalib/plugins/user.py:729
#, python-format
msgid "Disabled user account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:748
msgid "Enable a user account."
msgstr ""

#: ipalib/plugins/user.py:752
#, python-format
msgid "Enabled user account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:769
msgid ""
"\n"
"    Unlock a user account\n"
"\n"
"    An account may become locked if the password is entered incorrectly too\n"
"    many times within a specific time period as controlled by password\n"
"    policy. A locked account is a temporary condition and may be unlocked "
"by\n"
"    an administrator."
msgstr ""

#: ipalib/plugins/user.py:778
#, python-format
msgid "Unlocked account \"%(value)s\""
msgstr ""

#: ipalib/plugins/user.py:794
msgid ""
"\n"
"    Lockout status of a user account\n"
"\n"
"    An account may become locked if the password is entered incorrectly too\n"
"    many times within a specific time period as controlled by password\n"
"    policy. A locked account is a temporary condition and may be unlocked "
"by\n"
"    an administrator.\n"
"\n"
"    This connects to each IPA master and displays the lockout status on\n"
"    each one.\n"
"\n"
"    To determine whether an account is locked on a given server you need\n"
"    to compare the number of failed logins and the time of the last "
"failure.\n"
"    For an account to be locked it must exceed the maxfail failures within\n"
"    the failinterval duration as specified in the password policy "
"associated\n"
"    with the user.\n"
"\n"
"    The failed login counter is modified only when a user attempts a log in\n"
"    so it is possible that an account may appear locked but the last failed\n"
"    login attempt is older than the lockouttime of the password policy. "
"This\n"
"    means that the user may attempt a login again. "
msgstr ""

#: ipalib/plugins/user.py:852
#, python-format
msgid "%(host)s failed: %(error)s"
msgstr ""

#: ipalib/plugins/user.py:888
#, python-format
msgid "%(host)s failed"
msgstr ""

#: ipalib/plugins/user.py:898
#, python-format
msgid "Account disabled: %(disabled)s"
msgstr ""

#: ipalib/plugins/virtual.py:52
msgid "operation not defined"
msgstr ""

#: ipalib/plugins/virtual.py:65
msgid "not allowed to perform this command"
msgstr ""

#: ipalib/plugins/virtual.py:67
msgid "No such virtual command"
msgstr ""

#: ipalib/rpc.py:673
msgid "any of the configured servers"
msgstr ""

#: ipalib/session.py:776 ipalib/session.py:879
msgid "could not allocate unique new session_id"
msgstr ""

#: ipalib/util.py:186
msgid "Filename is empty"
msgstr ""

#: ipalib/util.py:190
#, python-format
msgid "Permission denied: %(file)s"
msgstr ""

#: ipalib/util.py:228
msgid "empty DNS label"
msgstr ""

#: ipalib/util.py:231
msgid "DNS label cannot be longer that 63 characters"
msgstr ""

#: ipalib/util.py:234
#, python-format
msgid ""
"only letters, numbers,%(underscore)s and - are allowed. DNS label may not "
"start or end with -"
msgstr ""

#: ipalib/util.py:252
msgid ""
"mail account may only include letters, numbers, -, _ and a dot. There may "
"not be consecutive -, _ and . characters. Its parts may not start or end "
"with - or _"
msgstr ""

#: ipalib/util.py:258 ipalib/util.py:297
msgid "cannot be longer that 255 characters"
msgstr ""

#: ipalib/util.py:266
msgid "too many '@' characters"
msgstr ""

#: ipalib/util.py:279
msgid "missing address domain"
msgstr ""

#: ipalib/util.py:284
msgid "missing mail account"
msgstr ""

#: ipalib/util.py:303
msgid "hostname contains empty label (consecutive dots)"
msgstr ""

#: ipalib/util.py:307
msgid "not fully qualified"
msgstr ""

#: ipalib/util.py:319 ipalib/util.py:325
msgid "invalid SSH public key"
msgstr ""

#: ipalib/util.py:328
msgid "options are not allowed"
msgstr ""

#: ipalib/x509.py:207
msgid "improperly formatted DER-encoded certificate"
msgstr ""

#: ipalib/x509.py:244
#, python-format
msgid "Issuer \"%(issuer)s\" does not match the expected issuer"
msgstr ""

#: ipapython/dogtag.py:176
#, python-format
msgid "Retrieving CA cert chain failed: %s"
msgstr ""

#: ipapython/dogtag.py:182
#, python-format
msgid "request failed with HTTP status %d"
msgstr ""

#: ipapython/dogtag.py:205 ipapython/dogtag.py:212
#, python-format
msgid "Retrieving CA status failed: %s"
msgstr ""

#: ipapython/ipaldap.py:1000
#, python-format
msgid "objectclass %s not found"
msgstr ""

#: ipaserver/dcerpc.py:59
msgid ""
"\n"
"Classes to manage trust joins using DCE-RPC calls\n"
"\n"
"The code in this module relies heavily on samba4-python package\n"
"and Samba4 python bindings.\n"
msgstr ""

#: ipaserver/dcerpc.py:76
msgid "CIFS server denied your credentials"
msgstr ""

#: ipaserver/dcerpc.py:79
msgid "communication with CIFS server was unsuccessful"
msgstr ""

#: ipaserver/dcerpc.py:84
msgid "AD domain controller"
msgstr ""

#: ipaserver/dcerpc.py:84
msgid "unsupported functional level"
msgstr ""

#: ipaserver/dcerpc.py:89
msgid "Cannot find specified domain or server name"
msgstr ""

#: ipaserver/dcerpc.py:91
msgid "At least the domain or IP address should be specified"
msgstr ""

#: ipaserver/dcerpc.py:103
#, python-format
msgid ""
"CIFS server communication error: code \"%(num)s\",\n"
"                  message \"%(message)s\" (both may be \"None\")"
msgstr ""

#: ipaserver/dcerpc.py:203
msgid "no trusted domain is configured"
msgstr ""

#: ipaserver/dcerpc.py:210
msgid "domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:217
msgid "SID is not valid"
msgstr ""

#: ipaserver/dcerpc.py:232
msgid "SID does not match exactlywith any trusted domain's SID"
msgstr ""

#: ipaserver/dcerpc.py:243
msgid "SID does not match any trusted domain"
msgstr ""

#: ipaserver/dcerpc.py:283 ipaserver/dcerpc.py:289 ipaserver/dcerpc.py:511
msgid "Trust setup"
msgstr ""

#: ipaserver/dcerpc.py:284
msgid "Our domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:290
msgid "No trusted domain is not configured"
msgstr ""

#: ipaserver/dcerpc.py:295 ipaserver/dcerpc.py:310 ipaserver/dcerpc.py:327
#: ipaserver/dcerpc.py:339 ipaserver/dcerpc.py:346 ipaserver/dcerpc.py:391
msgid "trusted domain object"
msgstr ""

#: ipaserver/dcerpc.py:296
msgid "domain is not trusted"
msgstr ""

#: ipaserver/dcerpc.py:311
msgid "no trusted domain matched the specified flat name"
msgstr ""

#: ipaserver/dcerpc.py:313
msgid "trusted domain object not found"
msgstr ""

#: ipaserver/dcerpc.py:328 ipaserver/dcerpc.py:392
msgid "Ambiguous search, user domain was not specified"
msgstr ""

#: ipaserver/dcerpc.py:340
msgid "Trusted domain did not return a unique object"
msgstr ""

#: ipaserver/dcerpc.py:347
msgid "Trusted domain did not return a valid SID for the object"
msgstr ""

#: ipaserver/dcerpc.py:377 ipaserver/dcerpc.py:387
msgid "trusted domain user not found"
msgstr ""

#: ipaserver/dcerpc.py:512
msgid "Cannot retrieve trusted domain GC list"
msgstr ""

#: ipaserver/dcerpc.py:648
msgid "CIFS credentials object"
msgstr ""

#: ipaserver/dcerpc.py:681
#, python-format
msgid "CIFS server %(host)s denied your credentials"
msgstr ""

#: ipaserver/dcerpc.py:685
#, python-format
msgid "Cannot establish LSA connection to %(host)s. Is CIFS server running?"
msgstr ""

#: ipaserver/dcerpc.py:874
#, python-format
msgid ""
"the IPA server and the remote domain cannot share the same NetBIOS name: %s"
msgstr ""

#: ipaserver/install/certs.py:640
#, python-format
msgid "Unable to communicate with CMS (%s)"
msgstr ""

#: ipaserver/plugins/dogtag.py:1252
msgid "Unable to communicate with CMS"
msgstr ""

#: ipaserver/plugins/dogtag.py:1834
msgid "find not supported on CAs upgraded from 9 to 10"
msgstr ""

#: ipaserver/plugins/join.py:59
msgid "The hostname to register as"
msgstr ""

#: ipaserver/plugins/join.py:68
msgid "The IPA realm"
msgstr ""

#: ipaserver/plugins/join.py:74
msgid "Hardware platform of the host (e.g. Lenovo T61)"
msgstr ""

#: ipaserver/plugins/join.py:78
msgid "Operating System and version of the host (e.g. Fedora 9)"
msgstr ""

#: ipaserver/plugins/join.py:118
#, python-format
msgid ""
"Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry "
"'%s'."
msgstr ""

#: ipaserver/rpcserver.py:538
msgid "Request must be a dict"
msgstr ""

#: ipaserver/rpcserver.py:540
msgid "Request is missing \"method\""
msgstr ""

#: ipaserver/rpcserver.py:542
msgid "Request is missing \"params\""
msgstr ""

#: ipaserver/rpcserver.py:548
msgid "params must be a list"
msgstr ""

#: ipaserver/rpcserver.py:550
msgid "params must contain [args, options]"
msgstr ""

#: ipaserver/rpcserver.py:553
msgid "params[0] (aka args) must be a list"
msgstr ""

#: ipaserver/rpcserver.py:556
msgid "params[1] (aka options) must be a dict"
msgstr ""

#: ipa-client/config.c:56
#, c-format
msgid "cannot open configuration file %s\n"
msgstr ""

#: ipa-client/config.c:63
#, c-format
msgid "cannot stat() configuration file %s\n"
msgstr ""

#: ipa-client/config.c:69
#, c-format
msgid "out of memory\n"
msgstr ""

#: ipa-client/config.c:80
#, c-format
msgid "read error\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:61
#, c-format
msgid "Kerberos context initialization failed: %1$s (%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:72
#, c-format
msgid "Unable to parse principal: %1$s (%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:127
#, c-format
msgid "No keys accepted by KDC\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:142
#, c-format
msgid "Out of memory \n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:181
#, c-format
msgid "Out of Memory!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:188
#, c-format
msgid "Failed to create control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:212
#, c-format
msgid "Unable to initialize ldap library!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:220 ipa-client/ipa-join.c:240
#, c-format
msgid "Unable to set LDAP_OPT_X_SASL_NOCANON\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:228
#, c-format
msgid "Unable to set ldap options!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:241
#, c-format
msgid "Simple bind failed\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:273 ipa-client/ipa-getkeytab.c:286
#: ipa-client/ipa-getkeytab.c:293 ipa-client/ipa-getkeytab.c:300
#, c-format
msgid "Operation failed! %s\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:306 ipa-client/ipa-getkeytab.c:316
#, c-format
msgid "Missing reply control!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:323
#, c-format
msgid "ber_init() failed, Invalid control ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:342
#, c-format
msgid "ber_scanf() failed, unable to find kvno ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:354
#, c-format
msgid "Failed to retrieve encryption type type #%d\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:358
#, c-format
msgid "Failed to retrieve encryption type %1$s (#%2$d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:368
#, c-format
msgid "Failed to retrieve any keys"
msgstr ""

#: ipa-client/ipa-getkeytab.c:405
msgid "New Principal Password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:411
msgid "Verify Principal Password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:445
msgid "Print as little as possible"
msgstr ""

#: ipa-client/ipa-getkeytab.c:445
msgid "Output only on errors"
msgstr ""

#: ipa-client/ipa-getkeytab.c:447
msgid "Contact this specific KDC Server"
msgstr ""

#: ipa-client/ipa-getkeytab.c:448
msgid "Server Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:450 ipa-client/ipa-rmkeytab.c:171
msgid "The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM)"
msgstr ""

#: ipa-client/ipa-getkeytab.c:451 ipa-client/ipa-rmkeytab.c:172
msgid "Kerberos Service Principal Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:453 ipa-client/ipa-rmkeytab.c:174
msgid "File were to store the keytab information"
msgstr ""

#: ipa-client/ipa-getkeytab.c:454 ipa-client/ipa-rmkeytab.c:174
msgid "Keytab File Name"
msgstr ""

#: ipa-client/ipa-getkeytab.c:456
msgid "Encryption types to request"
msgstr ""

#: ipa-client/ipa-getkeytab.c:457
msgid "Comma separated encryption types list"
msgstr ""

#: ipa-client/ipa-getkeytab.c:459
msgid "Show the list of permitted encryption types and exit"
msgstr ""

#: ipa-client/ipa-getkeytab.c:460
msgid "Permitted Encryption Types"
msgstr ""

#: ipa-client/ipa-getkeytab.c:462
msgid "Asks for a non-random password to use for the principal"
msgstr ""

#: ipa-client/ipa-getkeytab.c:464
msgid "LDAP DN"
msgstr ""

#: ipa-client/ipa-getkeytab.c:464
msgid "DN to bind as if not using kerberos"
msgstr ""

#: ipa-client/ipa-getkeytab.c:466
msgid "LDAP password"
msgstr ""

#: ipa-client/ipa-getkeytab.c:466
msgid "password to use if not using kerberos"
msgstr ""

#: ipa-client/ipa-getkeytab.c:491 ipa-client/ipa-rmkeytab.c:190
#, c-format
msgid "Kerberos context initialization failed\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:504 util/ipa_krb5.c:792
#, c-format
msgid "No system preferred enctypes ?!\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:507
#, c-format
msgid "Supported encryption types:\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:511
#, c-format
msgid "Warning: failed to convert type (#%d)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:530
#, c-format
msgid "Bind password required when using a bind DN.\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:543
#, c-format
msgid ""
"Warning: salt types are not honored with randomized passwords (see opt. -P)\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:555
#, c-format
msgid "Invalid Service Principal Name\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:563
#, c-format
msgid "Kerberos Credential Cache not found. Do you have a Kerberos Ticket?\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:571
#, c-format
msgid ""
"Kerberos User Principal not found. Do you have a valid Credential Cache?\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:579
#, c-format
msgid "Failed to open Keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:589
#, c-format
msgid "Failed to create key material\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:608
#, c-format
msgid "Failed to add key to the keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:617
#, c-format
msgid "Failed to close the keytab\n"
msgstr ""

#: ipa-client/ipa-getkeytab.c:623
#, c-format
msgid "Keytab successfully retrieved and stored in: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:65
#, c-format
msgid "No permission to join this host to the IPA domain.\n"
msgstr ""

#: ipa-client/ipa-join.c:94 ipa-client/ipa-join.c:106
#, c-format
msgid "No write permissions on keytab file '%s'\n"
msgstr ""

#: ipa-client/ipa-join.c:111
#, c-format
msgid "access() on %1$s failed: errno = %2$d\n"
msgstr ""

#: ipa-client/ipa-join.c:134 ipa-client/ipa-join.c:163
#: ipa-client/ipa-join.c:220
#, c-format
msgid "Out of memory!"
msgstr ""

#: ipa-client/ipa-join.c:227
#, c-format
msgid "Unable to initialize connection to ldap server: %s"
msgstr ""

#: ipa-client/ipa-join.c:233
#, c-format
msgid "Unable to enable SSL in LDAP\n"
msgstr ""

#: ipa-client/ipa-join.c:246
#, c-format
msgid "Unable to set LDAP version\n"
msgstr ""

#: ipa-client/ipa-join.c:266
#, c-format
msgid "Bind failed: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:337
#, c-format
msgid "Search for %1$s on rootdse failed with error %2$d\n"
msgstr ""

#: ipa-client/ipa-join.c:357 ipa-client/ipa-join.c:428
#, c-format
msgid "No values for %s"
msgstr ""

#: ipa-client/ipa-join.c:367
#, c-format
msgid "Search for IPA namingContext failed with error %d\n"
msgstr ""

#: ipa-client/ipa-join.c:373
#, c-format
msgid "IPA namingContext not found\n"
msgstr ""

#: ipa-client/ipa-join.c:408 ipa-client/ipa-join.c:483
#: ipa-client/ipa-join.c:501 ipa-client/ipa-join.c:602
#: ipa-client/ipa-join.c:808 ipa-client/ipa-join.c:869 util/ipa_krb5.c:973
#: util/ipa_krb5.c:1007
#, c-format
msgid "Out of memory!\n"
msgstr ""

#: ipa-client/ipa-join.c:419
#, c-format
msgid "Search for ipaCertificateSubjectBase failed with error %d"
msgstr ""

#: ipa-client/ipa-join.c:490
#, c-format
msgid "Unable to determine root DN of %s\n"
msgstr ""

#: ipa-client/ipa-join.c:508
#, c-format
msgid "Incorrect password.\n"
msgstr ""

#: ipa-client/ipa-join.c:516
#, c-format
msgid "Unable to determine certificate subject of %s\n"
msgstr ""

#: ipa-client/ipa-join.c:532
#, c-format
msgid "Enrollment failed. %s\n"
msgstr ""

#: ipa-client/ipa-join.c:661
#, c-format
msgid "principal not found in XML-RPC response\n"
msgstr ""

#: ipa-client/ipa-join.c:676
#, c-format
msgid "Host is already joined.\n"
msgstr ""

#: ipa-client/ipa-join.c:751 ipa-client/ipa-join.c:955
#, c-format
msgid "Unable to determine IPA server from %s\n"
msgstr ""

#: ipa-client/ipa-join.c:772 ipa-client/ipa-join.c:970
#, c-format
msgid "The hostname must be fully-qualified: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:781 ipa-client/ipa-join.c:986
#, c-format
msgid "Unable to join host: Kerberos context initialization failed\n"
msgstr ""

#: ipa-client/ipa-join.c:789
#, c-format
msgid "Error resolving keytab: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:798
#, c-format
msgid "Error getting default Kerberos realm: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:816
#, c-format
msgid "Error parsing \"%1$s\": %2$s.\n"
msgstr ""

#: ipa-client/ipa-join.c:834
#, c-format
msgid "Error obtaining initial credentials: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:845
#, c-format
msgid "Unable to generate Kerberos Credential Cache\n"
msgstr ""

#: ipa-client/ipa-join.c:853
#, c-format
msgid "Error storing creds in credential cache: %s.\n"
msgstr ""

#: ipa-client/ipa-join.c:900
#, c-format
msgid "Unenrollment successful.\n"
msgstr ""

#: ipa-client/ipa-join.c:903
#, c-format
msgid "Unenrollment failed.\n"
msgstr ""

#: ipa-client/ipa-join.c:908
#, c-format
msgid "result not found in XML-RPC response\n"
msgstr ""

#: ipa-client/ipa-join.c:976
#, c-format
msgid "The hostname must not be: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:993
#, c-format
msgid "Unable to join host: Kerberos Credential Cache not found\n"
msgstr ""

#: ipa-client/ipa-join.c:1001
#, c-format
msgid ""
"Unable to join host: Kerberos User Principal not found and host password not "
"provided.\n"
msgstr ""

#: ipa-client/ipa-join.c:1016
#, c-format
msgid "fork() failed\n"
msgstr ""

#: ipa-client/ipa-join.c:1045
#, c-format
msgid "ipa-getkeytab not found\n"
msgstr ""

#: ipa-client/ipa-join.c:1048
#, c-format
msgid "ipa-getkeytab has bad permissions?\n"
msgstr ""

#: ipa-client/ipa-join.c:1051
#, c-format
msgid "executing ipa-getkeytab failed, errno %d\n"
msgstr ""

#: ipa-client/ipa-join.c:1063
#, c-format
msgid "child exited with %d\n"
msgstr ""

#: ipa-client/ipa-join.c:1069
#, c-format
msgid "Certificate subject base is: %s\n"
msgstr ""

#: ipa-client/ipa-join.c:1107
msgid "Print the raw XML-RPC output in GSSAPI mode"
msgstr ""

#: ipa-client/ipa-join.c:1109
msgid "Quiet mode. Only errors are displayed."
msgstr ""

#: ipa-client/ipa-join.c:1111
msgid "Unenroll this host from IPA server"
msgstr ""

#: ipa-client/ipa-join.c:1113
msgid "Hostname of this server"
msgstr ""

#: ipa-client/ipa-join.c:1113 ipa-client/ipa-join.c:1115
msgid "hostname"
msgstr ""

#: ipa-client/ipa-join.c:1115
msgid "IPA Server to use"
msgstr ""

#: ipa-client/ipa-join.c:1117
msgid "Specifies where to store keytab information."
msgstr ""

#: ipa-client/ipa-join.c:1117
msgid "filename"
msgstr ""

#: ipa-client/ipa-join.c:1119
msgid "Force the host join. Rejoin even if already joined."
msgstr ""

#: ipa-client/ipa-join.c:1121
msgid "LDAP password (if not using Kerberos)"
msgstr ""

#: ipa-client/ipa-join.c:1121
msgid "password"
msgstr ""

#: ipa-client/ipa-join.c:1123
msgid "LDAP basedn"
msgstr ""

#: ipa-client/ipa-join.c:1123
msgid "basedn"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:43
#, c-format
msgid "Unable to parse principal name\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:45
#, c-format
msgid "krb5_parse_name %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:55
#, c-format
msgid "Removing principal %s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:68
#, c-format
msgid "Failed to open keytab\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:72
#, c-format
msgid "principal not found\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:74
#, c-format
msgid "krb5_kt_get_entry %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:82
#, c-format
msgid "Unable to remove entry\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:84
#, c-format
msgid "kvno %d\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:85
#, c-format
msgid "krb5_kt_remove_entry %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:119
#, c-format
msgid "Unable to parse principal\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:121
#, c-format
msgid "krb5_unparse_name %1$d: %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:143
#, c-format
msgid "realm not found\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:169
msgid "Print debugging information"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:169
msgid "Debugging output"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:176
msgid "Remove all principals in this realm"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:230 ipa-client/ipa-rmkeytab.c:237
#, c-format
msgid "Failed to open keytab '%1$s': %2$s\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:253
#, c-format
msgid "Closing keytab failed\n"
msgstr ""

#: ipa-client/ipa-rmkeytab.c:255
#, c-format
msgid "krb5_kt_close %1$d: %2$s\n"
msgstr ""

#: util/ipa_krb5.c:800
msgid "Out of memory!?\n"
msgstr ""

#: util/ipa_krb5.c:818 util/ipa_krb5.c:833
msgid "Out of memory\n"
msgstr ""

#: util/ipa_krb5.c:847
msgid "Warning unrecognized encryption type.\n"
msgstr ""

#: util/ipa_krb5.c:861
msgid "Warning unrecognized salt type.\n"
msgstr ""

#: util/ipa_krb5.c:888
msgid "Enctype comparison failed!\n"
msgstr ""

#: util/ipa_krb5.c:953
msgid "Failed to create random key!\n"
msgstr ""

#: util/ipa_krb5.c:966 util/ipa_krb5.c:984 util/ipa_krb5.c:992
#: util/ipa_krb5.c:1032
msgid "Failed to create key!\n"
msgstr ""

#: util/ipa_krb5.c:1018
msgid "Bad or unsupported salt type.\n"
msgstr ""