????
Your IP : 216.73.217.111
�� �
�m A ,� 0$ 1$ ! >$ `$ P x$ �$ f �% X 8& � �& � \' � =( 1 �( } ) �) � �) � .+ � �+ � w, (- n @- x �- ? (. � h. ^ �. P/ �/ B �/ \ .0 �0 �0 . �0 E �0 '1 D1 ? T1 �3
�3 u �3 � +4 D �4 $ ,5 Q5 i5 ' �5 �5 �5 �5 �5 6 &6 % A6 g6 F w6 � �6 `7
m7 K {7 * �7 �7 8 \ '8 H �8 k �8 9: � F: g �: � C; 9< � F< � �< �= x �= 2 > � R> t 1? C �? � �? �@ �@ �A R B # VB zB �B �B �B �B �B C 1C LC gC �C ! �C �C �C �C D 4D RD jD �D % �D �D ! �D p E � wE , >F 2 kF * �F : �F H G 8 MG J �G > �G 4 H < EH > �H : �H 8 �H L 5I F �I J �I > J 8 SJ F �J @ �J J K @ _K < �K : �K 0 L . IL 8 xL 6 �L : �L 0 #M 8 TM 4 �M 0 �M . �M / "N 4 RN < �N T �N X O 4 rO E �O 0 �O . P MP 0 aP < �P A �P Q .Q >Q YQ E bQ ^ �Q 8 R ! @R 8 bR - �R @ �R
S *S JS hS
�S 2 �S L �S T -T 7T DT
ST aT qT �T �T �T �T �T U "U 7U IU ]U pU �U �U �U �U �U �U V V (V EV RV fV �V . �V 0 �V ' W *W 6 AW 7 xW % �W �W �W �W X X " bX � �X � GZ \ 2 \ ) S\ & }\ �\ �\ �\ �\ ' ] % G] . m] ( �] ) �] . �] ^ 3^ / J^ } z^ �^ . x_ P �_ �_ P ` 3 R` �` �` �` �` �` " �`
�` �` a &a +a ^ 4a �a �a w �a /b
>b Lb Yb x eb
�b �b
�b �b c c 0c <c Fc Nc _c nc c �c �c ! �c �c �c % d 0 &d Wd - ud 2 �d 0 �d e e e $e 9e # Ne re �e % �e �e �e �e f /f Gf Zf qf �f �f �f �f �f g (g >g _g og �g �g �g �g �g " �g ( h 2h 8 Bh 0 {h & �h 9 �h \
i ji �i �i
�i �i �i ; �i % ,j Rj
cj = nj / �j $ �j ' k . )k 0 Xk " �k �k �k �k �k l 4l Kl % cl E �l �l ! �l $ m % 3m ) Ym 8 �m . �m �m n #n
Cn Qn kn �n �n 1 �n , �n 0 o < Mo . �o ) �o ( �o p + !p ! Mp % op 1 �p % �p
�p �p 2 q Gq # `q �q �q $ �q �q �q r 7r Vr % rr " �r �r $ �r �r " s ! >s ( `s �s $ �s �s & �s 0 t 3 Ft & zt ! �t �t �t �t u +u Fu % gu 6 �u % �u 1 �u v 9v Uv lv �v �v ) �v + �v w # 1w ! Uw ww �w �w ! �w �w �w x +x >x Hx . Lx * {x �x �x $ �x : �x y \ 2y �y 2 �y �y D �y P 0z �z 5 �z J �z M { L _{ O �{ �{ | "| ;| 3 V| �| �| �|
�| / �| 0 �| +} + L} � x} F ~ * N~ y~ �~ �~ �~ �~ �~ �~ �~ � �~ � ] � " � � (� 7� $ R� Y w� , р 1 �� ? 0� * p� 1 �� + ́ 2 �� * ,� 1 W� 1 �� B �� + �� 0 *� ) [� . �� @ �� / �� %� 7 -� e� - v� * �� 5 τ �
� � Q 1�
�� �� 0 �� / ۅ � 5 #� + Y� �� �� �� �� ͆ � � $ � E� R� ! g� ��
�� ~ ��
6� A� , Q� * ~� ��
�� �� Ј � ��
� !� 0� D� Z� s� �� �� �� �� �� ̉ � � � 8� @� ^� f� �� " �� # NJ � " � /� 7� ! F� h� |� > �� Nj � �� *
� 5� D� Z� o� |� �� , �� [ ͌ # )� M� V� e� V r� ɍ 5 Ѝ * � D 1� _ v� + ֎ � � � �� ,� � �� � @� ( ȑ & � & � � ?� ! ) � � � &� C� [� q� �� �� �� Γ � � � .� ( @� # i� # �� 4 �� & �
� I #� ( m� �� �� �� Е � �� � 0� B� & L� 2 s� �� 8 �� 9 �� 4� 9� O ?� �� 2 �� 1 @ � H� W� d� j� �� % �� " �� H ט G � K h� J �� L �� K L� M �� L � % 3� & Y� ( �� ) �� ' ӛ ( �� ) $� ) N� ' x� ) �� * ʜ & �� ' � , D� ' q� & �� ' �� & � ) � & 9� ( `� ) �� . �� ' � &
� ) 1� ' [� ' �� ' �� ) ӟ & �� ( $� ( M� ' v� & �� Š $ ֠ �� � � )� " 5� $ X�
}� �� } �� / � N� m� �� �� �� # �� ݢ � � & � H ?� I �� ң $ � C � M� U� ' j� �� �� �� ̤ � � (� D� " X� % {� ' �� ɥ ݥ �� � � ! 8� Z� y� �� �� ) �� � �� � ' !� i I� �� ѧ � �� � "�
/�
=� H� X�
d� ) o� < �� 4 ֨ 3 � ?� # V� z� �� �� �� �� �� ; ԩ � $�
9� D� T� `� i� {� 7 �� �� Ǫ � � � � �� - �� - ի 4 � A 8� - z� �� �� լ R �
=� ~ H� � ǭ ! P� r� ~� �� V �� & �� !�
+� 3 9� } m� � �� �
� � 9 &� \ `� �� ° Ӱ ۰ � � ? � - [� + �� �� ȱ ޱ � ( � % 0� V� 2 r� �� $ ��
ݲ � ' � /� + D� . p� ! �� �� Գ 1 � !�
5� @� P� \� c� �� �� �� �� ڴ �� �
#� 1� L� a� s� �� �� �� Ե � � $� 3� G� Z� o� �� �� ! �� ƶ ۶ ��
� 9 � M� \� v� �� �� �� ͷ � � � *� >� V� m� �� �� �� Ҹ � �
*�
8� F� ! R� t� �� �� �� $ ٹ �� � % :� `� ~� & �� ƺ � � � @� _� ' }� $ �� ʻ & � � $ 0� # U� ! y� & �� ! ¼ � � � 6� T� q� �� �� ʽ � �� � :� & V� - }� �� # ʾ � � !� ;� C S� f �� U �� @ T� �� �� �� �� ! � � $ � 0 %� V� d ]� A � � ! � <� ]� ~� �� �� �� �� �� �� �� �� �� �
� ,� A� Y� ! o� �� : �� E ��
,� 7 :� r� {� �� % �� �� �� % � 8� P� j� ! �� ! �� M �� P � O j� R ��
� #� ?� U� h� ' {� �� �� �� & �� � , ;� - h� 2 �� 0 �� " �� + � . I� $ x� ' �� ' �� ! �� & � ( 6� : _� < �� % �� ' �� & %� " L� ! o� 4 �� ' �� " �� ! � , 3� " `� / �� 0 �� * �� % � ) 5� * _� ) �� ' �� . �� - � * 9� C d� �� W �� +
� " 9� # \� �� 0 �� 2 �� ' � 2 ,� _� 2 v� & �� F �� . � + F� P r� ) ��
�� �� � @ � W� c� p� E �� ��
�� �� � < 1� n� }� �� �� + �� �� �� � � "� 1�
F� T� i�
y� �� �� �� �� �� �� �� � � 7� # M� q� ~� �� �� $ �� �� �� $ � =� T� i� �� �� �� ��
�� �� ! � )� ! @� b� W |� V �� +� E� K� c� v� �� , �� �� �� * �� ) &� P� m� - �� I �� f � i� y� �� �� �� �� ��
��
�� & ��
� � ; (� d� 4 ��
�� : �� 6 �
8� F� V� e� y� �� �� ! �� ��
�� �
� � -� K� j�
y� �� T �� �� R � 8 k� ? �� 3 �� 1 � J� f� �� �� �� �� �� � #� =� T� s� # �� �� $ �� �� � < � ]� 0 y� , �� �� 0 �� � 3� J� F a� % ��
��
�� �� I �� E� % ]� & �� ( �� & �� ) �� " $� % G� $ m� " �� �� ! �� �� ; � B� I� j� ! o� �� �� �� & �� �� ��
�� � � ; ,� ( h� $ �� % ��
�� �� $ �� � F � = _� J �� �� & �� 5 � R� . g� 3 �� �� �� �� X � , _� ��
�� �� �� �� �� �� � ( � -� 5� 8 B� {� 1 ��
�� �� �� ! �� � ,� s >� T �� � � +� G� M� g� w� ��
�� ��
�� �� ��
�� �� � � /�
A� " O� r� y� ! �� �� �� 7 ��
� � +� >�
R� `� j� t� . ��
�� �� �� �� � #� 7� R�
p� ~� ��
�� �� ��
�� % �� / �
N� Y� ^� = k� �� �� �� �� �� �� A
� O�
`� k� � $ �� & �� ��
��
�� O �� M� ! n� �� �� * �� �� �� $ � 0� M� 3 W� �� " ��
�� � �� {� �� �� �� �� �� ; �� > .� ' m� �� �� , � �� �
� � "� :� V� s� �� �� �� � � � A �� � �
P� ; [� + �� � � � � #� 9� H� X� h� x� �� �� �� ��
� l � u I�
�� � � � �� U � _� q� �� �� ��
��
� * � # �� # � D� X� ) m� . �� / � - �� $�
.� <� L� U� @ g� @ �� 0 � � /� F� 3 `� �� �� �� �
�� 3 & 7 ^ " | / � � � �
( + 1 T
� � � � * � � � " 3 J f | � � � � # ; T p � # � " � � � # 9 . H , w Q � P � G J e � # � � � $ ) N 3 g + � � � � � � * 1 ;
U 4 ` � �
� � � �
� �
' D 1 v � & � ) � �
I $ ' n 4 � # � �
L
g
% �
�
�
�
�
0 �
% E X Q � � � � �
& ; Q f | �
� � � � $ � � �
+ "
N
% X
' ~
" �
�
�
�
- �
* B ` 2 v X � / A 2 , t � � �
� � � � } � �
$ 2 < L ) m & � � � � = � 3 ; D H + Q } �
�
� � � � � D � H - v � " � 3 � 5 : 9 ? t # � � � $ > O \ p � � � �
� � � � & D X j z � � � � � � ; � 6 ! V x � ( � V � 4 C
T _ t � # � $ � � . @ R , o � � � � � - 3 ( < e ~ � ( � � � ! ' < d ! � � � ( � % ! 2 ' T | ) � � # � ( $ 2 " W " z � � � � / O n � � � � $ C ( l � � � � � ) � # < \ z � ! � � � � ! ! =! Q! o! �! �! �! �! �! �! " " ." ! @" b" w" �" �" �" �" �" # # +# B# ^# y# �# �# �# �# "
$ -$ ) N$ ' x$ �$ �$ P �$ '% 9% " E% h% t% = �% �% �% �% �% & &
2& @& M& 2 ]& �& �& } �& / $' T'
j' x' �' �' J �' �' �'
( ( 3( L( 4 e( �( A �( 9 �( � 1) �) �) �) �) �)
* * "* 3* @* P* ]* t* }* �* �* ' �* �* + + "+ '+ ' 8+ / `+ e �+ n �+ e, z, �, �, �, �, �, �, - - ,- - Z- 3 �- �- �- �- �- . 2. C. ) K. u. �. �. L �. / /
/ !/ 5/ L/ e/ C ~/ �/ 5 �/ 0 (0 ;0 @0 [0 v0 8 �0 * �0 �0 - 1 + @1 l1 �1 �1 �1 �1 �1 2 !2 <2 u Y2 ' �2 �2 �2
3 3
*3 53 O3 W3
a3 3 l3 2 �3 4 �3 3 4 <4 O4 e4 , w4 �4 �4 + �4 i 5 8 o5 �5 �5 �5 �5 �5 J �5 E6 4 M6 2 �6 > �6 ; �6 G 07 = x7 �7 = �7 �7 8 8 %8 78 D8 W8 t8 �8 �8 �8 �8 �8 �8 �8 ` �8 � Z9 �9 :
": 0: 6: ?: L: [: g: �: �: �:
�: �: �:
�:
�: = �: .; :; ' C; k; }; ( �; �; �; �; �; " < ! 5< W< x< �< � �< �= � �= w b> u �> 8 P? . �?
�? �? �? �? @ @ 4@ D@ > U@ �@ 5 �@ 3 �@
A % %A KA aA 7 jA �A ! �A �A �A �A �A . B CB 5 WB
�B C �B �B P �B @C OC _C dC 8 uC �C �C < �C u D E |D �D ; �D 8 E GE VE rE B �E + �E �E F : F $ RF wF �F �F �F �F
�F
�F G �F ( +G TG # eG �G / �G �G �G �G H H
!H
,H # 7H R [H �H �H d �H 8I & DI kI
�I �I �I �I �I �I J J 7 9J qJ > {J �J
�J �J �J �J K #K =K QK dK qK �K
�K
�K
�K �K
�K �K �K �K L L !L 3L EL UL gL zL �L �L �L �L �L �L �L �L
M M 0M @M OM aM qM �M �M �M �M �M �M �M �M > N * FN @ qN
�N 0 �N
�N
�N
O O 'O * =O ` hO �O �O �O P P P /P ;P CP XP dP ~P 5 �P �P �P �P � �P 3 �Q ( �Q R 3R NR G aR �R �R �R ( �R " S ; 7S 3 sS # �S �S " �S # T > 3T * rT : �T �T �T U 2 U ' ?U * gU > �U 3 �U 5 V . ;V ' jV �V �V �V ! �V W 2W NW * kW ; �W 1 �W % X *X $ FX ( kX % �X * �X �X Y 4 #Y XY 5 wY 3 �Y 1 �Y 5 Z A IZ . �Z & �Z * �Z 6 [ ( C[ % l[ % �[ 4 �[ * �[ 4 \ 7 M\ * �\ % �\ ; �\ 8 ] 5 K] % �] > �] �] �] ^ # ^ % 7^ # ]^ �^ �^ % �^ " �^ _ _ 8_ U_ q_ �_ �_ �_ , �_ ` ~ ` �` �` 6 �` < �` 8 ;a Q ta 1 �a
�a b b ;b Rb ab jb yb �b 3 �b �b �b �b �b ( c C Bc �c �c �c �c 1 �c 8 �c < +d A hd 8 �d = �d E !e < ge ; �e @ �e D !f > ff 8 �f > �f ; g 9 Yg : �g ? �g ; h = Jh G �h C �h i i ! :i J \i + �i �i % �i # j * =j hj �j 1 �j / �j M �j \ >k �k �k �k �k �k �k �k
l
l & l Al @ Hl �l
�l �l �l �l A �l �l m m m ,m 5 2m hm um
~m ( �m + �m �m �m
n ( n Hn Un ' in �n 5 �n 4 �n 3 o <o Lo Yo jo �o �o < �o / �o / p 0 Fp wp �p �p �p �p % �p 7 q s >q 9 �q �q
�q r
r "r
3r Ar Zr rr �r
�r �r
�r �r ) �r �r �r s &s >s Ts ms �s �s
�s �s
�s �s �s
�s
�s
�s �s t #t 3t Ct St et |t 4 �t �t �t �t : �t u u &u Au K ]u N �u 2 �u +v ?v Ov pv �v �v # �v �v �v w 2 /w bw zw �w �w �w �w x "x 8x % Ox ux ! �x �x �x �x
y ! 'y Iy fy , �y / �y �y �y z %z =z ! ^z �z # �z + �z 2 �z . !{ 1 P{ - �{ 2 �{ * �{ . | 5 =| 1 s| 4 �| 0 �| 5 } - A} o} �} 5 �} / �} 7 ~ 8 8~ 6 q~ 7 �~ 8 �~ 2 : L ; � 9 � : � 8� . O� - ~� + �� 1 2
� 0 =� , n� 1 �� 1 ́ 0 �� . 0� 4 _� 5 �� 3 ʂ / �� 4 .� c� . u� 3 �� - 1 � 4 8� - m� 1 �� 6 ̈́ 0 � 4 5� 7 j� 0 �� Ӆ � � � / '� 2 W� % �� $ �� 0 Ն 3 � 7 :� 3 r� 6 �� 2 ݇ 7 � : H� 6 �� 9 �� 5 � : *� e� }� �� �� 1 ̉ - �� 0 ,� , ]� 1 �� 4 �� 0 � 3 "� / V� 4 �� �� ͋ , �
� � ,� >�
J� U� h� y� �� �� �� Ҍ
ߌ � � � � .� G� @ Y� W �� [ � N� X�
_� m�
�� �� > �� � 2 � � (� 4� A� a� ) m� # �� # �� ߏ � �� ( � 5� ] =� 4 �� А � � � � # %� $ I� n� �� �� �� ԑ � ! � � (� C @� S �� ؒ J �� C A� D �� ʓ
ӓ � � �� � � � � 1� 7 �� 7 � ,� 5� B� G� X� e� r� �� �� �� ˕ � � # � B� * b� 4 �� ܖ / � � #� 8�
L� Z� * n� ��
�� L �� 4 �� +� @ :� {� �� �� �� ̘ � �� � � ( %�
N� \� z� �� �� �� י , � � :�
@� K� W� o� {� �� �� �� B �� �� �
&� 1�
9� % D� j� {� �� �� �� � � �� � � % -� S� j� % �� �� �� �� �� � �� �
� .� G� Z� f�
p�
{� ��
�� �� - �� � �� � )� D� N� ! Z� |� ��
�� �� �� ܞ + �� , #� ' P� x�
��
�� �� �� �� " �� 8 � � )� 5� 6 O� �� �� ʠ ٠ , � � ! !� � C� 8 �
J� � X� � ,� ; ԣ & � ) 7� " a� b �� > � &� ) >� h� ) �� * �� W ۥ 4 3� + h� - �� G ¦ M
� H X� � �� j i� L Ԩ !� < A� S ~� ҩ 1 � ) � 5 I� v � Z �� ! Q� s� ( �� �� ի � � * -� 1 X� �� E �� ( � 5 � M� & \�
�� 0 �� �� ȭ % խ 8 �� 4� F� N� i `� ʮ � & � � )� & J� ! q� �� & �� ׯ � �� � � )� D ;� �� 6 �� а � ( � % � ' A� i� o� ~� ��
�� - �� Ա � � = �� - Ͳ 8 �� 4� K� [� r� �� �� �� * ��
� � �� � > � I K� �� H �� & � � � (� 1� * N� y� �� �� * Ƶ C � ' 5� c ]� " �� u � Z� - x� # �� 9 ʷ W � < \� �� �� ' Ը �� ( � & =� , d� �� " �� Թ ٹ � � " � 7� M� g� q�
y� �� �� �� ƺ к ܺ �� � � � +� =� D� W� * q� A ��
� � �� � 7 � I� Z� l� y� �� ��
�� O �� � ! 1� S�
b� m� �� �� " ��
ѽ ܽ � ��
� � /� - @� 9 n� K �� � �� � � =� ^�
x� �� �� �� �� �� ¿ ȿ ؿ � % �� #�
5� @� O� a�
r�
}�
��
�� �� �� �� �� � � � � � ' � >� & F� m� & �� L �� � � c $� 0 �� �� �� # �� � �� ^ �� 2 �� 8 � # Q� & u� Y �� �� � � '� 1� " B� e� / {� ' �� + �� �� 8 � R W� �� % �� = �� S ,� H �� % �� ��
� 4 (� = ]� 3 �� M ��
� +� :� M�
a� o� & ~� + ��
�� ! �� " � ' $� L� h� L �� �� & �� $ � ! -� P O� Q �� " �� ! � D 7� , |� H �� $ �� # � ;� ? S� �� �� 2 �� 5 �� , "� / O� % � 8 �� ( �� * � - 2� $ `� ' �� S �� ( � + *� # V� K z� " �� ) �� , � $ @� ' e� 2 �� 5 �� , �� / #� $ S� 7 x� ' �� �� h �� % I� o� 4 x� + �� / �� � ) � # I�
m� x� �� �� $ �� ( �� �� �� � @ � 0 \� 4 �� �� �� �� �� 7 �� ' %� ) M� S w� �� �� * �� * � # G� ; k� " �� ' �� �� 1 � � 3� $ �� � (� .� 1 :� l�
s� �� �� B ��
�� �� �� � � Z $�
� �� 0 �� X �� � . #� ( R� {� �� ��
�� �� �� �� �� � F � c� }� �� �� �� �� �� ( � *� " K� n� � # �� �� �� * �� � '� B� 3 c� - �� . �� & �� � :� M� V� `� ~� ' �� �� �� �� �� � .� H� U� a� s� �� �� �� �� �� �� �� � � 1� $ A� : f� �� �� �� �� �� � � /� H� Y� $ l� ) �� �� �� �� � "� 5� U� % v� �� �� ! �� �� � *� Y 3� �� �� �� % �� �� � 1 #� # U� " y� $ �� . �� �� �� % � W 4� �� �� �� �� % �� \ � % p� C �� A �� � ;� Q� l� A �� �� P �� , &� S� \� T h�
��
�� �� # �� # � & 4� [� d� v� % ��
�� % �� �� �� �� ( � 0� A� ' U� D }� �� �� �� " �� $ �
:� E� W� H l� 4 �� D �� 1 /� & a� �� R �� �� �� � : � F R� " �� % �� J �� 4 -� 0 b� �� �� �� �� ��
�� �� �� �� O � [� u� �� s �� � '� /� 8� P� i� p� |� �� �� H �� �� �� � -� ! H� $ j� �� 4 �� �� �� �� 9 � K� f�
u� �� = �� 9 �� ' � ,� 9� L� `� {�
�� �� �� ��
�� �� �� �� - � K 6� # �� * �� 6 � T � ]� ~� �� �� �� �
�
� � � &� D� D K� < �� � 1 � � 7� N� S� B o� �� " �� C � . � , N� {� �� �� �� �� �� � � � � �� �� �� � [ � � @� ] )� Y �� � � � �� f y� , � b
p _ } � � � q � � W � P > V l � F e I � 5 � S � N f # r L � � � � � � M � P 8 �
*
?
# Z
~
�
�
�
�
�
�
M & z t � � > C ^ v R � ; � V
t t � S � � I - � : z � B X a � � � d � 2 � 7 � � � � ; � % E b z � � � � 6 Q l ! � � � & � # ; S t � � p � W D � � � ! � , " L o � � � ! � * + ( V " � � # � $ ' + ' S { � � � � & B ^ ! z � � � � ! ' + ' S { ! � � � � $ @ B � � � � < � W 4 p � - � % � / ! > " ` � # �
� 4 � > ! G! g! q! �! �! �! �! �! �! " ;" V" q" �" �" �" �" �" �" # 1# R# s# |# �# �# �# �# �# �# $ �# % $ / B$ r$ �$ 1 �$ 9 �$
% *% 6% ( C% E l% " �% � �% � b' �( * ) ! /) ! Q) s) �) �) �) " �) ! �) ! * ! 2* ! T* $ v* �* �* # �* s �* u Q+ ! �+ E �+ /, < <, ' y, �, �,
�,
�, �, �, �, �, - %- *- V 4- �- �- S �- �- . . '. c 1. �. �. �. �. �. �. �. �. �. �.
/ / $/ C/ J/ # Q/ u/ �/ �/ �/ �/ �/ ) 0 :0 Y0 f0 p0 w0 �0 �0 �0 �0 3 �0 - $1 ! R1 t1 " �1 �1 �1 �1 2 32 R2 q2 * �2 # �2 & �2 3 $ "3 G3 `3 3 �3 �3 �3 �3 ' 4 - -4 [4 3 t4 - �4 $ �4 6 �4 V 25 ! �5 % �5 �5 �5 �5
6 5 )6 * _6 �6 �6 9 �6 1 �6 ' 7 ' ;7 3 c7 3 �7 " �7 �7 !
8 ! /8 Q8 ! m8 �8 �8 ( �8 H �8 <9 ! [9 ' }9 ' �9 ' �9 5 �9 - +: ' Y: ! �: ! �: �: ! �: ' �: ! ; >; 4 [; 3 �; 7 �; @ �; 3 =< * q< & �< �< 1 �< - = 1 6= : h= $ �= �= �= # �= > 7> W> v> ! �> �> �> �> ? ,? ) J? ' t? �? ! �? �? " �? & @ & F@ # m@ & �@ & �@ & �@ + A ) 2A # \A �A �A �A �A �A B & )B & PB / wB & �B , �B �B C 1C LC dC �C & �C & �C �C D 0D QD lD �D �D �D �D �D �D E E E $ /E TE [E kE 0 �E �E K �E F * *F UF 8 bF D �F �F $ �F K G Q ^G K �G Q �G NH ^H kH ~H ' �H �H �H �H �H $ �H $ I :I $ WI u |I 3 �I ! &J HJ QJ ^J hJ uJ �J �J �J y �J y )K �K �K �K �K �K L ; L \L ! {L 3 �L �L ! �L M ! 1M SM ! rM ! �M 3 �M �M ! N +N ! JN 5 lN $ �N �N ' �N �N * O ' 9O aO �O �O �O n �O P P , ,P ) YP �P �P �P �P �P �P �P �P Q Q 5Q TQ ]Q pQ & �Q �Q f �Q $R 1R - DR - rR �R �R �R �R �R �R S S 2S HS aS zS �S �S �S �S �S �S ( �S T # 6T ZT `T T �T �T & �T �T U U <U EU XU wU �U 0 �U �U �U �U & �U
V V 1V
@V
NV YV ' jV k �V �V W (W 7W K CW �W - �W ) �W B �W V 1X ' �X j �X s Y | �Y � Z g �Z ) �Z %[ A[ _[ �[ ' �[ "\ /\ 6\ I\ \\ o\ �\ �\ �\ �\ �\ ] ] %] 2] Q] p] $ �] $ �] �] > �] " "^
E^ P^ W^ p^ }^ �^ �^ �^ �^ ' �^ $ �^ !_ 2 =_ 3 p_ �_ �_ D �_ �_ $ ` 3 )` < ]` �` �` �` �` �` $ �` a 5 #a 8 Ya 8 �a ; �a > b ; Fb ? �b H �b % c & 1c ( Xc ) �c ' �c ( �c ) �c ) &d ' Pd ) xd * �d & �d ' �d , e ' Ie & qe ' �e & �e ) �e & f ( 8f ) af . �f ' �f & �f ) g ' 3g ' [g ' �g ) �g & �g ( �g ( %h ' Nh vh �h �h �h �h �h �h �h i i #i ~ 6i ! �i �i �i j j #j *j @j ! Sj uj $ |j < �j B �j !k 7k 6 Xk �k �k * �k �k �k l ( #l $ Ll ' ql ' �l �l $ �l ' �l ' $m Lm bm zm �m �m ' �m �m �m n 2n ?n `n xn �n �n d �n o =o Jo ]o po }o �o �o �o �o �o & �o > �o - *p * Xp �p " �p �p �p �p �p �p �p 7 q ?q Oq _q lq |q �q �q �q > �q �q �q r r � #r �r �r �r * s 8 9s ! rs �s �s �s K �s t s #t } �t % u ;u Hu Ru N pu $ �u �u �u 1 �u o -v �v �v �v �v �v 4 �v P w Yw `w mw tw �w �w J �w * �w ' 'x Ox \x ux x �x ! �x �x ' �x y y 9y Ey Zy vy �y ! �y �y �y �y * z 4z Dz Kz Uz \z cz �z �z �z �z ! �z �z { *{ :{ Q{ e{ y{ ! �{ �{ $ �{ " �{ | (| G| ]| v| �| �| �| �| ! �| } "} >} T} 6 g} �} �} �} �} �} ~ $~ >~ [~ s~ �~ �~ �~ �~ �~ ! . ! M ! o " � � � � � �
� "� 9� # T� x� �� �� ׀ �� ! � 7� T� q� �� �� ́ ) � ' � =� ! \� ~� " �� & �� # � & � & 2� Y� t� �� �� ƃ � �� � ;� V� q� �� �� & ń & � � 4� U� p� �� �� B �� T �� S N� < �� ߆ � � � * � F� M� + _� �� N �� 4 � � ,� F� `� z� �� �� �� �� �� �� ƈ ͈ � �� � � 8� T� ( n� �� 2 �� A � %� $ 2� W� ^� u� # �� �� Ҋ ' � � .� I� d� �� N �� N � N A� N �� ߌ � � � 1� - D� r� ! �� ! �� ! Ս �� '
� 5� ' Q� * y� �� ! �� ! ߎ � � ! 9� [� w� �� - �� - ݏ � *� F� b� x� ' �� ! �� ސ � � /� H� " i� �� �� ʑ � � &� # E� ' i� �� 3 �� � \ � # K� o� �� �� * �� 1 � " � ) >� h� ' {� �� B ( � .� B M� ! �� �� �� ȕ 6 ̕ � � � 9 1�
k� y� �� �� - �� Ԗ � � � ! � *� C� _� l� s� �� �� �� �� �� ė ˗ � �
� � 6� R� ( l� �� �� ǘ Ԙ ۘ � #
� 1� O� ' n� �� �� ę � � � 3� =�
D� O� l� $ � �� T Ú ] � ! v� �� �� �� ƛ ۛ $ �� � #� & <� $ c� �� �� - 3 � K $� p� }� �� �� �� �� �� ԝ � � � � = #� ' a� $ �� �� : �� 4 �� +� 8� H� X� q� ! �� �� ȟ ޟ �� � � (� >� X� u� �� �� O �� � J � 1 g� 5 �� , ϡ , �� )� =� T� n� �� �� �� Ӣ � � � 3� G� h� �� �� �� > ɣ � % !� G� d� # ~� �� �� Τ < � * � J� W� d� E w� �� ڥ �� � 1� M� i� � �� �� �� ڦ � 6 � 7� >� ]� * d� �� �� �� �� ӧ ڧ � � �� # � =� \� {� �� �� �� �� ? Ũ ? � N E� �� 0 �� 6 ҩ � ' � < G� �� �� �� [ �� * � A� Q� [� h� z� �� �� �� * �� ի ߫ * � � - 3� a� k� r� � �� �� g �� T #� x� �� �� �� �� �� ˭ � � �� � � � � )� 9� F� V� `� y� �� �� ! ��
� 1 �
�
+�
6�
D�
R�
]�
h� s� . ��
��
̯ ׯ
� ��
� � 2�
L� W� n� �� �� ��
�� �� * Ұ ��
� � 0 � O� \� f� p� }� �� 3 �� ձ � � �� � %� D� N� [� 3 h� �� �� Ѳ � & � � ,� ?� `� y� , �� �� �� ߳ � � p� z� �� �� �� ʴ / � / � F� g� �� ! �� �� �� ɵ ҵ � � � -� M� m� v� � � �� M '� X u� η - ط � $� 7� M� c� y� ��
�� ��
�� ϸ � � � � � f %� f �� � � � &� ?� M L� �� �� � �� �� �� ʻ Ի ' � � (� G� Z� # p� & �� ' �� ' � � � !� 0� 7� 5 D� 4 z� # �� ӽ � �� $ � .� A� T� j� �� ! �� �� ! ܾ �� - � H� [� q� �� �� * �� 6 ݿ � � +� 5� ) N� x� �� �� �� � � � � � 0� @� V� l� � �� �� �� � � �� � � 1� J� ' Z� ! �� > �� = �� !� 1 9� k� " x� �� �� �� + �� � 8 � & R� y� �� �� �� �� �� �� �� �� �� �� � ' � E� L� _� i� s� }� �� �� �� �� �� > �� � � # 1� # U� y� �� E �� �� , � & 8� _� t� E �� �� �� �� �
� � * '� R�
[� * f�
�� R �� ��
� � � +� ;� K� [� k� x� �� �� �� �� �� �� �� �� �� �� $
� /� 9� 0 V� �� �� �� �� * �� �� � 1� $ G� L l� ' �� 0 �� ' � :� D� K� R� \� i� v� }� o �� u �� o� y� �� �� �� �� �� ! �� � "� 2� 2 E� x� �� �� �� - �� �� �� �� �� �� � � ,� 9 E� = � �� �� �� . �� 2 .� 6 a� F �� �� �� � -� C� X� n� x� �� �� �� �� �� �� �� �� �� � � -� A� U� _� i� s� �� �� �� �� �� A �� � %� >� H� , O� Y |� " �� �� � � 2� B� U� ! k� �� �� �� �� �� �� / �� � <� S� `� p� �� �� �� �� �� �� �� � 0� Q� p� ! �� �� �� ��
� ) +� ' U� }� ! �� �� % �� " � " &� ( I� & r� # �� & �� �� �� � 3� Q� o� �� �� �� �� �� � 5� 8 V� �� �� �� �� �
� ! � A� W� ! p� �� �� �� �� �� � � 0� I� $ b� " �� �� �� �� �� � $� :� P� f� ! y� �� �� �� �� �� � 1� N� h� �� �� ! �� �� ! �� $ � >� Q� j� �� �� ! �� �� �� R � X� e� ' o� �� �� @ �� �� � � #� 2� G� S� _� k� ( u� �� �� k �� , � L� `�
q� |� �� = �� �� �� �� � � ,� 5 B� x� 8 �� < �� � � ��
�� �� �� �� �� �� �� �� � � � 3� =� X� k� {� �� �� �� �� �� + �� * � c G� ` �� � � 2� K� g� w� �� �� �� - �� - � + 9� e� u� �� �� ( �� �� �� $ �� $� 7� @� < \� �� �� �� �� �� �� � K +� $ w� 0 �� �� �� �� �� � � /� $ N� s� ) �� & �� �� �� � � 2� E� X� k� ~� U �� �� � � � � -� 7� G� Q� [� / e� , �� / �� , �� � /� ?� - O� }� �� * �� Y �� / +� [� h� {� �� �� G �� �� - �� * � 4 J� 3 � = �� 5 �� '� 8 .� g� t� {� �� �� �� �� ��
��
�� ��
� � /� ?� Q O� � �� &� ?� R� \� f� r� �� �� �� �� �� �� �� �� � � � B � c� p� w� �� �� ' �� �� �� �� � � 1� D� ]� m� � �� S� � f� k � i p� 0 � � '� .� G� _� l� y� �� �� 5 �� � - � 6 � ?� U� h� �� 0 �� �� � � � �� � � *� 7 @� x� 3 �� �� ? � � � � '� - 7� e� r� - y� c �� : � F� 6 S� 4 �� �� � � ? � + /� [� e� 6 {� �� � � � � � �� � L � & `� �� �� �� " � � � � (� 2� 9� @� G� ? Z� �� �� O ��
$ < X n � � � � � � < L - U � � � � � � � � " / < I V c u � � � � � � � $ 9 O a t � � � � � � � & 9 K ` s � � � � � � � 4 ( ] 9 x � ! � � � �
U 3 � � � � � � � � 0 ! 7 Y i v � � - - ' [ � � � > �
, A 3 N - � 3 � - �
% 1
W
v
1 �
- �
9 �
/ E U 1 b ' � ' � $ � 3 3 = - q " � � $ � $
! +
M
! f
�
( �
5 �
- ' 4 ! \ ~ * � $ � $ � ! ' 1 1 Y ! � 4 � 3 � 3 7 J F � 1 � - � 1 ) : [ ' � & � & � , & 9 . ` , � # � � 8 # : / ^ � 2 � � � � 3 R m � $ � � � ) ? U q � * � � x � P c % p 0 � 0 � K � ) D n x � � � � � � � ) � # - : P * l ? � � � � � - ' 0 + X 0 � ' � , � 4
+ ? * k / � 3 � - � ' ( - P * ~ ( � ) � . � * + , V 6 � 2 � � � ! ? 5 $ u � � � � ' & ! N F p T � ! ( 5 < L S ] g q � H � � � � � * ; E R _ x ; � � � - � & ! F! e! �! - �! �! �! * " ." = D" @ �" C �"
#
# ## =# W# q# ? �# / �# 1 �# 1 -$ _$
z$ �$ �$ �$ �$ * �$ O % B X% �% �% �% �% �% �% �% �% & & ,& 6& =& G& $ T& y& �& �& �& �& �& �& �& ' ' ' ,' 6' @' M' W' a' k' u' �' �' �' �' �' �' . �' ( ( ( ; ( [( b( o( �( H �( E �( + $) P) a) n) �) �) �) ! �) �) �) * * &* Q* g* z* �* �* �* �* �* + ! !+ C+ ^+ {+ �+ �+ �+ ! �+ !
, ,, & H, ) o, �, �, �, �, �, �, - $- * =- + h- $ �- * �- ' �- + . ' 8. - `. . �. ' �. - �. * / . >/ * m/ �/ �/ 0 �/ - �/ 1 0 0 L0 0 }0 1 �0 3 �0 0 1 4 E1 3 z1 3 �1 4 �1 2 $ *2 $ O2 ! t2 . �2 - �2 - �2 * !3 . L3 ' {3 ' �3 $ �3 1 �3 0 "4 0 S4 - �4 1 �4 �4 0 �4 0 %5 - V5 0 �5 0 �5 - �5 3 6 3 H6 0 |6 3 �6 3 �6 0 7 F7 V7 f7 v7 - �7 0 �7 �7 8 ' 8 * E8 4 p8 - �8 3 �8 0 9 4 89 7 m9 0 �9 6 �9 3
: 7 A: y: �: �: �: . �: ' �: - ; * M; . x; 1 �; * �; 0 < - 5< 1 c< �< �< " �< �< �< �< = = "= 2= <= F= M= ]= w= �= �= �= �= �= �= �= �= ; �= 5 :> 5 p> �> �> �> �> �> �> > ? E? 5 O? �? �? �? �? �? % �? % �? ! !@ C@ M@ f@ v@ �@ Q �@ 6 �@ "A /A 9A FA SA `A yA �A �A �A �A �A �A �A B B 9 1B P kB �B 6 �B 6 C 6 =C tC {C �C �C �C �C �C �C t �C 9 ZD 8 �D �D �D �D �D �D E E 7E GE TE jE �E �E �E �E �E * F 7F JF + ^F �F �F �F �F �F $ �F �F �F E G QG lG D |G �G �G �G �G H *H 7H AH KH [H zH �H �H �H �H �H �H $ I ?I XI _I lI yI �I �I �I �I �I + �I �I J J )J 0J FJ aJ nJ �J �J �J �J �J �J �J �J K "K 2K ! KK mK tK ~K �K �K
�K
�K
�K
�K �K �K
L
L
L
"L -L :L DL ^L }L �L �L �L �L
�L �L M M
%M
3M >M OM `M �M �M
�M �M �M �M �M �M N ) N HN RN _N 3 xN ! �N �N �N �N O $
O 2O ?O � [O ) P ?P � FP � �P 3 uQ �Q ! �Q �Q E R + NR zR ' �R �R & �R �R T S ( iS �S �S I �S L T * ^T � �T [ U 7 |U �U - �U ; �U 7V MV lV ' �V e �V E W _W W �W �W �W �W �W X & "X IX > dX * �X 9 �X Y Y -Y : :Y uY �Y ! �Y * �Y �Y �Y �Y M Z RZ qZ zZ �Z �Z * �Z ! �Z [ ' +[ S[ c[ s[ �[ �[ �[ 4 �[ �[ $ �[ \ \ (\ 3 F\ z\ �\ �\ �\ �\ �\ ' �\ �\ � ] * �] * �] 0 �] ^ *^ :^ G^ T^ g^ t^ {^ �^ �^ �^ �^ < �^ W _ ^_ M k_ �_ �_ �_ �_ �_ , ` ;` Q` d` w` 2 �` �` T �` ?a Z Wa �a ! �a �a 3
b T >b 6 �b �b �b ! �b c & +c $ Rc wc �c �c �c �c * �c d ' 'd Od fd }d �d �d �d �d �d �d �d " �d e &e 9e Le Ye ie pe �e $ �e 0 �e �e �e �e f f ; f [f jf yf �f �f �f �f 3 �f �f
g )g 6g @g \g lg |g �g �g �g �g �g �g �g ! h $ 'h 0 Lh }h �h �h �h �h �h �h i i "i ,i ?i Ri Vi `i ji ti �i �i �i �i �i �i �i �i �i �i �i �i j j %j 2j ?j Fj Pj ij " pj " �j % �j B �j k &k H <k 0 �k �k �k ! �k l �k g Sl * �l 9 �l $ m % Em [ km
�m �m �m �m n n 7n " Jn mn 2 �n �n 9 �n J o Yo + uo 9 �o Z �o 3 6p jp �p �p $ �p ( �p $ �p ? #q cq sq �q �q �q �q ) �q + �q %r 2r Ir cr }r �r N �r �r $ �r $s Cs H \s H �s �s
t 9 &t ' `t E �t �t �t �t 6 u Cu Vu 1 eu 1 �u . �u . �u - 'v 0 Uv - �v - �v - �v * w * ;w V fw - �w - �w x H 8x �x * �x * �x * �x * !y 1 Ly 1 ~y . �y . �y * z - 9z * gz �z . �z �z �z - �z { 4{ Q{ ' ^{ ! �{ �{ �{ �{ �{ �{ $ �{ | | | 2 .| a| $ �| �| �| �| �| + �| ' �| . '} Z V} �} �} $ �} 0 �} $~ 2 B~ u~ 6 �~
�~ - �~ � � � � � ' � � � � /� 7 6� n� x� �� �� �� R �� � � - � I J� �� - �� + Ɂ �� � � !� 0� F� Y� y� �� D �� � � � -� C� V� f� $ {� ' �� ȃ � �� � '� B� O� o� �� �� ( �� ! � 0 � 3� R� k� {� �� �� �� % Å � �� � � 1� B� V� `� m� }� �� �� �� �� �� چ � �� �
� *� 4 F�
{� �� �� �� Ƈ ܇ � � %� 8� N� n� �� �� �� و � �� � 2� R� r� - �� �� щ � R �� N� X� n� , �� �� �� ' Ԋ �� � 1� $ L� q� ~� �� A �� � �� �
*� 8� R T� $ �� E ̌ C � ! V� x� �� �� ;
�� E � ! R� t� �� T �� � �� � " $� ) G� , q� �� �� �� , �� � � � � � # 0� T� d� * w� E �� � � �� � "� ;� B� U� C h� 9 �� = � / $� ' T� |� 5 ��
Ւ
� * � = � Z� # s� ? �� ( ד 1 � 2� 9� @� P� `� s� �� �� �� < �� �� � � R .� �� �� �� �� �� �� �� ͕ ݕ � 7 � &� 9� L� _� r� �� �� - �� � �� � 9 !� [� q� z� �� , �� ) �� �
�
�
� .� H�
b� m� ��
��
�� �� �� �� Θ < � *� ! 7� % Y� Z � ڙ � � � � -� 7� A� N� ^� z� �� Q �� 3 � #� 0 =� n� �� �� �� 7 �� � $ �� Q � - r� / �� М � � �� �� � � � 2� : � Z � � q � � 2 � � 7 � � i
o � L �
2
f � � ) � � � � � r � >
`
Y n ~ � m � 3 � s � � ~ � h 1 � � � � � �
� `
0 � � � [ � � :
� " . _ �
( � � � � � i � � �
4
� � 0 - � E M
> � � f � � q
� m M � M � @ � C � � L � �
V �
� 3 z � � � � � � | ] g s I � R {
� � � � Y � � � h
; � V
K � � E d
� , � > � �
C
w _ ' � � A F K � + � 0 � � � j � � � k �
� Q j � V � �
� � 5
� � � L � 7 � L b � � W
= �
X m W � �
$ 4 � ) x � O > � � P r � � � � � �
%
4 � _ f � �
S
� G �
� * f � n
�
� � � � a B � � � @ � 0 8 � � �
B 1 � h � � � ` � � � U <
| K � � G = b # � @ � <
�
� � < � � � � � � � A � � � �
q � h
| � � X � z � 8 � � 7 � \ B
� } � �
&
b Q
. F � � ] � � _ Z �
� � � (
A U � p � � V 3 � � � � i
} �
s � ) � { � � � H | � � ' * � � � d x e � N � (
R Q � � � � � d
D w � � 1
6 � � B � 4 � � o n 7
! �
e p " � � � i �
� 0 . � 1 \ � B � e ; � X � 5 � _
c � � #
� � � � w 2 )
> � ` - � � >
W 5 @ � � ( " , � � �
� Q � � M = � � 7 @ � � . � � � W � a 9 \ T c � $ � � � � � W � � � M � N m � � �
u ( � � � � i � � � { �
� . �
� F � t
S � � �
� _ � � n 4 � � � ' � � s � � � � � � � � ) � �
B
< 8 k � � ' � �
� 5 �
B
# � d � � � N
� � � � � 9 t : � � C G b
? d � � Y � � � � J � � @ �
� �
� � � � E � 9 e 6
�
� � ` r � e [ � ' c & �
8
� � / �
� z
� * : 5 4 $ � � � T � > ? � � �
O A
� Y
= � � � � h � Q e �
� _
� �
'
� ) ~ � V � n � u � 6 � �
� � � Q E
H
o
O ? A V � � . �
* J Z � � 3
M � �
Q " ] ( ` � � � R ! � � * � � �
0 � Y � � � � � � K � K � � � { � � � [ a
5
( S
� � p
Y � � � = .
? v @
� � ;
� v ! � � B % � � � k . ! � < � � � p � � � A � � x � �
� z � � G � 1 \ y
U y � � � < �
$ � � 1 + � � v u � � � P + � � O � q t P ; ,
h � � W � F
" E A
� v $ � � � � � p � � , 9
C � . � � w + � I � m � m � � � u � f � � 0
� R � � � � � �
� � �
D � � � J g � �
$
j s
! � � � � z
Z B � 0 � � q n �
� i \ \ � �
n
� � � � #
� �
� � � � R
L �
R p 2 H
�
6 x l � r � �
9 e � e � � ; 9 � � 8 m
Q � � � }
�
n
� �
� % � � B b l � � � }
� � �
s
� � � � �
k 3 �
q �
6 � ( d v I
? ) � � m e
� � � Y ? � � e 8 � � � � ' o u � P } y �
` � �
� @
� t � ; [ �
+ . � / � 9 � P ! � 2 � � Z � > � y � � � J � � � � � � � �
L � X 6 K � � � Q � d � ?
� � � ( � b
t � & I �
�
� � H # | [
d � O � c [ 2 o u � O � & t j � K
� � f � � G
�
� b � � s O
% X J � � 7 #
z C
p x
e P
H I
� � i / * � � � � � C & � � � v q � k
� � F
# � 4 � x �
c � �
; � � n * o ;
$ f u
v g w ` � � f � *
� o - I � � �
� � � � e
q + % a < � � � - � � � � � L � ^ Y a � @ � �
�
2 � � � � r l
� � �
� f 3 �
�
� � � � 4 l � � V
� � U � � �
7 } � � l u g � � 5
u
� � � , X S t � U
� U -
C � I v � � � ) � / i � I 9 _ -
3 w
g S ? � 3 � �
2 & Y
- & . D � "
� � r � � N � � � D " � � � � � N � b � a ( � � �
: � B � � � � H � � G � � ) � 3 i D � R 0
T � � V � � � A : F � � � �
� � � /
� � � K � �
d � � � � [
� < ) � � � F
� � � � � 2 � T �
$ � � y d � h : � � S G ~ � u # H D � � � � � �
� � � ? X ?
� � = � s - i � � t � 6 w m
�
� � � �
� �
Z
P j �
� / 3 ; � � � , ' � q
8 O � � � V H � � � }
� h � � � G � �
S
� � � � � s � � � � � � �
� � �
� F
� �
l ^ S � � � @ � � % � � �
�
/ c
C � I � O � � h � � � C � � � � �
k m M : � �
' � �
� � � �
� � b v
f
� � } � � � H & 1 � � � � / % � p
� � � r � � � �
�
� 8 �
� � � / � � $ ~ � � X _
� / � � O
^ U V � ] � � � ^ X # # < � � �
� � � � {
� i
� E � �
$ P � � P ) � � 1 � �
� Q
3
�
� � � � - � ) 1 � � a U y H � � �
_ � X
N
D
�
� ] � � �
� r 9
�
x
� � 2
� * � � � � + u � < C n � ; � � C � ]
� d + � � d �
t �
�
�
y � N _ � a � � � � � � � A � �
� � g �
b w �
� c � � " � � � � � &
� 2 �
| � � � N � � � � 8 � � � ` �
� � h � � � C M �
� = s � Z i � L
� � � � / 2 � �
� �
� �
� � � V � � " , � % � q � � % � � w P � { :
p o � ] < � � � P � v � � z � F Z x � � l � , 9 ? E � � M Z � >
a w a
� � P � � "
� � < � � 5 � � � � �
� ~ h ! Z N
� > Q T � 5 � *
�
� $
� �
� r 4
�
a
� � t � �
8 N � � � T �
j
� � �
m � � V � � � I N 1
� � � %
�
j � T X � � � � y � � a
� | � � X z 8 k �
U � T �
< k �
"
� �
�
� � � � �
�
{ � n � � N � � � �
� � � M � � +
� � � �
>
� O � R ~ S
� \ � � � / � D )
v � � � � � =
�
� � � � � � 0 � D �
m l � �
� z
� � � �
� � � . # � /
A � E � 9 { , g � � M
� � � T - � " ! ( J F � o
� = �
R � K �
� � � � L
F � �
] � [ L W � � � y � � 7 � � � 6 � } [ S � �
� t
& i � � � � t # 5
z � s � W w � \ H s � b � 5 �
\ � * �
� \
� � s � ~ � � T & �
8 + � � � � � m � 6 � 6 � ; �
( : K G � Z ( , � *
Z � � �
C y :
� { � � � o �
� � g � � P
� � � ^ � f � � ' W A , J �
� } = � S � ; z � s �
U � x � b \
� [ q � J � c
�
h 8 B � � , � j � � � � R � � 2 � V �
� ; R @
� � 2 � � � p � � � �
� � � � m - � l � �
b Z
� � � !
� E
h � � �
� � q �
� � � � � � � � 7
o v
� y w � � l
� � � \ d � ? � � x Z % � �
� g � � ,
z � �
� 7
� ~
�
T ( ! J � t / � � x j � � 1 � = � � � 3 L x
� �
�
& �
^ y � % [ E
% l � E r _ � � � ] � v � � |
: H ` � � [ ! g
5 � k 5 �
� } D
� ^ M � U ` q � n b �
� � a c � � � � � � � ^ M � � � 7 '
� � � 9 � � � � � � � � � � e G g [
�
{ � ^
�
0 ` � � c j � U |
� � � � x _ p � * � � ~ � ^ � � 6 � n � a � � � F � ? S � !
} � � � � � � ; � � � P l +
� � � � g ^ � � � p � E � | �
9 � � U c <
k � { � g � � � $ � > � � � �
R �
� 4 w
�
�
� � h � �
� � � j ) x k O � � � � 6 � = , " � �
� � � o �
� � J
l � � �
� y � E g
� K
u � � n I � E � � H � �
� � � r � 6 6
� ^ � � T
� � �
� �
Q 0
� � �
� N + 4 K & � � � � � � A k W Y ] W { ] � f
� � � � ` � X
� 4 + J
� @ e � z B 1 �
� G � � � � � C k '
z " � r
� � � .
� � � � � � � r � ^ ~ � � ~ � � { � � O
� � 1 �
�
� � � Y � f
| ! � � c p � � � J M | � � 5 0 � � X
] Q � U
� R
�
k
�
� � & L �
� � � | D A
7 � � � � I o �
� � %
7 � �
� � � � � � � � �
� � S �
G �
u � � K
�
� 4 W 7 � � . � � $ � p 1 V ? � � � � � i ! j � � � �
� � � � � � 8
- �
� � ' - � � � �
\ � � � � R � ' �
�
� � � ~ � 3 � _ � � + } 3 � � ^
� � � �
{ d � [ � | � Y � � -
�
J
� � � l A � � � � = L � c � > � � � N � F � �
� G
� � � � =
v � � � � �
� � � � � � y
� � � W T � � � j ]
�
� �
> � �
� W
� � � �
� � w I � � t � � 4 � � 9 ] u q � @
� K � � � � � � � �
� ~
�
}
� : � S D � � Q 0
� � � G � � @ � j
H � � �
$ Y � � � � c � # r
� T
� * � � `
� Y �
� B � � � � � � � : \ � � o � � � � � �
� D �
� � O # f
� � I � � � � D � � F � � � �
L J
EXAMPLES:
Vault Container object.
Vault object.
Add a new token:
ipa otptoken-add-yubikey --owner=jdoe --desc="My YubiKey"
* A permission grants access to read, write, add, delete, read, search,
or compare.
* A privilege combines similar permissions (for example all the permissions
needed to add a user).
* A role grants a set of privileges to users, groups, hosts or hostgroups.
* The host must exist
* The service must exist (or you use the --add option to automatically add it)
A certificate is stored with a service principal and a service principal
needs a host.
A condition is a regular expression used by 389-ds to match a new incoming
entry with an automember rule. If it matches an inclusive rule then the
entry is added to the appropriate group or hostgroup.
A default group or hostgroup could be specified for entries that do not
match any rule. In case of user entries this group will be a fallback group
because all users are by default members of group specified in IPA config.
A permission is made up of a number of different parts:
1. The name of the permission.
2. The target of the permission.
3. The rights granted by the permission.
A permission may not contain other permissions.
A rule is directly associated with a group by name, so you cannot create
a rule without an accompanying group or hostgroup.
API Schema
Additionally, there are the following convenience options.
Setting one of these options will set the corresponding attribute(s).
1. type: a type of object (user, group, etc); sets subtree and target filter.
2. memberof: apply to members of a group; sets target filter
3. targetgroup: grant access to modify a specific group (such as granting
the rights to manage group membership); sets target.
All CAs except the 'IPA' CA can be disabled or re-enabled. Disabling a CA
prevents it from issuing certificates but does not affect the validity of its
certificate.
An order can be added to a sudorule to control the order in which they
are evaluated (if the client supports it). This order is an integer and
must be unique.
Asymmetric vault is similar to the standard vault, but it
pre-encrypts the secret using a public key before transport.
The secret can only be retrieved using the private key.
Auto Membership Rule.
Based on the ownership there are three vault categories:
* user/private vault
* service vault
* shared vault
Based on the security mechanism there are three types of
vaults:
* standard vault
* symmetric vault
* asymmetric vault
Baseuser
This contains common definitions for user/stageuser
CAs (all except the 'IPA' CA) can be deleted. Deleting a CA causes its signing
certificate to be revoked and its private key deleted.
Certificate requests exist in the form of a Certificate Signing Request (CSR)
in PEM format.
Certificates may be searched on by certificate subject, serial number,
revocation reason, validity dates and the issued date.
DNS server configuration
Dates are treated as GMT to match the dates in the certificates.
Deleting or renaming a managed permission, as well as changing its target,
is not allowed.
Domain Name System (DNS)
EXAMPLES:
Get information about installed IPA servers.
Get status of roles (DNS server, CA, etc.) provided by IPA masters.
IPA certificate operations
IPA locations
IPA provides a means to configure the various aspects of Sudo:
Users: The user(s)/group(s) allowed to invoke Sudo.
Hosts: The host(s)/hostgroup(s) which the user is allowed to to invoke Sudo.
Allow Command: The specific command(s) permitted to be run via Sudo.
Deny Command: The specific command(s) prohibited to be run via Sudo.
RunAsUser: The user(s) or group(s) of users whose rights Sudo will be invoked with.
RunAsGroup: The group(s) whose gid rights Sudo will be invoked with.
Options: The various Sudoers Options that can modify Sudo's behavior.
IPA server roles
IPA servers
IPA supports the use of OTP tokens for multi-factor authentication. This
code enables the management of OTP tokens.
IPA supports the use of an external RADIUS proxy server for krb5 OTP
authentications. This permits a great deal of flexibility when
integrating with third-party authentication services.
Implements a set of commands for managing server SSL certificates.
In order to request a certificate:
Joining an IPA domain
Manage Certificate Authorities
Manage DNS zone and resource records.
Manage OTP tokens.
Manage RADIUS Proxy Servers.
Manage YubiKey tokens.
Manage vaults.
Managed permissions
Manipulate DNS locations
Manipulate DNS server configuration
Misc plug-ins
Note that reason code 7 is not used. See RFC 5280 for more details:
Note the distinction between attributes and entries. The permissions are
independent, so being able to add a user does not mean that the user will
be editable.
OTP Tokens
Permissions
Plugins not accessible directly through the CLI, commands used internally
Provides API introspection capabilities.
RADIUS Proxy Servers
Raise the IPA Domain Level.
Removal of '%(hostname)s' leads to disconnected topology in suffix '%(suffix)s':
%(errors)s
Replication topology in suffix '%(suffix)s' is disconnected:
%(errors)s
Rights define what operations are allowed, and may be one or more
of the following:
1. write - write one or more attributes
2. read - read one or more attributes
3. search - search on one or more attributes
4. compare - compare one or more attributes
5. add - add a new entry to the tree
6. delete - delete an existing entry
7. all - all permissions are granted
SEARCHING:
Standard vault uses a secure mechanism to transport and
store the secret. The secret can only be retrieved by users
that have access to the vault.
Subordinate Certificate Authorities (Sub-CAs) can be added for scoped issuance
of X.509 certificates.
Sudo (su "do") allows a system administrator to delegate authority to
give certain users (or groups of users) the ability to run some (or all)
commands as root or another user while providing an audit trail of the
commands and their arguments.
Sudo Rules
Symmetric vault is similar to the standard vault, but it
pre-encrypts the secret using a password before transport.
The secret can only be retrieved using the same password.
The automember-rebuild command can be used to retroactively run automember rules
against existing entries, thus rebuilding their membership.
The date format is YYYY-mm-dd.
The dogtag CA uses just the CN value of the CSR and forces the rest of the
subject to values configured in the server.
The following revocation reasons are supported:
There are a number of allowed targets:
1. subtree: a DN; the permission applies to the subtree under this DN
2. target filter: an LDAP filter
3. target: DN with possible wildcards, specifies entries permission applies to
This code is an extension to the otptoken plugin and provides support for
reading/writing YubiKey tokens directly.
Topology
Management of a replication topology at domain level 1.
User vaults are vaults owned used by a particular user. Private
vaults are vaults owned the current user. Service vaults are
vaults owned by a service. Shared vaults are owned by the admin
but they can be used by other users or services.
Vaults
Verify replication topology for suffix.
Checks done:
1. check if a topology is not disconnected. In other words if there are
replication paths between all servers.
2. check if servers don't have more than the recommended number of
replication agreements
YubiKey Tokens
Alternatively, following servers are capable of running this command: %(masters)s "%s" is not a valid permission type "%s" is not an object type ${count} certificate(s) present ${count} item(s) added ${count} item(s) deleted ${count} item(s) disabled ${count} item(s) enabled ${count} item(s) removed ${count} option(s) removed ${count} user(s) activated ${count} user(s) restored ${count} users(s) staged ${entity} ${primary_key} Settings ${entity} ${primary_key} updated ${entity} successfully added ${primary_key} applies to: ${primary_key} is a member of: ${primary_key} is managed by: ${primary_key} members: ${primary_key} overrides: ${product}, version: ${version} %(attr)s does not contain '%(value)s' %(attr)s: Invalid syntax. %(attr)s: Only one value allowed. %(container)s LDAP search did not return any result (search base: %(search_base)s, objectclass: %(objectclass)s) %(count)d %(type)s record skipped. Only one value per DNS record type can be modified at one time. %(count)d %(type)s records skipped. Only one value per DNS record type can be modified at one time. %(count)d ACI matched %(count)d ACIs matched %(count)d CA ACL matched %(count)d CA ACLs matched %(count)d CA matched %(count)d CAs matched %(count)d DNS server matched %(count)d DNS servers matched %(count)d Group ID override matched %(count)d Group ID overrides matched %(count)d HBAC rule matched %(count)d HBAC rules matched %(count)d HBAC service group matched %(count)d HBAC service groups matched %(count)d HBAC service matched %(count)d HBAC services matched %(count)d ID View matched %(count)d ID Views matched %(count)d ID override matched %(count)d ID overrides matched %(count)d IPA location matched %(count)d IPA locations matched %(count)d IPA server matched %(count)d IPA servers matched %(count)d OTP token matched %(count)d OTP tokens matched %(count)d RADIUS proxy server matched %(count)d RADIUS proxy servers matched %(count)d SELinux User Map matched %(count)d SELinux User Maps matched %(count)d Sudo Command Group matched %(count)d Sudo Command Groups matched %(count)d Sudo Command matched %(count)d Sudo Commands matched %(count)d Sudo Rule matched %(count)d Sudo Rules matched %(count)d User ID override matched %(count)d User ID overrides matched %(count)d automount key matched %(count)d automount keys matched %(count)d automount location matched %(count)d automount locations matched %(count)d automount map matched %(count)d automount maps matched %(count)d certificate matched %(count)d certificates matched %(count)d delegation matched %(count)d delegations matched %(count)d group matched %(count)d groups matched %(count)d host matched %(count)d hosts matched %(count)d hostgroup matched %(count)d hostgroups matched %(count)d netgroup matched %(count)d netgroups matched %(count)d permission matched %(count)d permissions matched %(count)d plugin loaded %(count)d plugins loaded %(count)d privilege matched %(count)d privileges matched %(count)d profile matched %(count)d profiles matched %(count)d range matched %(count)d ranges matched %(count)d role matched %(count)d roles matched %(count)d rules matched %(count)d rules matched %(count)d segment matched %(count)d segments matched %(count)d selfservice matched %(count)d selfservices matched %(count)d service delegation rule matched %(count)d service delegation rules matched %(count)d service delegation target matched %(count)d service delegation targets matched %(count)d service matched %(count)d services matched %(count)d topology suffix matched %(count)d topology suffixes matched %(count)d trust matched %(count)d trusts matched %(count)d user matched %(count)d users matched %(count)d variables %(count)d vault matched %(count)d vaults matched %(count)s server role matched %(count)s server roles matched %(cver)s client incompatible with %(sver)s server at '%(server)s' %(filename)s: file not found %(host)s failed %(host)s failed: %(error)s %(info)s %(key)s cannot be deleted because %(label)s %(dependent)s requires it %(key)s cannot be deleted or disabled because it is the last member of %(label)s %(container)s %(label)s %(key)s cannot be deleted/modified: %(reason)s %(name)s certificate is not valid %(obj)s default attribute %(attr)s would not be allowed! %(oname)s with name "%(pkey)s" already exists %(operation)s is not supported for %(principal_type)s principals %(otype)s "%(oname)s" not found %(parent)s: %(oname)s not found %(pkey)s: %(oname)s not found %(port)s is not a valid port %(reason)s %(task)s LDAP task timeout, Task DN: '%(task_dn)s' %(type)s category cannot be set to 'all' while there are allowed %(objects)s %(user)s is not a POSIX user %(value)s %i CA added. %i CA removed. %i CAs added. %i CAs removed. %i host or hostgroup added. %i host or hostgroup removed. %i hosts or hostgroups added. %i hosts or hostgroups removed. %i profile added. %i profile removed. %i profiles added. %i profiles removed. %i service added. %i service removed. %i services added. %i services removed. %i user or group added. %i user or group removed. %i users or groups added. %i users or groups removed. %s Record %s is not a valid attribute. %s record %s to add %s to exclude from migration %s to remove %s: group not found %s: user is already preserved '${port}' is not a valid port '%(attr)s' already contains one or more values '%(command)s' is deprecated. %(additional_info)s '%(entry)s' doesn't have a certificate. '%(name)s' is required '%(option)s' option is deprecated. %(additional_info)s '%(required)s' must not be empty when '%(name)s' is set '%s' is a required part of DNS record 'add' option (deprecated) (see RFC %s for details) . Check GID of the existing group. Use --group-overwrite-gid option to overwrite the GID 7 is not a valid revocation reason <p>Implicit method (password) will be used if no method is chosen.</p><p><strong>Password + Two-factor:</strong> LDAP and Kerberos allow authentication with either one of the authentication types but Kerberos uses pre-authentication method which requires to use armor ccache.</p><p><strong>RADIUS with another type:</strong> Kerberos always use RADIUS, but LDAP never does. LDAP only recognize the password and two-factor authentication options.</p> <p>Per-user setting, overwrites the global setting if any option is checked.</p><p><strong>Password + Two-factor:</strong> LDAP and Kerberos allow authentication with either one of the authentication types but Kerberos uses pre-authentication method which requires to use armor ccache.</p><p><strong>RADIUS with another type:</strong> Kerberos always use RADIUS, but LDAP never does. LDAP only recognize the password and two-factor authentication options.</p> A IP Address A SYSTEM permission may not be modified or removed A description of this RADIUS proxy server A description of this auto member rule A description of this command A description of this host A description of this host-group A description of this role-group A dictionary representing an LDAP entry A group may not be a member of itself A group may not be added as a member of itself A host willing to act as a key exchanger A host willing to act as a mail exchanger A hostname which this alias hostname points to A list of ACI values A list of LDAP entries A list of SELinux users delimited by $ expected A list of global forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT" A list of per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT" A managed group cannot have a password policy. A problem was encountered when verifying that all members were %(verb)s: %(exc)s A record A space separated list of attributes which are removed from replication updates. A string searched in all relevant object attributes A6 Record data A6 record AAAA IP Address AAAA record ACI name ACI of permission %s was not found ACI prefix ACI prefix is required ACI with name "%s" not found ACIs ACL name AD DC was unable to reach any IPA domain controller. Most likely it is a DNS or firewall issue AD Trust setup AD domain controller AD domain controller complains about communication sequence. It may mean unsynchronized time on both sides, for example AFSDB Hostname AFSDB Subtype AFSDB record API Browser API Version number was not sent, forward compatibility not guaranteed. Assuming server's API version, %(server_version)s APL record About Access Denied Access Granted Access granted: %s Access this host Access time Accessing Account Account Settings Account Status Account disabled Account disabled: %(disabled)s Actions Activate Activate a stage user "%(value)s" Activate a stage user. Active Directory domain Active Directory domain administrator Active Directory domain administrator's password Active Directory domain range Active Directory domain with POSIX attributes Active Directory trust range with POSIX attributes Active directory domain administrator's password Active users Active zone Add Add CAs to a CA ACL. Add Custom Attribute Add Custom Authentication Indicator Add Kerberos Principal Alias Add Many Add a manager to the stage user entry Add a manager to the user entry Add a new DNS server. Add a new Group ID override. Add a new HBAC service group. Add a new HBAC service. Add a new ID View. Add a new ID override. Add a new IPA location. Add a new IPA new service. Add a new IPA service. Add a new OTP token. Add a new RADIUS proxy server. Add a new User ID override. Add a new YubiKey OTP token. Add a new delegation. Add a new group password policy. Add a new host. Add a new hostgroup. Add a new netgroup. Add a new permission. Add a new privilege. Add a new role. Add a new segment. Add a new self-service permission. Add a new topology suffix to be managed. Add a new user. Add a permission for per-forward zone access delegation. Add a permission for per-zone access delegation. Add a system permission without an ACI Add a system permission without an ACI (internal command) Add an attribute/value pair. Format is attr=value. The attribute
must be part of the schema. Add an automember rule. Add an option to the Sudo Rule. Add and Add Another Add and Close Add and Edit Add certificates to host entry Add commands and sudo command groups affected by Sudo Rule. Add conditions to an automember rule. Add custom value Add domain Add forward record for nameserver located in the created zone Add hosts and hostgroups affected by Sudo Rule. Add hosts that can manage this host. Add hosts that can manage this service. Add member to a named service delegation rule. Add member to a named service delegation target. Add members to Sudo Command Group. Add members to a group. Add members to a hostgroup. Add members to a netgroup. Add members to a permission. Add members to a privilege. Add members to a role. Add members to a vault. Add members to an HBAC service group. Add migrated users without a group to a default group (default: true) Add new DNS resource record. Add new certificates to a service Add new principal alias to a service Add new principal alias to host entry Add new principal alias to the user entry Add one or more certificates to the idoverrideuser entry Add one or more certificates to the user entry Add owners to a vault container. Add owners to a vault. Add permissions to a privilege. Add principal Add privileges to a role. Add profiles to a CA ACL. Add services to a CA ACL. Add services to an HBAC rule. Add source hosts and hostgroups from a HBAC rule. Add target hosts and hostgroups to a CA ACL. Add target hosts and hostgroups to an HBAC rule. Add target hosts and hostgroups to an SELinux User Map rule. Add target to a named service delegation rule. Add target to a named service delegation. Add the host to DNS with this IP address Add to default group Add users and groups affected by Sudo Rule. Add users and groups to a CA ACL. Add users and groups to an HBAC rule. Add users and groups to an SELinux User Map rule. Add users that can manage this token. Added %(map)s Added %(src)s to %(dst)s Added Active Directory trust for realm "%(value)s" Added CA ACL "%(value)s" Added Group ID override "%(value)s" Added HBAC rule "%(value)s" Added HBAC service "%(value)s" Added HBAC service group "%(value)s" Added ID View "%(value)s" Added ID override "%(value)s" Added ID range "%(value)s" Added IPA location "%(value)s" Added OTP token "%(value)s" Added RADIUS proxy server "%(value)s" Added SELinux User Map "%(value)s" Added Sudo Command "%(value)s" Added Sudo Command Group "%(value)s" Added Sudo Rule "%(value)s" Added User ID override "%(value)s" Added automember rule "%(value)s" Added automount indirect map "%(value)s" Added automount key "%(value)s" Added automount location "%(value)s" Added automount map "%(value)s" Added certificates to host "%(value)s" Added certificates to idoverrideuser "%(value)s" Added certificates to service principal "%(value)s" Added certificates to user "%(value)s" Added condition(s) to "%(value)s" Added delegation "%(value)s" Added group "%(value)s" Added host "%(value)s" Added hostgroup "%(value)s" Added netgroup "%(value)s" Added new DNS server "%(value)s" Added new aliases to host "%(value)s" Added new aliases to the service principal "%(value)s" Added new aliases to user "%(value)s" Added option "%(option)s" to Sudo Rule "%(rule)s" Added permission "%(value)s" Added privilege "%(value)s" Added role "%(value)s" Added segment "%(value)s" Added selfservice "%(value)s" Added service "%(value)s" Added service delegation rule "%(value)s" Added service delegation target "%(value)s" Added stage user "%(value)s" Added system permission "%(value)s" Added topology suffix "%(value)s" Added user "%(value)s" Added vault "%(value)s" Additional instructions: Address not valid, can't redirect Administrative account Administrator e-mail address Advertised by servers Agreements deleted Algorithm All All attributes to which the permission applies All commands should at least have a result Allow Allow PTR sync Allow access from the trusted domain Allow adding external non-IPA members from trusted domains Allow dynamic updates. Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only. Allow in-line DNSSEC signing Allow inline DNSSEC signing of records in the zone Allow query Allow synchronization of forward (A, AAAA) and reverse (PTR) records Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zone Allow transfer Allow use of IPA resources by the domain of the trust Allow users, groups, hosts or host groups to create a keytab of this host. Allow users, groups, hosts or host groups to create a keytab of this service. Allow users, groups, hosts or host groups to retrieve a keytab of this host. Allow users, groups, hosts or host groups to retrieve a keytab of this service. Allowed Target Allowed to Impersonate Allowed to create keytab Allowed to retrieve keytab Allows migration despite the usage of compat plugin Already registered Alternative UPN suffixes Altitude Always ask Ambiguous search, user domain was not specified An IPA master host cannot be deleted or disabled An error has occurred (${error}) An error occurred while fetching dns zones. An id range already exists for this trust. You should either delete the old range, or exclude --base-id/--range-size options from the command. An interval between regular polls of the name server for new DNS zones Anchor '%(anchor)s' could not be resolved. Any CA Any Command Any Group Any Host Any Profile Any Service Anyone Applied to hosts Applies ID View to specified hosts or current members of specified hostgroups. If any other ID View is applied to the host, it is overridden. Applies ID View to specified hosts or current members of specified hostgroups. If any other ID View is applied to the host, it is overriden. Apply Apply ACI to your own entry (self) Apply to host groups Apply to hosts Archive data into a vault. Archived data into vault "%(value)s" Are you sure you want to ${action} the user?<br/>The change will take effect immediately. Are you sure you want to activate ${object}? Are you sure you want to activate selected users? Are you sure you want to add permission for DNS Zone ${object}? Are you sure you want to delete ${object}? Are you sure you want to delete selected entries? Are you sure you want to disable ${object}? Are you sure you want to disable selected entries? Are you sure you want to enable ${object}? Are you sure you want to enable selected entries? Are you sure you want to proceed with the action? Are you sure you want to remove permission for DNS Zone ${object}? Are you sure you want to restore ${object}? Are you sure you want to restore selected users? Are you sure you want to stage ${object}? Are you sure you want to stage selected users? Are you sure you want to un-apply ID view from selected entries? Are you sure you want to unlock user ${object}? As Whom Asks for a non-random password to use for the principal Assigned ID View Assigned manager of the token (default: self) Assigned user of the token (default: self) At least the domain or IP address should be specified Attribute Attribute Key Attribute breakdown Attribute to filter via regex. For example fqdn for a host, or manager for a user Attributes Attributes for total update Attributes to be ignored for group entries in DS Attributes to be ignored for user entries in DS Attributes to replicate Attributes to which the permission applies by default Attributes to which the permission applies. Audit Authentication Authentication Indicators Authentication indicator Authentication indicators Authoritative nameserver Authoritative nameserver change Authoritative nameserver domain name Authority ID Auto Membership Rule Auto Membership is not configured Auto member rule: %s not found! Autogenerated Automatic update of DNS system records failed. Please re-run update of system records manually to get list of missing records. Automember Automember Rule Automember rebuild membership task completed Automember rebuild membership task started Automount Automount Key Automount Keys Automount Location Automount Location Settings Automount Locations Automount Map Automount Maps Automount key name. Automount key object. Automount location name. Automount map name. Automount master file. Available BIND update policy Back Back to Top Bad format in credentials cache Bad or unsupported salt type.
Bad search filter Bad search filter %(info)s Base DN Base DN on remote LDAP server Base ID Base-64 encoded certificate. Base-64 encoded host certificate Base-64 encoded server certificate Base-64 encoded service certificate Base-64 encoded user certificate Base64 decoding failed: %(reason)s Bind DN Bind rule type Brief description of this profile CA '%s' is disabled CA category CA category cannot be set to 'all' while there are allowed CAs CA category the ACL applies to CA certificate CA is not configured CAs cannot be added when CA category='all' CERT Algorithm CERT Certificate Type CERT Certificate/CRL CERT Key Tag CERT record CIFS credentials object CIFS server %(host)s denied your credentials CIFS server communication error: code "%(num)s", message "%(message)s" (both may be "None") CIFS server denied your credentials CLI name CNAME Hostname CNAME record CNAME record is not allowed to coexist with any other record (RFC 1034, section 3.6.2) Cancel Cannot create reverse record for "%(value)s": %(exc)s Cannot decode file '%(filename)s': %(exc)s Cannot establish LSA connection to %(host)s. Is CIFS server running? Cannot establish a trust to AD deployed in the same domain as IPA. Such setup is not supported. Cannot find specified domain or server name Cannot perform SID validation without Samba 4 support installed. Make sure you have installed server-trust-ad sub-package of IPA on the server Cannot perform external member validation without Samba 4 support installed. Make sure you have installed server-trust-ad sub-package of IPA on the server Cannot perform join operation without own domain configured. Make sure you have run ipa-adtrust-install on the IPA server first Cannot perform the selected command without Samba 4 instance configured on this machine. Make sure you have run ipa-adtrust-install on this server. Cannot perform the selected command without Samba 4 support installed. Make sure you have installed server-trust-ad sub-package of IPA. Cannot read file '%(filename)s': %(exc)s Cannot resolve KDC for requested realm Cannot retrieve trusted domain GC list Cannot search in trusted domains without own domain configured. Make sure you have run ipa-adtrust-install on the IPA server first Cannot store permission ACI to %s Cannot use %(old_name)s with %(new_name)s Car License Certificate Certificate Association Data Certificate Authorities Certificate Authority Certificate Hold Removed Certificate Profile Certificate Profile to use Certificate Profiles Certificate Profiles to add Certificate Profiles to remove Certificate Revoked Certificate Type Certificate Usage Certificate for ${entity} ${primary_key} Certificate format error: %(error)s Certificate in base64 or PEM format Certificate operation cannot be completed: %(error)s Certificate profiles cannot be renamed Certificate requested Certificate with serial number %(serial)s issued by CA '%(ca)s' not found Certificate(s) stored in file '%(file)s' Certificate/CRL Certificates Change current Domain Level. Change password Change to POSIX group Change to external group Changed password for "%(value)s" Character classes Check DNS Check connection to remote IPA server. Check the status of a certificate signing request. Checking if record exists. Checks if any of the servers has the CA service enabled. Checks if any of the servers has the DNS service enabled. City Class Clears ID View from specified hosts or current members of specified hostgroups. Click to ${action} Client credentials may be delegated to the service Client is not configured. Run ipa-client-install. Client version. Used to determine if server will accept request. Clock interval Clock offset Close Closing keytab failed
Collapse All Comma separated encryption types list Comma-separated list of attributes Comma-separated list of attributes to be ignored for group entries in DS Comma-separated list of attributes to be ignored for user entries in DS Comma-separated list of objectclasses to be ignored for group entries in DS Comma-separated list of objectclasses to be ignored for user entries in DS Comma-separated list of objectclasses used to search for group entries in DS Comma-separated list of objectclasses used to search for user entries in DS Comma-separated list of permissions to grant (read, write). Default is write. Comma-separated list of permissions to grant (read, write, add, delete, all) Comma-separated list of raw A records Comma-separated list of raw A6 records Comma-separated list of raw AAAA records Comma-separated list of raw AFSDB records Comma-separated list of raw APL records Comma-separated list of raw CERT records Comma-separated list of raw CNAME records Comma-separated list of raw DHCID records Comma-separated list of raw DLV records Comma-separated list of raw DNAME records Comma-separated list of raw DNSKEY records Comma-separated list of raw DS records Comma-separated list of raw HIP records Comma-separated list of raw IPSECKEY records Comma-separated list of raw KEY records Comma-separated list of raw KX records Comma-separated list of raw LOC records Comma-separated list of raw MX records Comma-separated list of raw NAPTR records Comma-separated list of raw NS records Comma-separated list of raw NSEC records Comma-separated list of raw NSEC3 records Comma-separated list of raw NSEC3PARAM records Comma-separated list of raw PTR records Comma-separated list of raw RP records Comma-separated list of raw RRSIG records Comma-separated list of raw SIG records Comma-separated list of raw SPF records Comma-separated list of raw SRV records Comma-separated list of raw SSHFP records Comma-separated list of raw TA records Comma-separated list of raw TKEY records Comma-separated list of raw TSIG records Comma-separated list of raw TXT records Command '%(name)s' has been deprecated Command category Command category the rule applies to Command name Command not implemented Commands Common Name Conditions that could not be added Conditions that could not be removed Configuration Configure your token Configure your token by scanning the QR code below. Click on the QR code if you see this on the device you want to configure. Configured administrative server limit exceeded Configured size limit exceeded Configured time limit exceeded Confirm (password) Confirmation Connectivity Consecutive failures before lockout Contact Settings Contact this specific KDC Server Continue Continuous mode: Don't stop on errors. Continuous operation mode. Errors are reported but the process continues Continuous operation mode. Errors are reported but the process continues. Convert on server Could not get %(name)s interactively Could not read UPG Definition originfilter. Check your permissions. Counter Counter-based (HOTP) Create Stage user in from a delete user Create a CA. Create a new CA ACL. Create a new HBAC rule. Create a new SELinux User Map. Create a new automount key. Create a new automount location. Create a new automount map. Create a new group. Create a new indirect mount point. Create a new service delegation rule. Create a new service delegation target. Create a new vault. Create as a non-POSIX group Create dns record Create new ACI. Create new DNS forward zone. Create new DNS zone (SOA record). Create new Sudo Command Group. Create new Sudo Command. Create new Sudo Rule. Create reverse Create reverse record for this IP Address Created ACI "%(value)s" Created CA "%(value)s" Creating record. Credentials cache permissions incorrect Cross-realm trusts are not configured. Make sure you have run ipa-adtrust-install on the IPA server first Current DNS record contents:
Current Password Current domain level: Current password is required Custom value DHCID record DLV Algorithm DLV Digest DLV Digest Type DLV Key Tag DLV record DN commonName does not match user's login DN emailAddress does not match any of user's email addresses DN of container for groups in DS relative to base DN DN of container for users in DS relative to base DN DN of the started task DN to bind as if not using kerberos DNAME Target DNAME record DNS DNS Forward Zone DNS Forward Zones DNS Global Configuration DNS RR type "%s" is not supported by bind-dyndb-ldap plugin DNS Resource Record DNS Resource Records DNS Server DNS Server name DNS Servers DNS Zone DNS Zone Settings DNS Zones DNS check failed: Expected {%(expected)s} got {%(got)s} DNS class DNS configuration options DNS forward zone DNS forward zones DNS forwarder semantics changed since IPA 4.0.
You may want to use forward zones (dnsforwardzone-*) instead.
For more details read the docs. DNS is not configured DNS label cannot be longer than 63 characters DNS label cannot be longer that 63 characters DNS record was deleted because it contained no data. DNS record(s) of host %(host)s could not be removed. (%(reason)s) DNS records can be only updated one at a time DNS resource record DNS resource record type DNS resource records DNS reverse zone %(revzone)s for IP address %(addr)s is not managed by this server DNS server DNS server %(server)s does not support DNSSEC: %(error)s.
If DNSSEC validation is enabled on IPA server(s), please disable it. DNS server %(server)s does not support EDNS0 (RFC 6891): %(error)s.
If DNSSEC validation is enabled on IPA server(s), please disable it. DNS server %(server)s: %(error)s. DNS servers DNS zone DNS zone %(zone)s not found DNS zone for each realmdomain must contain SOA or NS records. No records found for: %s DNS zone root record cannot be renamed DNS zones DNSKEY record DNSSEC support is experimental.
%(additional_info)s DNSSEC validation failed: %(error)s.
Please verify your DNSSEC configuration or disable DNSSEC validation on all IPA servers. DS Algorithm DS Digest DS Digest Type DS Key Tag DS record DS record must not be in zone apex (RFC 4035 section 2.4) DS record requires to coexist with an NS record (RFC 4592 section 4.6, RFC 4035 section 2.4) Data Debugging output Default Default (fallback) Group Default PAC types Default SELinux user Default SELinux user when no match is found in SELinux map rule Default Trust View cannot be applied on hosts Default Trust View cannot contain IPA users Default attributes Default e-mail domain Default from Default group for new users Default group for new users is not POSIX Default group for new users not found Default group objectclasses Default group objectclasses (comma-separated list) Default host group Default location of home directories Default shell Default shell for new users Default ticket policy could not be read Default time to live Default types of PAC supported for services Default types of supported user authentication Default user authentication types Default user group Default user objectclasses Default user objectclasses (comma-separated list) Default users group Delegation Delegation name Delegations Delete Delete %(name)s '%(value)s'? Delete ACI. Delete DNS forward zone. Delete DNS record entry. Delete DNS resource record. Delete DNS zone (SOA record). Delete IPA server. Delete Key, Unprovision Delete Server Delete Sudo Command Group. Delete Sudo Command. Delete Sudo Rule. Delete a CA ACL. Delete a Certificate Profile. Delete a DNS server Delete a RADIUS proxy server. Delete a SELinux User Map. Delete a delegation. Delete a group password policy. Delete a host. Delete a hostgroup. Delete a netgroup. Delete a permission. Delete a privilege. Delete a role. Delete a segment. Delete a self-service permission. Delete a stage user. Delete a topology suffix. Delete a trust. Delete a user Delete a user, keeping the entry available for future use Delete a user. Delete a vault container. Delete a vault. Delete all associated records Delete all? Delete an Group ID override. Delete an HBAC rule. Delete an HBAC service group. Delete an ID View. Delete an ID override. Delete an ID range. Delete an IPA location. Delete an IPA service. Delete an OTP token. Delete an User ID override. Delete an automember rule. Delete an automount key. Delete an automount location. Delete an automount map. Delete an existing HBAC service. Delete domain Delete group. Delete mode Delete service delegation target. Delete service delegation. Deleted ACI "%(value)s" Deleted CA "%(value)s" Deleted CA ACL "%(value)s" Deleted DNS forward zone "%(value)s" Deleted DNS server "%(value)s" Deleted DNS zone "%(value)s" Deleted Group ID override "%(value)s" Deleted HBAC rule "%(value)s" Deleted HBAC service "%(value)s" Deleted HBAC service group "%(value)s" Deleted ID View "%(value)s" Deleted ID override "%(value)s" Deleted ID range "%(value)s" Deleted IPA location "%(value)s" Deleted IPA server "%(value)s" Deleted OTP token "%(value)s" Deleted RADIUS proxy server "%(value)s" Deleted SELinux User Map "%(value)s" Deleted Sudo Command "%(value)s" Deleted Sudo Command Group "%(value)s" Deleted Sudo Rule "%(value)s" Deleted User ID override "%(value)s" Deleted automember rule "%(value)s" Deleted automount key "%(value)s" Deleted automount location "%(value)s" Deleted automount map "%(value)s" Deleted delegation "%(value)s" Deleted group "%(value)s" Deleted host "%(value)s" Deleted hostgroup "%(value)s" Deleted netgroup "%(value)s" Deleted permission "%(value)s" Deleted privilege "%(value)s" Deleted profile "%(value)s" Deleted record "%(value)s" Deleted role "%(value)s" Deleted segment "%(value)s" Deleted selfservice "%(value)s" Deleted service "%(value)s" Deleted service delegation "%(value)s" Deleted service delegation target "%(value)s" Deleted stage user "%(value)s" Deleted topology suffix "%(value)s" Deleted trust "%(value)s" Deleted user "%(value)s" Deleted vault "%(value)s" Deleted vault container Deleting a managed group is not allowed. It must be detached first. Deleting a server removes it permanently from the topology. Note that this is a non-reversible action. Deleting this server is not allowed as it would leave your installation without a CA. Deleting this server will leave your installation without a DNS. Deny Department Number Deprecated options Deprecated; use %s Deprecated; use extratargetfilter Description Description of the purpose of the CA Detached group "%(value)s" from user "%(value)s" Detect Determine whether Schema Compatibility plugin is configured to serve trusted domain users and groups Determine whether ipa-adtrust-install has been run on this system Dict of I18N messages Dict of JSON encoded IPA Commands Dict of JSON encoded IPA Methods Dict of JSON encoded IPA Objects Digest Digest Type Digits Direct Direct Membership Direction Latitude Direction Longitude Disable Disable DNS Forward Zone. Disable DNS Zone. Disable a CA ACL. Disable a CA. Disable a Sudo Rule. Disable a user account. Disable an HBAC rule. Disable an SELinux User Map rule. Disable per-user override Disable the Kerberos key and SSL certificate of a service. Disable the Kerberos key, SSL certificate and all services of a host. Disable token Disable use of IPA resources by the domain of the trust Disabled Disabled CA "%(value)s" Disabled CA ACL "%(value)s" Disabled DNS forward zone "%(value)s" Disabled DNS zone "%(value)s" Disabled HBAC rule "%(value)s" Disabled SELinux User Map "%(value)s" Disabled Sudo Rule "%s" Disabled host "%(value)s" Disabled service "%(value)s" Disabled trust domain "%(value)s" Disabled user account "%(value)s" Disallow users, groups, hosts or host groups to create a keytab of this host. Disallow users, groups, hosts or host groups to create a keytab of this service. Disallow users, groups, hosts or host groups to retrieve a keytab of this host. Disallow users, groups, hosts or host groups to retrieve a keytab of this service. Display DNS resource. Display Sudo Command Group. Display Sudo Command. Display Sudo Rule. Display a segment. Display a single ACI given an ACI name. Display an automount key. Display an automount location. Display an automount map. Display configuration of a DNS server. Display current entitlements. Display effective policy for a specific user Display information about a DNS forward zone. Display information about a DNS zone (SOA record). Display information about a RADIUS proxy server. Display information about a class. Display information about a command output. Display information about a command parameter. Display information about a command. Display information about a delegation. Display information about a help topic. Display information about a host. Display information about a hostgroup. Display information about a named group. Display information about a named service delegation rule. Display information about a named service delegation target. Display information about a netgroup. Display information about a permission. Display information about a privilege. Display information about a range. Display information about a role. Display information about a self-service permission. Display information about a stage user. Display information about a trust. Display information about a user. Display information about a vault container. Display information about a vault. Display information about an Group ID override. Display information about an HBAC service group. Display information about an HBAC service. Display information about an ID View. Display information about an ID override. Display information about an IPA location. Display information about an IPA service. Display information about an OTP token. Display information about an User ID override. Display information about an automember rule. Display information about password policy. Display information about the default (fallback) automember groups. Display name Display the access rights of this entry (requires --all). See ipa man page for details. Display the current Kerberos ticket policy. Display the list of realm domains. Display the properties of a CA ACL. Display the properties of a CA. Display the properties of a Certificate Profile. Display the properties of a SELinux User Map rule. Display the properties of an HBAC rule. Display user record for current Kerberos principal Do not display QR code Do not update records only return expected records Do you also want to perform DNS check? Do you want to check if new authoritative nameserver address is in DNS Do you want to remove kerberos alias ${alias}? Do you want to remove the certificate hold? Do you want to revoke this certificate? Select a reason from the pull-down list. Do you want to update system DNS records? Documentation Dogtag Authority ID Domain Domain '%(domain)s' is not a root domain for forest '%(forest)s' Domain GUID Domain Level Domain Level cannot be lowered. Domain Level cannot be raised to {0}, server {1} does not support it. Domain NetBIOS name Domain SID Domain SID of the trusted domain Domain Security Identifier Domain controller for the Active Directory domain (optional) Domain enabled Domain name Don't create user private group Download Download certificate as PEM formatted file. Duplicate keys skipped: Duplicate maps skipped: Dynamic update Edit Edit ${entity} Effective attributes Email address Employee Information Employee Number Employee Type Enable Enable DNS Forward Zone. Enable DNS Zone. Enable a CA ACL. Enable a CA. Enable a Sudo Rule. Enable a user account. Enable an HBAC rule. Enable an SELinux User Map rule. Enable migration mode Enable or Disable Anonymous PKINIT. Enable token Enabled Enabled CA "%(value)s" Enabled CA ACL "%(value)s" Enabled DNS forward zone "%(value)s" Enabled DNS zone "%(value)s" Enabled HBAC rule "%(value)s" Enabled SELinux User Map "%(value)s" Enabled Sudo Rule "%s" Enabled server roles Enabled trust domain "%(value)s" Enabled user account "%(value)s" Encryption types to request Enctype comparison failed!
Enrolled Enrollment Enrollment UUID Enrollment UUID (not implemented) Enrollment failed. %s
Enter %(label)s again to verify: Enter trusted group name. Enter trusted or IPA group name. Note: search doesn't list groups from trusted domains. Enter trusted or IPA user login. Note: search doesn't list users from trusted domains. Enter trusted user login. Entry Entry %s does not exist Entry %s not found Entry RDN is not 'uid' Entry has no '%(attribute)s' Enumerate all the hosts the view applies to. Error Error changing account status Error getting default Kerberos realm: %s.
Error obtaining initial credentials: %s.
Error parsing "%1$s": %2$s.
Error resolving keytab: %s.
Error storing creds in credential cache: %s.
Establish bi-directional trust. By default trust is inbound one-way only. Establish external trust to a domain in another forest. The trust is not transitive beyond the domain. Establish using Established and verified Exchanger Exclude from Excluded attributes Exclusive Exclusive Regex Expand All Expires On Export plugin meta-data for the webUI. Expression External External Group the commands can run as (sudorule-find only) External Groups of RunAs Users External Groups of users that the command can run as External User External User the commands can run as (sudorule-find only) External User the rule applies to (sudorule-find only) External host External member External trust Extra target filter Failed RunAs Failed RunAsGroup Failed allowed to create keytab Failed allowed to retrieve keytab Failed hosts/hostgroups Failed logins Failed members Failed owners Failed profiles Failed service/service groups Failed source hosts/hostgroups Failed targets Failed to add Failed to add key to the keytab
Failed to add user to the default group. Use 'ipa group-add-member' to add manually. Failed to bind to server!
Failed to clean memberPrincipal %(principal)s from s4u2proxy entry %(dn)s: %(err)s Failed to clean up Custodia keys for %(master)s: %(err)s Failed to clean up DNA hostname entries for %(master)s: %(err)s Failed to cleanup %(hostname)s DNS entries: %(err)s Failed to cleanup server principals/keys: %(err)s Failed to close the keytab
Failed to create control!
Failed to create key material
Failed to create key!
Failed to create random key!
Failed to decode control reply!
Failed to get keytab
Failed to get keytab!
Failed to get result: %s
Failed to open Keytab
Failed to open config file %s
Failed to open keytab
Failed to open keytab '%1$s': %2$s
Failed to parse config file %s
Failed to parse extended result: %s
Failed to parse result: %s
Failed to remove Failed to remove server %(master)s from server list: %(err)s Failed to retrieve any keys Failed to retrieve encryption type %1$s (#%2$d)
Failed to retrieve encryption type type #%d
Failed users/groups Failure decoding Certificate Signing Request: %s Failure reset interval Fallback primary group Fallback to AD DC LDAP False if migration fails because the compatibility plug-in is enabled. False if migration mode was disabled. Fax Number Fetch domains Fetching DNS zones. Fetching domains from trusted forest failed. See details in the error_log File %(file)s not found File containing profile configuration File containing the new vault password File containing the new vault public key File containing the old vault password File containing the old vault private key File containing the vault password File containing the vault private key File containing the vault public key File to load the certificate from. File to store retrieved data File to store the certificate in. Filename is empty Filename of a raw profile. The XML format is not supported. Filter Filter available ${other_entity} Find Find a server role on a server(s) Fingerprint Fingerprint (SHA1) Fingerprint Type Fingerprint of schema cached by client Fingerprints First First Code First OTP First Posix ID of the range First Posix ID of the range reserved for the trusted domain First RID of the corresponding RID range First RID of the secondary RID range First date/time the token can be used First name Flags Following segments were not deleted: Force Force DNS zone creation even if it will overlap with an existing zone. Force DNS zone creation even if nameserver is not resolvable. Force DNS zone creation even if nameserver is not resolvable. (Deprecated) Force Update Force adding domain even if not in DNS Force nameserver change even if nameserver not in DNS Force server removal Force server removal even if it does not exist Force the host join. Rejoin even if already joined. Forcing removal of %(hostname)s Format error Forward policy Forward policy is defined for it in IPA DNS, perhaps forwarder points to incorrect host? Forward to server instead of running locally Forward zones only Forwarders Forwarding disabled Found '%(value)s' Full name Fully Qualified Host Name GECOS field GID GID (use this option to set it manually) General Generate OTP Generate a random password to be used in bulk enrollment Generate a random user password Generate automount files for a specific location. Generated OTP Get Get Certificate Global DNS configuration is empty Global Trust Configuration Global forwarders Global forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT" Global forwarding policy. Set to "none" to disable any configured global forwarders. Granted rights Granted to Privilege Granting privilege to roles Group Group '%s' does not exist Group ID Number Group ID override Group ID overrides Group Options Group Settings Group Type Group container Group description Group name Group object class Group object overrides Group search fields Group to override Grouping Type Grouping to which the rule applies Groups Groups allowed to create keytab Groups allowed to retrieve keytab Groups of RunAs Users HBAC Rule HBAC Rule that defines the users, groups and hostgroups HBAC Rules HBAC Service HBAC Service Group HBAC Service Groups HBAC Services HBAC Test HBAC rule HBAC rule %(rule)s not found HBAC rule and local members cannot both be set HBAC rules HBAC service HBAC service description HBAC service group HBAC service group description HBAC service groups HBAC service groups to add HBAC service groups to remove HBAC services HBAC services to add HBAC services to remove HIP record HOTP Authentication Window HOTP Synchronization Window HTTP Error Hardware MAC address(es) on this host Hardware platform of the host (e.g. Lenovo T61) Help topic Hide Hide details Hide details which rules are matched, not matched, or invalid History size Home directory Home directory base Horizontal Precision Host Host '%(host)s' not found Host '%(hostname)s' does not have corresponding DNS A/AAAA record Host Certificate Host Group Host Group Settings Host Groups Host Groups allowed to create keytab Host Groups allowed to retrieve keytab Host Name Host Settings Host category Host category (semantics placed on this attribute are for local interpretation) Host category the ACL applies to Host category the rule applies to Host group rule Host group rules Host hardware platform (e.g. "Lenovo T61") Host is already joined.
Host is not supported Host locality (e.g. "Baltimore, MD") Host location (e.g. "Lab 2") Host name Host operating system and version (e.g. "Fedora 9") Host unprovisioned Host-based access control commands Host-group Hostgroups to whose hosts apply the ID View to. Please note that view is not applied automatically to any hosts added to the hostgroup after running the idview-apply command. Hostname Hostname (FQDN) Hostname of this server Hosts Hosts allowed to create keytab Hosts allowed to retrieve keytab Hosts or hostgroups that ID View could not be cleared from. Hosts or hostgroups that this ID View could not be applied to. Hosts that this ID View was applied to. Hosts the view applies to Hosts to apply the ID View to How long should negative responses be cached ID Range ID Ranges ID View ID View Name ID View already applied ID View applied to %i host. ID View applied to %i hosts. ID View cleared from %i host. ID View cleared from %i hosts. ID Views ID override ID overrides cannot be renamed ID range for the trusted domain already exists, but it has a different type. Please remove the old range manually, or do not enforce type via --range-type option. ID range type, one of ipa-ad-trust-posix, ipa-ad-trust, ipa-local ID range with the same name but different domain SID already exists. The ID range for the new trusted domain must be created manually. IP Address IP address %(ip)s is already assigned in domain %(domain)s. IP network to create reverse zone name from IPA AD trust agents IPA AD trust controllers IPA CA cannot be deleted IPA CA cannot be disabled IPA CA renewal master IPA CA servers IPA DNS records IPA DNS servers IPA DNS version IPA DNSSec key master IPA Error IPA KRA servers IPA Location IPA Location description IPA Locations IPA Range type must be one of ipa-ad-trust or ipa-ad-trust-posix when SID of the trusted domain is specified IPA Range type must not be one of ipa-ad-trust or ipa-ad-trust-posix when SID of the trusted domain is not specified. IPA Server IPA Server Role IPA Server Roles IPA Server to use IPA Servers IPA does not manage the zone %(zone)s, please add records to your DNS server manually IPA location name IPA location records IPA master denied trust validation requests from AD DC %(count)d times. Most likely AD DC contacted a replica that has no trust information replicated yet. Additionally, please check that AD DNS is able to resolve %(records)s SRV records to the correct IPA server. IPA masters IPA namingContext not found
IPA object IPA role name IPA server configured as DNSSec key master IPA server domain cannot be deleted IPA server domain cannot be omitted IPA server hostname IPA server role name IPA servers configured as AD trust agents IPA servers configured as AD trust controllers IPA servers configured as certificate authority IPA servers configured as key recovery agents IPA trust IPA unique ID IPSECKEY record Identity Identity Settings If no CAs are specified, requests to the default CA are allowed. If the problem persists please contact the system administrator. Ignore check for last remaining CA or DNS server Ignore compat plugin Ignore group attribute Ignore group object class Ignore topology connectivity problems after removal Ignore topology errors Ignore user attribute Ignore user object class Ignored %(src)s to %(dst)s Ignored keys: Ignoring these warnings and proceeding with removal Ignoring topology connectivity errors. Import a Certificate Profile. Import an entitlement certificate. Import automount files for a specific location. Imported keys: Imported maps: Imported profile "%(value)s" Include Disabled Include Enabled Include all disabled IPA rules into test Include all enabled IPA rules into test [default] Include in Included attributes Inclusive Inclusive Regex Incompatible options provided (-r and -P)
Indirect Indirect Member HBAC service Indirect Member HBAC service group Indirect Member groups Indirect Member host-groups Indirect Member hosts Indirect Member netgroups Indirect Member of HBAC rule Indirect Member of Sudo rule Indirect Member of group Indirect Member of host-group Indirect Member of netgroup Indirect Member of role Indirect Member of roles Indirect Member permissions Indirect Member users Indirect Membership Inherited from server configuration Initial counter for the HOTP token Initialize left node Initialize right node Initials Input data specified multiple times Input filename Input form contains invalid or missing values. Insufficient 'add' privilege for entry '%s'. Insufficient 'write' privilege to the 'krbLastPwdChange' attribute of entry '%s'. Insufficient 'write' privilege to the 'userCertificate' attribute of entry '%s'. Insufficient access: %(info)s Insufficient privilege to create a certificate with subject alt name '%s'. Internal Error Invalid JSON-RPC request: %(error)s Invalid LDAP URI. Invalid Service Principal Name
Invalid credentials Invalid format. Should be name=value Invalid number of parts! Invalid or unsupported type. Allowed values are: %s Invalid or unsupported vault public key: %s Invalid vault type Is zone active? Issue Issued By Issued On Issued To Issued on from Issued on to Issuer Issuer DN Issuer Distinguished Name Issuing CA It is used only for setting the SOA MNAME attribute. Job Title Join an IPA domain KEY Algorithm KEY Flags KEY Protocol KEY Public Key KEY record KRA service is not enabled KX Exchanger KX Preference KX record Kerberos Credential Cache not found. Do you have a Kerberos Ticket?
Kerberos Key Kerberos Key Not Present Kerberos Key Present, Host Provisioned Kerberos Key Present, Service Provisioned Kerberos Service Principal Name Kerberos Ticket Policy Kerberos User Principal not found. Do you have a valid Credential Cache?
Kerberos context initialization failed
Kerberos context initialization failed: %1$s (%2$d)
Kerberos error: %(major)s/%(minor)s Kerberos keys available Kerberos principal Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually. Kerberos principal expiration Kerberos principal name for this host Key Key Compromise Key Tag Keytab File Name Keytab successfully retrieved and stored in: %s
LDAP URI LDAP password LDAP password (if not using Kerberos) LDAP schema LDAP search scope for users and groups: base, onelevel, or subtree. Defaults to onelevel LDAP suffix to be managed LDAP timeout LOC Altitude LOC Direction Latitude LOC Direction Longitude LOC Horizontal Precision LOC Minutes Latitude LOC Minutes Longitude LOC Seconds Latitude LOC Seconds Longitude LOC Size LOC Vertical Precision LOC record Label Labels Last Last date/time the token can be used Last failed authentication Last name Last successful authentication Leading and trailing spaces are not allowed Left node Left replication node - an IPA server Legal LDAP filter (e.g. ou=Engineering) Length of TOTP token code validity Level List all service vaults List all user vaults List of IPA masters configured as DNS servers List of all IPA masters List of deletions that failed List of enabled roles List of servers which advertise the given location List of trust domains successfully refreshed. Use trustdomain-find command to list them. Lists of objects migrated; categorized by type. Lists of objects that could not be migrated; categorized by type. Load CA certificate of LDAP server from FILE Local domain Locality Location Location name Location of the ACI Lockout duration Logged In As Login shell Lower number means higher priority. Clients will attempt to contact the URI with the lowest-numbered priority they can reach. Lower number means higher priority. Clients will attempt to contact the server with the lowest-numbered priority they can reach. MAC address MX Exchanger MX Preference MX record Mailing Address Malformed principal: '%(value)s' Manage password policy for specific group Manage ticket policy for specific user Managed LDAP suffix DN Managed suffix Managed suffixes Managed topology requires minimal domain level ${domainlevel} Manager Managing Map Map Type Mark the token as disabled (default: false) Master file Matched Matched rules Matching Type Max domain level Max failures Max life Max lifetime (days) Maximum amount of time (seconds) for a search (-1 or 0 is unlimited) Maximum amount of time (seconds) for a search (> 0, or -1 for unlimited) Maximum domain level Maximum number of certs returned Maximum number of entries returned Maximum number of entries returned (0 is unlimited) Maximum number of records to search (-1 is unlimited) Maximum number of records to search (-1 or 0 is unlimited) Maximum number of rules to process when no --rules is specified Maximum password lifetime (in days) Maximum serial number Maximum ticket life (seconds) Maximum username length Maximum value is ${value} May not be empty Member Group Member HBAC service Member HBAC service groups Member Host Member Hostgroup Member Sudo commands Member User Member groups Member host-groups Member hosts Member netgroups Member of Member of HBAC rule Member of HBAC service groups Member of Sudo rule Member of a group Member of group Member of groups Member of host-groups Member of netgroups Member principals Member service groups Member services Member users Members of a trusted domain in DOM\name or name@domain form Members that could not be added Members that could not be removed Method name Method of Migrate users and groups from DS to IPA. Migration mode is disabled.
Use 'ipa config-mod --enable-migration=TRUE' to enable it. Migration of LDAP search reference is not supported. Min domain level Min length Min lifetime (hours) Minimum domain level Minimum length of password Minimum number of character classes Minimum password lifetime (in hours) Minimum serial number Minimum value is ${value} Minutes Latitude Minutes Longitude Misc. Information Missing new vault public key Missing or invalid HTTP Referer, %(referer)s Missing reply control list!
Missing reply control!
Missing values: Missing vault private key Missing vault public key Mobile Telephone Number Model Modified Modified "%(value)s" trust configuration Modified ACI "%(value)s" Modified CA "%(value)s" Modified CA ACL "%(value)s" Modified Certificate Profile "%(value)s" Modified DNS server "%(value)s" Modified HBAC rule "%(value)s" Modified HBAC service "%(value)s" Modified HBAC service group "%(value)s" Modified ID range "%(value)s" Modified IPA location "%(value)s" Modified IPA server "%(value)s" Modified OTP token "%(value)s" Modified RADIUS proxy server "%(value)s" Modified SELinux User Map "%(value)s" Modified Sudo Command "%(value)s" Modified Sudo Command Group "%(value)s" Modified Sudo Rule "%(value)s" Modified an Group ID override "%(value)s" Modified an ID View "%(value)s" Modified an ID override "%(value)s" Modified an User ID override "%(value)s" Modified automember rule "%(value)s" Modified automount key "%(value)s" Modified automount map "%(value)s" Modified delegation "%(value)s" Modified group "%(value)s" Modified host "%(value)s" Modified hostgroup "%(value)s" Modified netgroup "%(value)s" Modified permission "%(value)s" Modified privilege "%(value)s" Modified role "%(value)s" Modified segment "%(value)s" Modified selfservice "%(value)s" Modified service "%(value)s" Modified stage user "%(value)s" Modified topology suffix "%(value)s" Modified trust "%(value)s" (change will be effective in 60 seconds) Modified user "%(value)s" Modified vault "%(value)s" Modified: key not set Modify %(name)s '%(value)s'? Modify ACI. Modify CA configuration. Modify Certificate Profile configuration. Modify DNS forward zone. Modify DNS server configuration Modify DNS zone (SOA record). Modify ID range. Modify Kerberos ticket policy. Modify OTP configuration options. Modify Sudo Command Group. Modify Sudo Command. Modify Sudo Rule. Modify a CA ACL. Modify a DNS resource record. Modify a OTP token. Modify a RADIUS proxy server. Modify a SELinux User Map. Modify a delegation. Modify a group password policy. Modify a group. Modify a hostgroup. Modify a netgroup. Modify a permission. Modify a privilege. Modify a role. Modify a segment. Modify a self-service permission. Modify a stage user. Modify a topology suffix. Modify a user. Modify a vault. Modify an Group ID override. Modify an HBAC rule. Modify an HBAC service group. Modify an HBAC service. Modify an ID View. Modify an ID override. Modify an User ID override. Modify an automember rule. Modify an automount key. Modify an automount map. Modify an existing IPA service. Modify configuration options. Modify global DNS configuration. Modify global trust configuration. Modify information about a host. Modify information about an IPA location. Modify information about an IPA server. Modify realm domains. Modify trustdomain of the trust More than one entry with key %(key)s found, use --info to select specific entry. Mount information Mount point Move deleted user into staged area Multi-value Must be a decimal number Must be an UTC date/time value (e.g., "2014-01-20 17:58:01Z") Must be an integer NAPTR Flags NAPTR Order NAPTR Preference NAPTR Regular Expression NAPTR Replacement NAPTR Service NAPTR record NIS domain name NONE value cannot be combined with other PAC types NS Hostname NS record NS record is not allowed to coexist with an %(type)s record except when located in a zone root record (RFC 2181, section 6.1) NS record(s) can be edited in zone apex - '@'. NSEC Next Domain Name NSEC Type Map NSEC record NSEC3 record NSEC3PARAM record NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt Name Name of command to export Name of host-group Name of issuing CA Name of method to export Name of object to export Name of parent automount map (default: auto.master). Name of the trusted domain Nameserver '%(host)s' does not have a corresponding A/AAAA record Nameserver for reverse zone cannot be a relative DNS name Neither --del-all nor options to delete a specific record provided.
Command help may be consulted for all supported record types. Nested Methods to execute NetBIOS name Netgroup Netgroup Settings Netgroup description Netgroup name Netgroups Network Services New ACI name New Certificate New Password New Principal Password New Test New kerberos principal alias New mount information New password is required New public key specified multiple times New vault password New: key not set New: key set Next Next Domain Name No A, AAAA, SSHFP or PTR records found. No Common Name was found in subject of request. No DNS servers in IPA location %(location)s. Without DNS servers location is not working as expected. No DNSSEC key master is installed. DNSSEC zone signing will not work until the DNSSEC key master is installed. No Valid Certificate No archived data. No credentials cache found No default (fallback) group set No entries. No file to read No free YubiKey slot! No keys accepted by KDC
No matching entries found No option to delete specific record provided. No option to modify specific record provided. No permission to join this host to the IPA domain.
No private group No response No such attribute on this entry No such virtual command No system preferred enctypes ?!
No values for %s No wait No write permissions on keytab file '%s'
Non-Active Directory domain Non-POSIX Non-existent or invalid rules Non-transitive external trust to a domain in another Active Directory forest Nonce Not After Not Before Not a managed group Not a valid IP address Not a valid IPv4 address Not a valid IPv6 address Not a valid network address (examples: 2001:db8::/64, 192.0.2.0/24) Not allowed on non-leaf entry Not enough arguments specified to perform trust setup Not matched rules Not registered yet Note Number of IDs in the range Number of conditions added Number of conditions removed Number of days's notice of impending password expiration Number of digits each token code will have Number of entries returned Number of hosts that had a ID View was unset: Number of hosts the ID View was applied to: Number of members added Number of members removed Number of owners added Number of owners removed Number of permissions added Number of permissions removed Number of plugins loaded Number of privileges added Number of privileges removed Number of seconds outbound LDAP operations waits for a response from the remote replica before timing out and failing Number of variables returned (<= total) OTP OTP Configuration OTP Token OTP Token Settings OTP Tokens OTP configuration options OTP set OTP token OTP tokens Objectclasses to be ignored for group entries in DS Objectclasses to be ignored for user entries in DS Objectclasses used to search for group entries in DS Objectclasses used to search for user entries in DS Old vault password Old vault private key One Time Password One of group, permission or self is required One time password commands Only one value is allowed Only one zone type is allowed per zone name Only the ipa-ad-trust and ipa-ad-trust-posix are allowed values for --range-type when adding an AD trust. Operating System and version of the host (e.g. Fedora 9) Operating system Operation failed: %s
Operations Error Option added Option group Option rid-base must not be used when IPA range type is ipa-ad-trust-posix Options Options dom-sid and dom-name cannot be used together Options dom-sid and rid-base must be used together Options dom-sid and secondary-rid-base cannot be used together Options dom-sid/dom-name and rid-base must be used together Options dom-sid/dom-name and secondary-rid-base cannot be used together Options secondary-rid-base and rid-base must be used together Order Order in increasing priority of SELinux users, delimited by $ Org. Unit Organization Organizational Unit Origin DN subtree Original TTL Other Record Types Our domain is not configured Out of Memory!
Out of memory
Out of memory
Out of memory! Out of memory!
Out of memory!?
Output filename Output only on errors Override default list of supported PAC types. Use 'NONE' to disable PAC support for this service Override default list of supported PAC types. Use 'NONE' to disable PAC support for this service, e.g. this might be necessary for NFS services. Override existing password Override inherited settings Overwrite GID Owner Owner %s Owner groups Owner services Owner users Owners that could not be added Owners that could not be removed PAC type PTR Hostname PTR record Page Pager Number Parameters Parent map Parse all raw DNS records and return them in a structured way Parse error Password Password Expiration Notification (days) Password Policies Password Policy Password cannot be set on enrolled host. Password change complete Password expiration Password history size Password plugin features Password reset was not successful. Password specified multiple times Password used in bulk enrollment Passwords do not match Passwords do not match! Passwords have been migrated in pre-hashed format.
IPA is unable to generate Kerberos keys unless provided
with clear text passwords. All migrated users need to
login at https://your.domain/ipa/migration/ before they
can use their Kerberos accounts. Passwords must match Per-server conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded. Per-server forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT" Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT" Period after which failure count will be reset (seconds) Period for which lockout is enforced (seconds) Permission Permission ACI grants access to Permission denied: %(file)s Permission flags Permission name Permission settings Permission type Permission value Permission with unknown flag %s may not be modified or removed Permissions Permissions to grant (read, write). Default is write. Permissions to grant(read, write, add, delete, all) Permitted Encryption Types Permitted to have certificates issued Ping a remote server. Platform Please choose a type of DNS resource record to be added Please specify forwarders. Please try the following options: Policy Port Positional argument Positional arguments Pre-authentication is required for the service Pre-shared password Predefined profile '%(profile_id)s' cannot be deleted Preference Preference given to this exchanger. Lower values are more preferred Preferred Language Prefix used to distinguish ACI types (permission, delegation, selfservice, none) Preserved user Preserved users Prev Primary RID base Primary RID range and secondary RID range cannot overlap Primary key only Principal Principal %(principal)s cannot be authenticated: %(message)s Principal '%(principal)s' is not permitted to use CA '%(ca)s' with profile '%(profile_id)s' for certificate issuance. Principal '%s' in subject alt name does not match requested principal Principal alias Principal for this certificate (e.g. HTTP/test.example.com) Principal is not of the form user@REALM: '%(principal)s' Principal name Print as little as possible Print debugging information Print entries as stored on the server. Only affects output format. Print the raw XML-RPC output in GSSAPI mode Priority Priority (order) Priority of the policy (higher number means lower priority Private key specified multiple times Privilege Privilege Settings Privilege Withdrawn Privilege description Privilege name Privileges Profile ID Profile ID '%(cli_value)s' does not match profile data '%(file_value)s' Profile ID for referring to this profile Profile category Profile category the ACL applies to Profile configuration Profile configuration stored in file '%(file)s' Profile description Profiles Prompt to set the user password Prospective Protocol Public Key Public key Public key specified multiple times QR code width is greater than that of the output tty. Please resize your terminal. Quantity Query current Domain Level. Query returned more results than the configured size limit. Displaying the first ${counter} results. Quick Links Quiet mode. Only errors are displayed. RADIUS Proxy Server Settings RADIUS Server RADIUS Servers RADIUS proxy configuration RADIUS proxy server RADIUS proxy server name RADIUS proxy servers RADIUS proxy username RFC4120-compliant Kerberos realm RFC822Name does not match any of user's email addresses RP record RPC command used to log the current user out of their session. RRSIG Algorithm RRSIG Key Tag RRSIG Labels RRSIG Original TTL RRSIG Signature RRSIG Signature Expiration RRSIG Signature Inception RRSIG Signer's Name RRSIG Type Covered RRSIG record Random password Range Settings Range name Range size Range type Raw %s records Raw A records Raw A6 records Raw AAAA records Raw AFSDB records Raw APL records Raw CERT records Raw CNAME records Raw DHCID records Raw DLV records Raw DNAME records Raw DNSKEY records Raw DS records Raw HIP records Raw IPSECKEY records Raw KEY records Raw KX records Raw LOC records Raw MX records Raw NAPTR records Raw NS records Raw NSEC records Raw NSEC3 records Raw PTR records Raw RP records Raw RRSIG records Raw SIG records Raw SPF records Raw SRV records Raw SSHFP records Raw TA records Raw TKEY records Raw TLSA records Raw TSIG records Raw TXT records Raw target filter Raw value of a DNS record was already set by "%(name)s" option Re-established trust to domain "%(value)s" Re-sync the local entitlement cache with the entitlement server. Realm Domains Realm administrator password should be specified Realm domains Realm name Realm-domain mismatch Reason Reason for Revocation Reason for revoking the certificate (0-10) Reason for revoking the certificate (0-10). Type "ipa help cert" for revocation reason details. Rebuild auto membership Record Type Record creation failed. Record data Record name Record not found. Record type Records Records for DNS Zone Redirection Redirection to PTR record Refresh Refresh list of the domains associated with the trust Refresh the page. Registration password Regular Expression Relative record name '%(record)s' contains the zone name '%(zone)s' as a suffix, which results in FQDN '%(fqdn)s'. This is usually a mistake caused by a missing dot at the end of the name specification. Relative weight for entries with the same priority. Reload current settings from the server. Reload the browser. Remote IPA server hostname Remote server name Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS Remove CAs from a CA ACL. Remove Kerberos Alias Remove Permission Remove a manager to the stage user entry Remove a manager to the user entry Remove a permission for per-forward zone access delegation. Remove a permission for per-zone access delegation. Remove all principals in this realm Remove an option from Sudo Rule. Remove certificates from a service Remove certificates from host entry Remove commands and sudo command groups affected by Sudo Rule. Remove conditions from an automember rule. Remove default (fallback) group for all unmatched entries. Remove entries from DNS Remove from CRL Remove hold Remove hosts and hostgroups affected by Sudo Rule. Remove hosts that can manage this host. Remove hosts that can manage this service. Remove information about the domain associated with the trust. Remove member from a named service delegation rule. Remove member from a named service delegation target. Remove member from a named service delegation. Remove members from Sudo Command Group. Remove members from a group. Remove members from a hostgroup. Remove members from a netgroup. Remove members from a permission. Remove members from a privilege Remove members from a role. Remove members from a vault. Remove members from an HBAC service group. Remove one or more certificates to the idoverrideuser entry Remove one or more certificates to the user entry Remove owners from a vault container. Remove owners from a vault. Remove permissions from a privilege. Remove principal alias from a host entry Remove principal alias from a service Remove principal alias from the user entry Remove privileges from a role. Remove profiles from a CA ACL. Remove service and service groups from an HBAC rule. Remove services from a CA ACL. Remove source hosts and hostgroups from an HBAC rule. Remove target from a named service delegation rule. Remove target hosts and hostgroups from a CA ACL. Remove target hosts and hostgroups from an HBAC rule. Remove target hosts and hostgroups from an SELinux User Map rule. Remove users and groups affected by Sudo Rule. Remove users and groups from a CA ACL. Remove users and groups from an HBAC rule. Remove users and groups from an SELinux User Map rule. Remove users that can manage this token. Removed aliases from host "%(value)s" Removed aliases from user "%(value)s" Removed aliases to the service principal "%(value)s" Removed certificates from host "%(value)s" Removed certificates from idoverrideuser "%(value)s" Removed certificates from service principal "%(value)s" Removed certificates from user "%(value)s" Removed condition(s) from "%(value)s" Removed default (fallback) group for automember "%(value)s" Removed information about the trusted domain "%(value)s" Removed option "%(option)s" from Sudo Rule "%(rule)s" Removed system permission "%(value)s" Removing %(servers)s from replication topology, please wait... Removing principal %s
Rename Rename an ACI. Rename the %(ldap_obj_name)s object Rename the DNS resource record object Rename the Group ID override object Rename the ID View object Rename the OTP token object Rename the RADIUS proxy server object Rename the User ID override object Rename the automount key object Rename the group object Rename the permission object Rename the privilege object Rename the role object Rename the stage user object Rename the user object Renamed ACI to "%(value)s" Renewal master for IPA certificate authority Replacement Replica is active DNSSEC key master. Uninstall could break your DNS system. Please disable or replace DNSSEC key master first. Replication agreement enabled Replication configuration Replication refresh for segment: "%(pkey)s" requested. Replication topology of suffix "%(suffix)s" contains errors. Replication topology of suffix "%(suffix)s" is in order. Request a full re-initialization of the node retrieving data from the other node. Request failed with status %(status)s: %(reason)s Request id Request is missing "method" Request is missing "params" Request must be a dict Request status Required Required field Requires pre-authentication Reset Reset Kerberos ticket policy to the default values. Reset OTP Reset Password Reset your password. Resolve a host name in DNS. Resolve a host name in DNS. (Deprecated) Resolve security identifiers of users and groups in trusted domains Restore Result Result of simulation Result of the command Results are truncated, try a more specific search Results should contain primary key attribute only ("%s") Results should contain primary key attribute only ("anchor") Results should contain primary key attribute only ("certificate") Results should contain primary key attribute only ("cn") Results should contain primary key attribute only ("command") Results should contain primary key attribute only ("delegation-name") Results should contain primary key attribute only ("domain") Results should contain primary key attribute only ("group") Results should contain primary key attribute only ("group-name") Results should contain primary key attribute only ("hostgroup-name") Results should contain primary key attribute only ("hostname") Results should contain primary key attribute only ("id") Results should contain primary key attribute only ("location") Results should contain primary key attribute only ("login") Results should contain primary key attribute only ("map") Results should contain primary key attribute only ("name") Results should contain primary key attribute only ("principal") Results should contain primary key attribute only ("realm") Results should contain primary key attribute only ("service") Results should contain primary key attribute only ("sudocmdgroup-name") Results should contain primary key attribute only ("sudorule-name") Retries Retrieve a data from a vault. Retrieve an existing certificate. Retrieve and print all attributes from the server. Affects command output. Retrieve current keys without changing them Retrieve the entitlement certs. Retrieved data from vault "%(value)s" Retrieving CA cert chain failed: %s Retrieving CA status failed with status %d Retrieving CA status failed: %s Retry Retrying with pre-4.0 keytab retrieval method...
Return to the main page and retry the operation Reverse record for IP address %(ip)s already exists in reverse zone %(zone)s. Reverse zone %(name)s requires exactly %(count)d IP address components, %(user_count)d given Reverse zone IP network Revert Revocation reason Revoke Revoke a certificate. Revoked Revoked on from Revoked on to Right node Right replication node - an IPA server Rights Rights to grant (read, search, compare, write, add, delete, all) Role Role Settings Role name Role status Roles Root domain of the trust is always enabled for the existing trust Rule name Rule status Rule type Rule type (allow) Rules Rules to test. If not specified, --enabled is assumed Run Commands Run Test Run as a user Run as any user within a specified group Run with the gid of a specified POSIX group RunAs External Group RunAs External User RunAs Group category RunAs Group category the rule applies to RunAs Groups RunAs User category RunAs User category the rule applies to RunAs Users RunAsGroup does not accept '%(name)s' as a group name RunAsUser does not accept '%(name)s' as a group name RunAsUser does not accept '%(name)s' as a user name SELinux Options SELinux User SELinux User Map SELinux User Map rule SELinux User Map rules SELinux User Maps SELinux user %(user)s not found in ordering list (in config) SELinux user '%(user)s' is not valid: %(error)s SELinux user map default user not in order list SELinux user map list not found in configuration SELinux user map order SHA1 Fingerprint SHA256 Fingerprint SID blacklist incoming SID blacklist outgoing SID does not match any trusted domain SID does not match exactlywith any trusted domain's SID SID for the specified trusted domain name could not be found. Please specify the SID directly using dom-sid option. SID is not recognized as a valid SID for a trusted domain SID is not valid SIG Algorithm SIG Key Tag SIG Labels SIG Original TTL SIG Signature SIG Signature Expiration SIG Signature Inception SIG Signer's Name SIG Type Covered SIG record SOA class SOA expire SOA minimum SOA mname (authoritative server) override SOA mname override SOA record class SOA record expire time SOA record refresh time SOA record retry time SOA record serial number SOA record time to live SOA refresh SOA retry SOA serial SOA time to live SPF record SRV Port SRV Priority SRV Target SRV Weight SRV record SSH public key SSH public key fingerprint SSH public key: SSH public keys SSHFP Algorithm SSHFP Fingerprint SSHFP Fingerprint Type SSHFP record SSSD was unable to resolve the object to a valid SID Salt Same as --%s Save Schema is up to date (FP '%(fingerprint)s', TTL %(ttl)s s) Search Search Options Search command parameters. Search domains of the trust Search for %(searched_object)s with these %(relationship)s %(ldap_object)s. Search for %(searched_object)s without these %(relationship)s %(ldap_object)s. Search for %1$s on rootdse failed with error %2$d
Search for CA ACLs. Search for CAs. Search for Certificate Profiles. Search for DNS forward zones. Search for DNS resources. Search for DNS servers. Search for DNS zones (SOA records). Search for HBAC rules. Search for HBAC services. Search for IPA locations. Search for IPA namingContext failed with error %d
Search for IPA servers. Search for IPA services. Search for OTP token. Search for RADIUS proxy servers. Search for SELinux User Maps. Search for Sudo Command Groups. Search for Sudo Commands. Search for Sudo Rule. Search for a netgroup. Search for a self-service permission. Search for an Group ID override. Search for an HBAC service group. Search for an ID View. Search for an ID override. Search for an User ID override. Search for an automount key. Search for an automount location. Search for an automount map. Search for automember rules. Search for certificates with these owner %s. Search for certificates without these owner %s. Search for classes. Search for command outputs. Search for commands. Search for delegations. Search for entitlement accounts. Search for existing certificates. Search for forward zones only Search for group password policies. Search for groups with these member groups. Search for groups with these member of HBAC rules. Search for groups with these member of groups. Search for groups with these member of netgroups. Search for groups with these member of roles. Search for groups with these member of sudo rules. Search for groups with these member users. Search for groups without these member groups. Search for groups without these member of HBAC rules. Search for groups without these member of groups. Search for groups without these member of netgroups. Search for groups without these member of roles. Search for groups without these member of sudo rules. Search for groups without these member users. Search for groups. Search for help topics. Search for host groups with these member host groups. Search for host groups with these member hosts. Search for host groups with these member of HBAC rules. Search for host groups with these member of host groups. Search for host groups with these member of netgroups. Search for host groups with these member of sudo rules. Search for host groups without these member host groups. Search for host groups without these member hosts. Search for host groups without these member of HBAC rules. Search for host groups without these member of host groups. Search for host groups without these member of netgroups. Search for host groups without these member of sudo rules. Search for hostgroups. Search for hosts with these enrolled by users. Search for hosts with these managed by hosts. Search for hosts with these managing hosts. Search for hosts with these member of HBAC rules. Search for hosts with these member of host groups. Search for hosts with these member of netgroups. Search for hosts with these member of roles. Search for hosts with these member of sudo rules. Search for hosts without these enrolled by users. Search for hosts without these managed by hosts. Search for hosts without these managing hosts. Search for hosts without these member of HBAC rules. Search for hosts without these member of host groups. Search for hosts without these member of netgroups. Search for hosts without these member of roles. Search for hosts without these member of sudo rules. Search for hosts. Search for netgroups with these member groups. Search for netgroups with these member host groups. Search for netgroups with these member hosts. Search for netgroups with these member netgroups. Search for netgroups with these member of netgroups. Search for netgroups with these member users. Search for netgroups without these member groups. Search for netgroups without these member host groups. Search for netgroups without these member hosts. Search for netgroups without these member netgroups. Search for netgroups without these member of netgroups. Search for netgroups without these member users. Search for permissions. Search for privileges. Search for ranges. Search for roles. Search for servers with these managed suffixes. Search for servers without these managed suffixes. Search for service delegation target. Search for service delegations rule. Search for services with these managed by hosts. Search for services without these managed by hosts. Search for stage users with these member of HBAC rules. Search for stage users with these member of groups. Search for stage users with these member of netgroups. Search for stage users with these member of roles. Search for stage users with these member of sudo rules. Search for stage users without these member of HBAC rules. Search for stage users without these member of groups. Search for stage users without these member of netgroups. Search for stage users without these member of roles. Search for stage users without these member of sudo rules. Search for stage users. Search for topology segments. Search for topology suffixes. Search for trusts. Search for users with these member of HBAC rules. Search for users with these member of groups. Search for users with these member of netgroups. Search for users with these member of roles. Search for users with these member of sudo rules. Search for users without these member of HBAC rules. Search for users without these member of groups. Search for users without these member of netgroups. Search for users without these member of roles. Search for users without these member of sudo rules. Search for users. Search for vaults. Search result has been truncated: %(reason)s Search scope Search size limit Search time limit Second Code Second OTP Secondary RID base Seconds Latitude Seconds Longitude Secret Security Identifier Security Identifiers (SIDs) Segment details Segment name Select All Select entries to be removed. Selector Self Self Service Permission Self Service Permissions Self-service name Semantic of %(label)s was changed. %(current_behavior)s
%(hint)s Semicolon separated list of IP addresses or networks which are allowed to issue queries Semicolon separated list of IP addresses or networks which are allowed to transfer the zone Sensitive Serial Serial Number Serial Number (hex) Serial number Serial number (hex) Serial number in decimal or if prefixed with 0x in hexadecimal Server Server %(srv)s can't contact servers: %(replicas)s Server Name Server Role Server Roles Server has already been deleted Server name Server name not provided and unavailable
Server removal aborted: %(reason)s. Server will check DNS forwarder(s). Servers Servers details: Servers in location Servers that belongs to the IPA location Service Service %(service)s requires restart on IPA server %(server)s to apply configuration changes. Service '%(service)s' not found in Kerberos database Service Certificate Service Groups Service Options Service Settings Service category Service category the ACL applies to Service category the rule applies to Service delegation rule Service delegation rules Service delegation target Service delegation targets Service group name Service name Service name of the service vault Service principal Service principal alias Service principal for this certificate (e.g. HTTP/test.example.com) Service principal is not of the form: service/fully-qualified host name: %(reason)s Service principal is required Service(s), shared, and user(s) options cannot be specified simultaneously Service, shared and user options cannot be specified simultaneously Service, shared, and user options cannot be specified simultaneously Services Session error Session timeout Set Set Domain Level Set OTP Set SSH key Set a user's password. Set an attribute to a name/value pair. Format is attr=value.
For multi-valued attributes, the command replaces the values already present. Set default (fallback) group for all unmatched entries. Set default (fallback) group for automember "%(value)s" Settings Shared vault Show Show IPA server. Show QR code Show Results Show all loaded plugins. Show configuration uri Show details Show environment variables. Show global trust configuration. Show managed suffix. Show role status on a server Show the current OTP configuration. Show the current configuration. Show the current global DNS configuration. Show the list of permitted encryption types and exit Show vault configuration. Show/Set key Showing ${start} to ${end} of ${total} entries. Signature Signature Expiration Signature Inception Signer's Name Simple bind failed
Simulate use of Host-based access controls Size Size Limit Size of data exceeds the limit. Current vault data size limit is %(limit)d B Size of the ID range reserved for the trusted domain Skip DNS check Skip a check whether the last CA master or DNS server is removed Skip overlap check Skipped %(key)s Skipped %(map)s Some entries were not deleted Some operations failed. Source Host Groups Source Hosts Source host Source host category Source host category the rule applies to Specified CAs Specified Commands and Groups Specified Groups Specified Hosts and Groups Specified Profiles Specified Services and Groups Specified Users and Groups Specifies where to store keytab information. Specify external ${entity} Stage Stage User Stage Users Stage user %s activated Stage users Standard Record Types State/Province Status Status of the role Stopping of replication refresh for segment: "%(pkey)s" requested. Store issued certificates Street address Structured Subject Subject DN Subject DN is already used by CA '%s' Subject DNS name Subject Distinguished Name Subject EDI Party name Subject IP Address Subject Kerberos principal name Subject OID Subject Other Name Subject UPN Subject URI Subject X.400 address Subject alt name type %s is forbidden Subject directory name Subject email address Submit a certificate signing request. Subtree Subtype Success Sudo Allow Command Groups Sudo Allow Commands Sudo Command Sudo Command Group Sudo Command Groups Sudo Commands Sudo Deny Command Groups Sudo Deny Commands Sudo Option Sudo Rule Sudo Rules Sudo order Suffix name Superseded Supported encryption types:
Suppress processing of membership attributes. Sync OTP Token Synchronize an OTP token. Syntax Error: %(error)s System DNS records updated TA record TKEY record TLSA Certificate Association Data TLSA Certificate Usage TLSA Matching Type TLSA Selector TLSA record TOTP Synchronization Window TOTP authentication Window TOTP authentication time variance (seconds) TOTP synchronization time variance (seconds) TOTP token / IPA server time difference TSIG record TXT Text Data TXT record Target Target DN Target DN subtree Target Uniform Resource Identifier Target Uniform Resource Identifier according to RFC 3986 Target group Target host Target members of a group Target members of a group (sets memberOf targetfilter) Target reverse zone not found. Target your own entry (self) Task DN Task DN = '%s' Telephone Number Test the ACI syntax but don't write anything Text Data Text does not match field pattern The --domain option cannot be used together with --add-domain or --del-domain. Use --domain to specify the whole realm domain list explicitly, to add/remove individual domains, use --add-domain/del-domain. The ACI for permission %(name)s was not found in %(dn)s The IPA realm The _kerberos TXT record from domain %(domain)s could not be created (%(error)s).
This can happen if the zone is not managed by IPA. Please create the record manually, containing the following value: '%(realm)s' The _kerberos TXT record from domain %(domain)s could not be removed (%(error)s).
This can happen if the zone is not managed by IPA. Please remove the record manually. The automount key %(key)s with info %(info)s does not exist The character %(char)r is not allowed. The default users group cannot be removed The deny type has been deprecated. The domain name of the target host or '.' if the service is decidedly not available at this domain The following domains do not belong to this realm: %(domains)s The group doesn't exist The hostname must be fully-qualified: %s
The hostname must not be: %s
The hostname or IP (with or without port) The hostname this reverse record points to The key,info pair must be unique. A key named %(key)s with info %(info)s already exists The most common types for this type of zone are: %s
The number of times to retry authentication The principal for this request doesn't exist. The principal to get a keytab for (ex: ftp/ftp.example.com@EXAMPLE.COM) The principal to remove from the keytab (ex: ftp/ftp.example.com@EXAMPLE.COM) The realm for the principal does not match the realm for this IPA server The realm of the following domains could not be detected: %(domains)s. If these are domains that belong to the this realm, please create a _kerberos TXT record containing "%(realm)s" in each of them. The schema used on the LDAP server. Supported values are RFC2307 and RFC2307bis. The default is RFC2307bis The search criteria was not specific enough. Expected 1 and found %(found)d. The secret used to encrypt data The service is allowed to authenticate on behalf of a client The service principal for subject alt name %s in certificate request does not exist The topic or command name. The total timeout across all retries (in seconds) The username attribute on the user object The username, password or token codes are not correct This command can not be used to change ID allocation for local IPA domain. Run `ipa help idrange` for more information This command relies on the existence of the "editors" group, but this group was not found. This command requires root access This entry already exists This entry cannot be enabled or disabled This entry is already a member This entry is already disabled This entry is already enabled This entry is not a member This group already allows external members This group cannot be posix because it is external This is already a posix group This is already a posix group and cannot be converted to external one This may take some time, please wait ... This page has unsaved changes. Please save or revert. Ticket expired Ticket policy for %s could not be read Time Limit Time limit of search in seconds (0 is unlimited) Time now Time to live Time to live for records at zone apex Time to live for records without explicit TTL definition Time-based (TOTP) Timeout Timeout exceeded. To establish trust with Active Directory, the domain name and the realm name of the IPA server must match To get command help, use: Token ID Token description (informational only) Token hash algorithm Token model (informational only) Token secret (Base32; default: random) Token serial (informational only) Token synchronization failed Token vendor name (informational only) Token was synchronized Topic commands: Topic or Command Topology Topology Segment Topology Segments Topology does not allow server %(server)s to replicate with servers: Topology is disconnected Topology management requires minimum domain level {0} Topology suffix Topology suffixes Total number of variables env (>= count) True if not all results were returned True means the operation was successful Trust Trust Settings Trust direction Trust status Trust type Trust type (ad for Active Directory, default) Trusted domain Trusted domain %(domain)s is included among IPA realm domains. It needs to be removed prior to establishing the trust. See the "ipa realmdomains-mod --del-domain" command. Trusted domain and administrator account use different realms Trusted domain did not return a unique object Trusted domain did not return a valid SID for the object Trusted domain partner Trusted domains Trusted for delegation Trusted forest Trusted to authenticate as user Trusting forest Trusts Two factor authentication (password + OTP) Two-way trust Type Type Covered Type Map Type of IPA object (sets subtree and objectClass targetfilter) Type of IPA object (user, group, host, hostgroup, service, netgroup, dns) Type of the token Type of trusted domain ID range, one of ipa-ad-trust-posix, ipa-ad-trust Types of supported user authentication UID UPN suffixes Un-apply Un-apply ID Views from hosts Un-apply ID Views from hosts of hostgroups Un-apply from host groups Un-apply from hosts Unable to communicate with CMS Unable to communicate with CMS (status %d) Unable to create private group. A group '%(group)s' already exists. Unable to determine IPA server from %s
Unable to determine if Kerberos principal %s already exists. Use 'ipa user-mod' to set it manually. Unable to determine root DN of %s
Unable to display QR code using the configured output encoding. Please use the token URI to configure your OTP device Unable to enable SSL in LDAP
Unable to generate Kerberos Credential Cache
Unable to initialize ldap library!
Unable to join host: Kerberos Credential Cache not found
Unable to join host: Kerberos User Principal not found and host password not provided.
Unable to join host: Kerberos context initialization failed
Unable to parse principal
Unable to parse principal name
Unable to parse principal: %1$s (%2$d)
Unable to remove entry
Unable to set LDAP_OPT_PROTOCOL_VERSION
Unable to set LDAP_OPT_X_SASL_NOCANON
Unable to verify write permissions to the AD Undelete a delete user account. Undeleted user account "%(value)s" Undo Undo All Undo all changes in this field. Undo this change. Unenroll this host from IPA server Unenrollment failed.
Unenrollment successful.
Unique ID Unknown Unknown Error Unknown option: %(option)s Unlock Unlocked account "%(value)s" Unmatched Unprovision Unresolved rules in --rules Unrevoked Unsaved Changes Unselect All Unspecified Unsupported value Update Update DNS entries Update System DNS Records Update location and IPA server DNS records Update of system record '%(record)s' failed with error: %(error)s User User Group User Groups User ID User ID Number User ID Number (system will assign one if not provided) User ID override User ID overrides User Options User attribute User authentication types User categories User category User category (semantics placed on this attribute are for local interpretation) User category the ACL applies to User category the rule applies to User container User group User group ACI grants access to User group rule User group rules User group to apply permissions to User login User name User object class User object overrides User password User search fields User to override User-friendly description of action performed User-specified attributes to which the permission applies User-specified attributes to which the permission explicitly does not apply Username Username of the user vault Users Users allowed to create keytab Users allowed to retrieve keytab Valid Certificate Present Valid from Valid to Validation error Validity Validity end Validity start Vault Vault Container Vault Containers Vault configuration Vault data encrypted with session key Vault description Vault name Vault password Vault private key Vault public key Vault salt Vault service Vault type Vault user Vaults Vendor Verify Password Verify Principal Password Version Vertical Precision Via Service View View Certificate Waiting for confirmation by remote side Warning Warning unrecognized encryption type.
Warning unrecognized salt type.
Warning: failed to convert type (#%d)
Warning: salt types are not honored with randomized passwords (see opt. -P)
Weight Weight for server services When migrating a group already existing in IPA domain overwrite the group GID and report as success Whether to store certs issued using this profile Who Working Write profile configuration to file You are trying to reference a magic private group which is not allowed to be overridden. Try overriding the GID attribute of the corresponding user instead. You can use <a href="${link}" target="_blank">FreeOTP<a/> as a software OTP token application. You may need to manually remove them from the tree You must enroll a host in order to create a host service You will be redirected to DNS Zone. Your password expires in ${days} days. Your trust to %(domain)s is broken. Please re-create it by running 'ipa trust-add' again. YubiKey slot Zone forwarders Zone found: ${zone} Zone name Zone name (FQDN) Zone record '%s' cannot be deleted Zone refresh interval active user with name "%(user)s" already exists algorithm value: allowed interval 0-255 all masters must have %(role)s role enabled an internal error has occurred an internal error has occurred on server at '%(server)s' answer to query '%(owner)s %(rtype)s' is missing DNSSEC signatures (no RRSIG data) any of the configured servers api has no such namespace: '%(name)s' at least one of options: type, users, hosts must be specified at least one of: type, filter, subtree, targetgroup, attrs or memberof are required at least one value equal to the canonical principal name must be present attribute "%(attribute)s" not allowed attribute "%s" not allowed attribute is not configurable attrs and included attributes are mutually exclusive attrs and included/excluded attributes are mutually exclusive automatically add the principal if it doesn't exist automatically add the principal if it doesn't exist (service principals only) automount key automount keys automount location automount locations automount map automount maps ber_init() failed, Invalid control ?!
ber_scanf() failed, unable to find kvno ?!
bind password can be at most %(len)d characters can be at most %(maxlength)d bytes can be at most %(maxlength)d characters can be at most %(maxvalue)d can be at most %(maxvalue)s cannot add permission "%(perm)s" with bindtype "%(bindtype)s" to a privilege cannot be empty cannot connect to '%(uri)s': %(error)s cannot delete global password policy cannot delete managed permissions cannot delete root domain of the trust, use trust-del to delete the trust itself cannot disable root domain of the trust, use trust-del to delete the trust itself cannot open configuration file %s
cannot rename managed permissions cannot set bindtype for a permission that is assigned to a privilege cannot specify both raw certificate and file cannot specify full target filter and extra target filter simultaneously cannot stat() configuration file %s
change collided with another change change to a POSIX group change to support external non-IPA members from trusted domains child exited with %d
cn is immutable comma-separated list of HBAC service groups to add comma-separated list of HBAC service groups to remove comma-separated list of HBAC services to add comma-separated list of HBAC services to remove comma-separated list of groups to add comma-separated list of groups to exclude from migration comma-separated list of groups to remove comma-separated list of host groups to add comma-separated list of host groups to remove comma-separated list of hosts to add comma-separated list of hosts to remove comma-separated list of members of a trusted domain in DOM\name or name@domain form comma-separated list of netgroups to add comma-separated list of netgroups to remove comma-separated list of permissions comma-separated list of permissions to grant(read, write, add, delete, all) comma-separated list of privileges comma-separated list of privileges to add comma-separated list of privileges to remove comma-separated list of roles to add comma-separated list of roles to remove comma-separated list of sudo command groups to add comma-separated list of sudo command groups to remove comma-separated list of sudo commands to add comma-separated list of sudo commands to remove comma-separated list of users to add comma-separated list of users to exclude from migration comma-separated list of users to remove command command '%(name)s' takes at most %(count)d argument command '%(name)s' takes at most %(count)d arguments command '%(name)s' takes no arguments commands commands cannot be added when command category='all' commands for controlling sudo configuration communication with CIFS server was unsuccessful configuration options container entry (%(container)s) not found default CA ACL can be only disabled delegation delegations delete description did not receive Kerberos credentials does not match any of accepted formats: domain domain is not configured domain is not trusted domain name '%(domain)s' should be normalized to: %(normalized)s domain name cannot be longer than 255 characters each ACL element must be terminated with a semicolon empty DNS label empty filter entries entry error marshalling data for XML-RPC transport: %(error)s error on server '%(server)s': %(error)s executing ipa-getkeytab failed, errno %d
expected format: <0-255> <0-255> <0-65535> even-length_hexadecimal_digits_or_hyphen file to store certificate in filename filter and memberof are mutually exclusive flags must be one of "S", "A", "U", or "P" flags value: allowed interval 0-255 force NS record creation even if its hostname is not in DNS force delete of SYSTEM permissions force principal name even if not in DNS fork() failed
format must be specified as "%(format)s" %(rfcs)s forward zone "%(fwzone)s" is not effective because of missing proper NS delegation in authoritative zone "%(authzone)s". Please add NS record "%(ns_rec)s" to parent zone "%(authzone)s". gid cannot be set for external group givenname is required group group runAs group, permission and self are mutually exclusive groups groups to add groups to remove host host category cannot be set to 'all' while there are allowed hosts host group host groups host groups to add host groups to remove hostgroup hostgroup with name "%s" already exists. Hostgroups and netgroups share a common namespace hostgroups hostname hostname contains empty label (consecutive dots) hostname in subject of request '%(cn)s' does not match principal hostname '%(hostname)s' hosts hosts cannot be added when host category='all' hosts cannot be set when type is 'group' hosts to add hosts to remove id range id range type incomplete time value incorrect type invalid '%(name)s': %(error)s invalid DN (%s) invalid IP address format invalid IP address version (is %(value)d, must be %(required_value)d)! invalid IP network format invalid Profile ID invalid SSH public key invalid address format invalid attribute name invalid domain name invalid domain-name: %s invalid domain-name: not fully qualified invalid e-mail format: %(email)s invalid escape code in domain name invalid hostmask invalid port number ipa-getkeytab has bad permissions?
ipa-getkeytab not found
is required iterations value: allowed interval 0-65535 kerberos ticket policy settings key %(key)s already exists key named %(key)s already exists left node ({host}) does not support suffix '{suff}' left node and right node must not be the same left node is not a topology node: %(leftnode)s left or right node has to be specified limits exceeded for this query local domain range location locations manager %(manager)s not found map %(map)s already exists maps not connected to /etc/auto.master: match the common name exactly maximum serial number member %s member Certificate Profile member HBAC service member HBAC service group member group member host member host group member netgroup member principal member privilege member role member service member service delegation target member sudo command member sudo command group member user minimum serial number missing base_id modifying primary key is not allowed mount point is relative to parent map, cannot begin with / must be "%s" must be '%(value)s' must be DNS name must be Kerberos principal must be TRUE or FALSE must be True or False must be Unicode text must be a decimal number must be absolute must be an integer must be at least %(minlength)d bytes must be at least %(minlength)d characters must be at least %(minvalue)d must be at least %(minvalue)s must be binary data must be datetime value must be dictionary must be enclosed in parentheses must be exactly %(length)d bytes must be exactly %(length)d characters must be one of %(values)s must be relative must contain a tuple (list, dict) must have %(role)s role enabled must match pattern "%(pattern)s" netgroup netgroup with name "%s" already exists. Hostgroups and netgroups share a common namespace netgroups netgroups to add netgroups to remove no command nor help topic '%(topic)s' no modifications to be performed no trusted domain is configured no trusted domain matched the specified flat name not allowed to modify group entries not allowed to modify user entries not allowed to perform operation: %s not allowed to perform server connection check not found not fully qualified not modifiable on managed permissions number class '%(cls)s' is not included in a list of allowed number classes: %(allowed)s number of passwords objectclass %s not found one or more values to remove only "ad" is supported only available on managed permissions only letters, numbers, %(chars)s are allowed. DNS label may not start or end with %(chars2)s only master zones can contain records only one CNAME record is allowed per name (RFC 2136, section 1.1.5) only one DNAME record is allowed per name (RFC 6672, section 2.4) only one node can be specified operation not defined option was renamed; use %s options are not allowed order must be a unique value (%(order)d already used by %(rule)s) out of memory
out-of-zone data: record name must be a subdomain of the zone or a relative name overlapping arguments and options: %(names)s owner %s owner group owner of %(types)s records should not be a wildcard domain name (RFC 4592 section 4) owner service owner user params must be a list params must contain [args, options] params[0] (aka args) must be a list params[1] (aka options) must be a dict password password policies password policy password to use if not using kerberos permission permission "%(value)s" already exists permissions preserve principal not found
principal not found in XML-RPC response
principal to add principal to remove priority cannot be set on global policy priority must be a unique value (%(prio)d already used by %(gname)s) privilege privileged group privileged hostgroup privileged service delegation rule privileged service delegation target privileges privileges to add privileges to remove profile category cannot be set to 'all' while there are allowed profiles profiles cannot be added when profile category='all' pysss_murmur is not available on the server and no base-id is given. query '%(owner)s %(rtype)s' with EDNS0: %(error)s query '%(owner)s %(rtype)s': %(error)s range exists range modification leaving objects with ID out of the defined range is not allowed range type change read error
realm not found
realm or UPN suffix overlaps with trusted domain namespace record '%(owner)s %(rtype)s' failed DNSSEC validation on server %(ip)s request failed with HTTP status %d result not found in XML-RPC response
retrieve and print all attributes from the server. Affects command output. right node ({host}) does not support suffix '{suff}' right node is not a topology node: %(rightnode)s role roles roles to add roles to remove runAs groups runAs user runAs users salt value: %(err)s search for POSIX groups search for groups with support of external non-IPA members from trusted domains search for managed groups search for non-POSIX groups search for private groups search results for objects to be migrated
have been truncated by the server;
migration process might be incomplete
seconds segment segments self service permission self service permissions server server role server roles servers service service category cannot be set to 'all' while there are allowed services service delegation rule service delegation rules service delegation target service delegation targets service delegation targets to add service delegation targets to remove services services cannot be added when service category='all' services to add services to remove setting Authoritative nameserver should not be a wildcard domain name (RFC 4592 section 4) skip reverse DNS detection sn is required stage user stage users subject alt name type %s is forbidden for non-user principals subject alt name type %s is forbidden for user principals subtree and type are mutually exclusive sudo command sudo command group sudo command groups sudo command groups to add sudo command groups to remove sudo commands sudo commands to add sudo commands to remove sudo rule sudo rules suffix suffixes system ID View target and targetgroup are mutually exclusive the IPA server and the remote domain cannot share the same NetBIOS name: %s the certificate with serial number the entry was deleted while being modified the value does not follow "YYYYMMDDHHMMSS" time format there must be at least one target entry specifier (e.g. target, targetfilter, attrs) this option has been deprecated. this option is deprecated too many '@' characters trust trust configuration trust domain trust domains trust type trusted domain object trusted domain object not found trusted domain user not found trusts type of IPA object (user, group, host, hostgroup, service, netgroup) type, filter, subtree and targetgroup are mutually exclusive unknown command '%(name)s' unknown error %(code)d from %(server)s: %(error)s unsupported functional level unsupported trust type user user "%s" is already active user category cannot be set to 'all' while there are allowed users users users and hosts cannot both be set users cannot be added when runAs user or runAs group category='all' users cannot be added when user category='all' users cannot be set when type is 'hostgroup' users to add users to remove value vault vaultcontainer vaultcontainers vaults {attr}: no such attribute {role}: role not found Project-Id-Version: freeipa 4.9.0.dev201908140712+gitc9938e3d8
Report-Msgid-Bugs-To: https://pagure.io/freeipa/new_issue
PO-Revision-Date: 2019-11-11 10:25+0000
Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>
Language-Team: Chinese (China)
Language: zh_CN
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=1; plural=0
X-Generator: Zanata 4.6.2
例如：
库容器对象。
库对象。
增加一个新的令牌：
ipa otptoken-add-yubikey --owner=jdoe --desc="My YubiKey"
* 权限允许访问读，写，添加，删除，读，查找或比价。
* 特权结合了相似的权限（例如所有权限需要添加一个用户）
* 角色为用户，用户组，主机或主机组授予一系列特权。
* 主机必须存在
* 服务必须存在（或者你使用--add选项来自动添加它）
一个证书是以一个服务主体存储，并一个服务主体需要一个主机。
条件是一个用于389-ds的正则表达式来用一个自动成员规则区匹配一个新添加的条目。如果它匹配一个兼容规则，那么该条目被添加到合适的组或主机组中去。
一个默认组或主机组可以指定给不匹配任何规则的条目。万一是用户条目，则该组会是一个会退组，因为在IPA配置中所有用户默认是指定组的成员。
权限由许多不同部分组成：
1. 权限名。
2. 权限目标。
3. 权限授予的权限。
一个权限可能不包含其他权限。
规则是和组名直接关联的，因此你不能创建一个没有组或主机组的规则。
API 模式
同时，有以下合适的选项。设置其中一个选项将会设置相应的属性。
1. 类型：对象（用户，用户组等）的类型；设置子树和目标过滤器。
2. 组： 适用于一个组的成员；设置目标过滤器。
3. 目标组：允许修改一个指定组（例如授予管理组成员的权限）；设置目标。
所有的CAs除了'IPA' CA都可以被禁用或重新启用。禁用一个CA会阻止它发布证书，但不会影响它的证书的有效性。
顺序可以添加到一个sudo规则中来控制它们评估的顺序（如果客户端支持）。该顺序是一个整数并且是唯一的。
非对称库和标准库类似，但它在传输前会使用一个公钥来预加密密码。该密码仅能通过对应的私钥来检索。
自动成员规则。
基于所有者管理有三种库类别：
* 用户/私有库
* 服务库
* 共享库
基于安全机制有三种库类型：
* 标准库
* 对称库
* 非对称库
基类用户
这包含了用户/计划用户常见的定义
CAs (除了'IPA' CA)都可以被删除。删除一个CA会撤销它的签名证书并删除它的私钥。
证书请求以PEM格式的证书签名请求(CSR)的形式存在。
证书可能通过证书主题，序列号，撤销原因，有效日期和发布日期来查询。
DNS服务器配置
GMT格式的日期用来匹配证书里的日期。
删除或重命名一个管理权限，同时改变它的目标是不允许的。
域名系统（DNS）
例如：
获取安装IPA服务器信息。
获取由IPA主服务器提供的角色（DNS服务器，CA等）状态。
IPA证书操作
IPA位置
IPA提供了一种方法来配置Sudo的各个方面：
用户：用户/用户组允许调用Sudo。
主机：主机/主机组上的用户允许调用Sudo。
允许的命令：指定命令允许通过Sudo来运行。
阻止的命令：指定命令禁止通过Sudo来运行。
作为用户来运行：Sudo会调用用户或用户组的权限。
作为组来运行：Sudo会调用组的gid权限。
选项：各种Sudoers选项可以修改Sudo的行为。
IPA服务器角色
IPA服务器
IPA支持使用OTP令牌来多因素认证。这个码能管理OTP令牌。
IPA对于krb5 OTP认证支持使用额外的RADIUS代理服务器。这在集成第三方认证服务时提供了很多方便。
实现了一组命令来管理服务器的SSL证书。
为了请求一个证书：
加入一个IPA域
管理证书颁发机构
管理DNS区域和资源记录。
管理OTP 令牌。
管理RADIUS代理服务器。
管理YubiKey令牌。
管理库。
管理权限
设置DNS位置
设置DNS服务器配置
Misc插件
注意没有使用原因码7。查看RFC 5280以获取更多详细信息：
注意属性和条目之间的区别。权限是独立的，能添加一个用户并不代表该用户是可编辑的。
OTP令牌
权限
通过CLI不能直接访问插件，需要使用内部命令
提供API自省能力。
RADIUS代理服务器
提高IPA域级别。
删除'%(hostname)s'导致在后缀'%(suffix)s'拓扑中失去连接：%(errors)s
复制拓扑后缀'%(suffix)s'已失去连接：%(errors)s
权限定义了允许哪些操作，可能是下面的一个或多个：
1. 写 - 写一条或多条属性
2. 读 - 读一条或多条属性
3. 查找 - 查找一条或多条属性
4. 比较 - 比较一条或多条属性
5. 添加 - 添加一条新属性到树中
6. 删除 - 删除一条已存在的条目
7. 全部 - 授予的所有权限
查找：
标准库使用一种安全机制来传输和存储密码。密码仅能被有权限访问该库的用户检索。
从属证书颁发机构（Sub-CAs）可以当作是X.509证书的发行范围。
Sudo (su "do")允许一个系统管理员给特定用户（或用户组）授予权限使其有以root或其他用户的能力来运行一些（或全部）命令，同时会对命令和命令参数提供一个审计跟踪。
Sudo规则
对称库和标准库类似，但它在传输前会使用一个密码来预加密该密码。密码仅能使用相同的密码来检索。
automember-rebuild命令可以用来对现有条目跟踪运行自动成员规则，以此来重建它们的成员组。
日期格式是YYYY-mm-dd。
dogtag CA只是使用CSR的CN值，并强制主题的其他值在服务器中配置。
支持下面的撤销原因：
有许多允许的目标：
1. 子树：一个DN；在该DN下应用权限的子树
2. 目标过滤器：一个LDAP过滤器
3. 目标：权限适用于带有可能通配符，指定条目的DN
这段代码是otp令牌插件的一个扩展，并对读/写YubiKey令牌提供直接的支持。
拓扑
域级别为1的复制拓扑的管理。
用户库被特定用户拥有并使用。私有库被当前用户拥有。服务库被一个服务拥有。共享库被管理员拥有但可以被其他用户或服务使用。
库
验证复制拓扑的后缀。
检查完成：
1. 检查是否还有没有连接的拓扑。换句话说，是否在所有服务器之间存在复制路径。
2. 检查是否服务器没有超过推荐的副本协议数
YubiKey令牌
另外，下面服务器可以运行该命令：%(masters)s "%s"不是一个有效的权限类型 "%s"不是一个对象类型 呈现${count}个证书 ${count} item(s)已添加 已删除${count}个条目 已禁用${count}个条目 已启用${count}个条目 ${count} item(s) 已移除 已删除${count}个选项 已激活${count}个用户 已恢复${count}个用户 已呈现${count}个用户 ${entity} ${primary_key}设置 ${entity} ${primary_key}已更新 ${entity}已添加成功 ${primary_key}适用于： ${primary_key}是其中一个成员： ${primary_key}受管于： ${primary_key}成员： ${primary_key}覆盖： ${product}，版本：${version} %(attr)s没有包含'%(value)s' %(attr)s：无效的语法。 %(attr)s：仅允许一个值。 %(container)s LDAP搜索没有返回任何结果（搜索基：%(search_base)s，对象类： %(objectclass)s） %(count)d %(type)s记录已忽略。每个DNS记录类型一次只能修改一个值。 %(count)d个ACI已匹配 已匹配%(count)d个CA ACL 已匹配%(count)d个CA 已匹配%(count)d个DNS服务器 已匹配%(count)d个组ID覆盖 已匹配%(count)d个HBAC规则 已匹配%(count)d个HBAC服务组 已匹配%(count)d个HBAC服务 已匹配%(count)d个ID视图 已匹配%(count)d个ID覆盖 已匹配%(count)d个IPA位置 已匹配%(count)d个IPA服务器 已匹配%(count)d个OTP令牌 已匹配%(count)d个RADIUS代理服务器 已匹配%(count)d个SELinux用户映射 已匹配%(count)d个Sudo命令组 已匹配%(count)d个Sudo命令 已匹配%(count)d个Sudo规则 已匹配%(count)d个用户ID覆盖 已匹配%(count)d个自动挂载键 已匹配%(count)d个自动挂载位置 已匹配%(count)d个自动挂载映射 已匹配%(count)d个证书 已匹配%(count)d个授权 已匹配%(count)d个组 已匹配%(count)d个主机 已匹配%(count)d个主机组 已匹配%(count)d个网络组 已匹配%(count)d个权限 已加载%(count)d个插件 已匹配%(count)d个特权 已匹配%(count)d个配置文件 已匹配%(count)d个范围 已匹配%(count)d个角色 已匹配%(count)d个规则 已匹配%(count)d个段 已匹配%(count)d个自助服务 已匹配%(count)d个服务授权规则 已匹配%(count)d个服务授权目标 已匹配%(count)d个服务 已匹配%(count)d个拓扑后缀 已匹配%(count)d个信任 已匹配%(count)d个用户 %(count)d个变量 已匹配%(count)d个库 已匹配%(count)s个服务器角色 %(cver)s客户端和在'%(server)s'的%(sver)s服务器不兼容 %(filename)s：文件没找到 %(host)s已失败 %(host)s已失败：%(error)s %(info)s %(key)s不能被删除因为%(label)s %(dependent)s需要它 %(key)s不能被删除或禁用因为它是%(label)s %(container)s的最后一个成员 %(label)s %(key)s不能被删除/修改：%(reason)s %(name)s证书无效 %(obj)s默认属性%(attr)s是不允许的！ 名为"%(pkey)s"的%(oname)s已存在 %(operation)s不支持主体 %(principal_type)s %(otype)s "%(oname)s"没有找到 %(parent)s：%(oname)s没有找到 %(pkey)s：%(oname)s没有找到 %(port)s不是一个有效的端口 %(reason)s %(task)s LDAP任务超时，任务DN：'%(task_dn)s' %(type)s类别不能设置为all'，虽然有允许%(objects)s %(user)s不是一个POSIX用户 %(value)s %iCA已添加。 %iCA已移除。 %iCAs已添加。 %iCAs已移除。 %i主机或主机组已添加。 %i主机或主机组已移除。 %i主机或主机组已添加。 %i主机或主机组已移除。 %i配置文件已添加。 %i配置文件已移除。 %i配置文件已添加。 %i配置文件已移除。 %i服务已添加。 %i服务已移除。 %i服务已添加。 %i服务已移除。 %i用户或组已添加。 %i用户或组已移除。 %i用户或用户组已添加。 %i用户或用户组已移除。 %s记录 %s不是一个有效的属性。 %s记录 待添加的%s 不移植%s 待移除的%s %s：找不到组 %s：用户已保存 '${port}'不是一个有效的端口 '%(attr)s'已包含一个或多个值 '%(command)s'已被弃用。%(additional_info)s '%(entry)s'没有证书。 需要'%(name)s' '%(option)s'选项已弃用。%(additional_info)s 当'%(name)s'被设置时'%(required)s'必须不能为空 '%s'是DNS记录的必要部分 'add'选项 （弃用） （查阅RFC %s 来获取详细信息） 检查存在组的GID。使用--group-overwrite-gid选项来覆盖GID 7不是一个有效的撤销原因 <p>如果没有选择方法那么就使用隐式方法（密码）。</p><p><strong>密码+双因素</strong>LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方法，该方法需要使用armor ccache</p><p><strong>RADIUS和另外的类型：</strong> Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。</p> <p>如果所有选项都检测了那么每个用户设置会覆盖全局设置。</p><p><strong>密码+双因素</strong>LDAP和Kerberos允许使用其中任一认证类型来认证但是Kerberos使用预认证方法，该方法需要使用armor ccache</p><p><strong>RADIUS和另外的类型：</strong> Kerberos总是使用RADIUS，但是LDAP从不使用。LDAP仅识别密码和双因素认证选项。</p> IP地址 系统权限可能不能被修改或删除 该RADIUS代理服务器的描述 一个自动成员规则的描述 该命令的一个描述 该主机的描述 该主机组的描述 该角色组的描述 一个字典代表一个LDAP条目 一个组不能是自己的成员 一个组不能是自己的成员 主机愿意充当关键交换器 主机愿意充当邮件交换器 一个别名主机名指向主机名 ACI值列表 LDAP条目列表 SELinux用户列表期望以$分隔 一个全局转发器列表。使用标准格式"IP_ADDRESS port PORT"为每个转发器指定一个自定义端口 一个Per-zone转发器列表。使用标准格式"IP_ADDRESS port PORT"为每个转发器指定一个自定义端口 管理组不能有密码策略。 遇到的问题是什么时候验证所有成员是%(verb)s：%(exc)s 一条记录 从复制更新中删除的以空格分隔的属性列表。 在所有相关对象中搜索字符串 A6记录数据 A6记录 AAAA IP地址 AAAA记录 ACI名称 ACI权限%s没有找到 ACI前缀 需要ACI前缀 ACI名"%s"没有找到 ACIs ACL名称 AD DC不能连接任何IPA域控制器。最有可能是一个DNS或者防火墙事件 AD信任设置 AD域控制器 AD域控制器抱怨通信序列。这可能意味着双方时间不同步，例如 AFSDB主机名 AFSDB子类型 AFSDB记录 API概述 没有发送API版本号，不能保证向前兼容。假定服务器的API版本%(server_version)s APL记录 关于 访问阻止 访问允许 访问授权：%s 访问该主机 访问时间 访问 账户 账户设置 账户状态 禁用账户 账户已禁用：%(disabled)s 操作 激活 激活一个计划用户"%(value)s" 激活一个计划用户。 活动目录域 活动目录域管理员 活动目录域管理员密码 活动目录域范围 带POSIX属性的活动目录域 有POSIX属性的活动目录信任范围 活动目录域管理员密码 活跃用户 活跃区 添加 向一个CA ACL中添加CAs。 添加自定义属性 添加自定义认证机构 添加Kerberos主体别名 添加多个 向一个计划用户条目中添加一个管理员 向一个用户条目中添加一个管理员 添加一个新的DNS服务器。 添加一个新的组ID覆盖。 添加一个新的HBAC服务组。 添加一个新的HBAC服务。 添加一个新的ID视图。 添加一个新的ID覆盖。 添加一个新的IPA位置。 添加一个新的IPA服务。 添加一个新的IPA服务。 添加一个新的OTP令牌。 添加一个新的RADIUS代理服务器。 添加一个新的用户ID覆盖。 增加一个新的YubiKey OTP令牌。 添加一个新的授权。 添加一个新的组密码策略。 添加一个新主机。 添加一个新的主机组。 添加一个新的网络组。 添加一个新的权限。 添加一个新的特权。 添加一个新角色。 添加一个新段。 添加一个新的自助服务权限。 添加一个新的拓扑后缀到管理中。 添加一个新用户。 为每个正向区访问授权添加一个权限。 为每个区访问授权添加一个权限。 添加一个没有ACI的系统权限 添加一个没有ACI的系统权限（内部命令） 添加一个属性/值对。格式是属性=值。属性必须时模式的一部分。 添加一个自动成员规则。 向Sudo规则中添加一个选项。 添加并添加另一个 添加和关闭 添加和编辑 向主机条目中添加证书 添加受Sudo规则影响的命令和sudo命令组。 添加条件到一个自动成员规则。 添加自定义值 添加域 为位于创建区域的命名服务器添加正向记录 添加受Sudo规则影响的主机和主机组。 添加可以管理该主机的主机。 添加可以管理该服务的主机。 向一个命名服务授权规则中添加成员。 向一个命名服务授权规则中添加成员。 向Sudo命令组中添加成员。 向一个组中添加成员。 向一个主机组添加成员。 向一个网络组添加成员。 将成员添加到权限。 向一个特权中添加成员。 向角色中添加成员。 向一个库中添加成员。 在一个HBAC服务组中添加成员。 添加没有组的移植用户到一个默认组（默认：正确的） 添加新的DNS资源记录。 向一个服务中添加新证书 向一个服务添加新的主体别名 为主机条目添加新的主体别名 为用户条目添加新的主体别名 向id覆盖用户条目中添加一个或多个证书 向用户条目中添加一个或多个证书 向一个库容器中添加所有者。 向一个库中添加所有者。 向一个特权中添加权限。 添加主体 向一个角色中添加特权。 向一个CA ACL中添加配置文件。 向一个CA ACL中添加服务。 在HBAC规则中添加服务 从一个HBAC规则中添加源主机和主机组。 向一个CA ACL中添加目标主机和主机组。 在一个HBAC规则中添加目标主机和主机组。 向SELinux用户映射规则中添加目标主机和主机组。 向一个命名服务授权规则中添加目标。 添加目标到一个命名服务授权。 用该IP地址将主机添加到DNS中 添加到默认组 添加受Sudo规则影响的用户和用户组。 向一个CA ACL中添加用户和用户组。 在一个HBAC规则中添加用户和用户组。 向SELinux用户映射规则中添加用户和用户组。 添加可以管理该令牌的用户 已添加 %(map)s 已添加 %(src)s 到 %(dst)s 已添加活动目录域"%(value)s" 已添加CA ACL"%(value)s" 已添加组ID覆盖"%(value)s" 已添加HBAC规则"%(value)s" 已添加HBAC服务"%(value)s" 已添加HBAC服务组"%(value)s" 已添加ID视图"%(value)s" 已添加ID覆盖"%(value)s" 已添加ID范围"%(value)s" 已添加IPA位置"%(value)s" 已添加OTP令牌"%(value)s" 已添加RADIUS代理服务器"%(value)s" 已添加SELinux用户映射"%(value)s" 已添加Sudo命令"%(value)s" 已添加Sudo命令组"%(value)s" 已添加Sudo规则"%(value)s" 已添加用户ID覆盖"%(value)s" 已添加自动成员规则"%(value)s" 已添加自动间接映射"%(value)s" 已添加自动挂载键"%(value)s" 已添加自动挂载位置"%(value)s" 已添加自动挂载映射"%(value)s" 已向主机"%(value)s"中添加证书 已添加证书到id覆盖用户"%(value)s" 已添加证书到服务主体"%(value)s" 已为用户"%(value)s"添加证书 已在"%(value)s"上添加条件 已添加授权"%(value)s" 已添加组"%(value)s" 新增主机 "%(value)s" 已添加主机组"%(value)s" 已添加网络组"%(value)s" 已添加新的DNS服务器"%(value)s" 已为主机"%(value)s"添加新别名 已添加新的别名到服务主体"%(value)s" 已为用户"%(value)s"添加新别名 已添加"%(option)s"到Sudo规则"%(rule)s" 已添加权限"%(value)s" 已添加特权"%(value)s" 已添加角色"%(value)s" 已添加段"%(value)s" 已添加自助服务"%(value)s" 已添加服务"%(value)s" 已添加服务授权规则"%(value)s" 已添加服务授权目标"%(value)s" 已添加计划用户"%(value)s" 已添加系统权限"%(value)s" 已添加拓扑后缀"%(value)s" 已添加用户"%(value)s" 已添加库"%(value)s" 附加指示： 地址无效，不能重定向 管理员账户 管理员电子邮件地址 由服务器公布 协议已删除 算法 全部 权限可以应用所有属性 所有命令至少有一个返回值 允许 允许PTR同步 允许访问信任域 允许从信任域中添加额外的非IPA成员 允许动态更新 当解析AD信任对象时允许回退到AD DC LDAP。仅供双向信任。 允许嵌套DNSSEC签名 允许在区域中嵌套DNSSEC记录签名 允许查询 允许同步正向（A，AAAA）和反向（PTR）记录 允许在区域中同步正向（A，AAAA）和反向（PTR）记录 允许传输 允许使用信任域中的IPA资源 允许用户，用户组，主机或主机组来创建该主机的keytab。 允许用户，用户组，主机或主机组来创建一个该服务的keytab。 允许用户，用户组，主机或主机组来检索该主机的keytab。 允许用户，用户组，主机或主机组来检索一个该服务的keytab。 允许的目标 允许模仿 允许创建keytab 允许检索keytab 即使使用兼容插件也允许迁移 已注册 可供选择的UPN后缀 高度 总是询问 模糊查找，用户域没有指定 IPA主主机不能被删除或禁用 出现一个错误(${error}) 在抓取dns区域时发生错误。 id范围已在该域中存在。你要么删除旧的范围，要么从命令中排除--base-id/--range-size选项。 命名服务器新的DNS区域定期调查的间隔 锚'%(anchor)s'不能被解析。 任何CA 任何命令 任何组 任何主机 任何配置文件 任何服务 任何人 适用的主机 ID视图适用于指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆盖它。 应用ID视图到指定的主机或指定主机组的当前成员。如果该主机已有其他ID视图，则覆盖它。 应用 应用ACI到你自己的条目 适用的主机组 适用的主机 数据归档到库。 数据归档到库"%(value)s" 你确定要${action}用户？<br/>改变会立即生效。 你确定要激活${object}？ 你确定要激活被选用户？ 你确定要为DNS区域${object}添加权限吗？ 你确定要删除${object}？ 你确定要删除被选条目？ 你确定要禁用${object}？ 你确定要禁用被选条目？ 你确定要启用${object}？ 你确定要启用被选条目？ 你确定要执行该操作吗？ 你确定要为DNS区域${object}删除权限吗？ 你确定要恢复${object}？ 你确定要恢复被选用户？ 你确定要呈现${object}？ 你确定要呈现被选用户？ 你确定要在选择的条目中不应用ID视图？ 你确定要解锁用户${object}？ 作为谁 要求一个非随机密码用于主体 已分配的ID视图 分配管理者令牌（默认：自己） 分配用户令牌（默认：自己） 至少应该指定域或IP地址 属性 性键值 属性分类 通过正则表达式来过滤属性。例如：一个主机的fqdn属性，或者一个用户的manager属性 属性 所有更新的属性 在DS中被用户组条目所忽略的属性 在DS中被用户条目所忽略的属性 待复制属性 权限默认应用的属性 权限应用属性。 审计 身份验证 认证指标 认证指标 认证指标 权威的命名服务器 权威命名服务器改变 权威的命名服务器域名 授权ID 自动成员规则 自动成员没有配置 自动成员规则：%s没有找到！ 自动生成 自动更新DNS系统记录失败。请手动重新运行更新系统记录来获取缺少的记录。 自动成员 自动成员规则 自动成员重建成员关系任务已完成 自动成员重建成员关系任务已开始 自动挂载 自动挂载键 自动挂载键 自动挂载位置 自动挂载位置设置 自动挂载位置 自动挂载映射 自动挂载映射 自动挂载键名。 自动挂载键对象。 自动挂载位置名。 自动挂载映射名。 自动挂载主文件。 可用的 BIND更新策略 返回 回到顶部 凭证缓存格式错误 错误的或不支持的盐值类型。
无效的搜索过滤器 不正确的查询筛选器%(info)s 基DN 远程LDAP服务器上的基DN 基ID Base-64编码的证书。 Base-64编码的主机证书 Base-64 编码格式的服务器证书 Base-64编码的服务证书 Base-64编码的用户证书 Base64解码失败: %(reason)s 绑定DN 绑定规则类型 该配置文件的简要描述 CA'%s'被禁用 CA类别 CA类别不能设置为all'，虽然有允许CAs ACL应用的CA类别 CA证书 CA没有配置 当CA类别='all'时CAs不能被添加 CERT算法 CERT证书类型 CERT证书/CRL CERT键标记 CERT记录 CIFS凭证对象 CIFS服务器%(host)s阻止你的凭证 CIFS服务器通信错误：代码"%(num)s"，消息"%(message)s"（两者都有可能没有任何信息） CIFS服务器阻止你的凭证 CLI名称 CNAME主机名 CNAME记录 CNAME记录不允许与任何其他记录共存（RFC 1034，第3.6.2节） 取消 不能创建反向记录"%(value)s"：%(exc)s 不能解码文件'%(filename)s': %(exc)s 不能和%(host)s建立LSA连接。CIFS服务器是否在运行？ 不能建立一个信任到部署在IPA同一域中的AD。这样的设置不支持。 找不到指定的域或服务器名称 没有安装Samba 4不能执行SID验证。确认你已经在IPA服务器上安装了server-trust-ad子包 没有安装Samba 4不能执行外部成员验证。确认你已经在IPA服务器上安装了server-trust-ad子包 没有自己的域配置不能执行加入操作。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令 没有在该机器上进行Samba 4实例配置不能执行被选命令。确认你已经在该服务器上运行ipa-adtrust-install。 没有安装Samba 4不能执行被选命令。确认你已经在IPA上安装了server-trust-ad子包。 不能读取文件'%(filename)s': %(exc)s 请求域中不能解析KDC 不能检索信任域GC列表 没有自己的域配置不能在信任域中查找。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令 不能存储权限ACI到%s 不能使用%(old_name)s和%(new_name)s 汽车执照 证书 证书关联数据 证书颁发机构 证书颁发机构 证书持有已删除 证书配置文件 待使用的证书配置文件 证书配置文件 待添加的证书配置文件 待移除的证书配置文件 证书已撤销 证书类型 证书用途 ${entity} ${primary_key}证书 证书格式错误：%(error)s base64或PEM格式的证书 证书操作没有完成：%(error)s 证书配置文件不能被重命名 证书请求 由CA'%(ca)s'发布序列号为%(serial)s的证书没有找到 证书存储在文件'%(file)s'中 证书/CRL 证书 改变当前域级别。 改变密码 更改为POSIX组 更改为外部组 已改变"%(value)s"的密码 字符类 检测DNS 检测和远程IPA服务器的连接。 检查证书签名请求的状态。 检查记录是否存在。 检查是否有任何服务器启用了CA服务。 检查是否有任何服务器启用了DNS服务。 城市 类 从指定主机或指定主机组的当前成员中清除ID视图。 点击${action} 客户端证书可以授权给服务 客户端没有配置。运行ipa-client-install。 客户端版本。用来确定是否服务器接受请求。 时间间隔 时钟偏移量 关闭 关闭keytab失败
全部折叠 以逗号分隔的加密类型列表 以逗号分隔的属性列表 在DS中被组条目所忽略以逗号分隔的属性 在DS中被用户条目所忽略以逗号分隔的属性 在DS中被组条目所忽略以逗号分隔的对象类 在DS中被用户条目所忽略以逗号分隔的对象类 在DS中用于查找用户组条目以逗号分隔的对象类 在DS中用于查找用户条目以逗号分隔的对象类 以逗号分隔的授权列表（读，写）。默认是写。 以逗号分隔的授权列表（读，写，添加，删除，全部） 以逗号分隔的原始A记录列表 以逗号分隔的原始A6记录列表 以逗号分隔的原始AAAA记录列表 以逗号分隔的原始AFSDB记录列表 以逗号分隔的原始APL记录列表 以逗号分隔的原始CERT记录列表 以逗号分隔的原始CNAME记录列表 以逗号分隔的原始DHCID记录列表 以逗号分隔的原始DLV记录列表 以逗号分隔的原始DNAME记录列表 以逗号分隔的原始DNSKEY记录列表 以逗号分隔的原始DS记录列表 以逗号分隔的原始HIP记录列表 以逗号分隔的原始IPSECKEY记录列表 以逗号分隔的原始KEY记录列表 以逗号分隔的原始KX记录列表 以逗号分隔的原始LOC记录列表 以逗号分隔的原始MX记录列表 以逗号分隔的原始NAPTR记录列表 以逗号分隔的原始NS记录列表 以逗号分隔的原始NSEC记录列表 以逗号分隔的原始NSEC3记录列表 以逗号分隔的原始NSEC3PARAM记录列表 以逗号分隔的原始PTR记录列表 以逗号分隔的原始RP记录列表 以逗号分隔的原始RRSIG记录列表 以逗号分隔的原始SIG记录列表 以逗号分隔的原始SPF记录列表 以逗号分隔的原始SRV记录列表 以逗号分隔的原始SSHFP记录列表 以逗号分隔的原始TA记录列表 以逗号分隔的原始TKEY记录列表 以逗号分隔的原始TSIG记录列表 以逗号分隔的原始TXT记录列表 命令'%(name)s'已被弃用 命令类别 规则适用的命令类别 命令名 命令没有实现 命令 通用名 不能被添加的条件 不能被移除的条件 配置 配置你的令牌 通过浏览下面的二维码来配置你的令牌。如果你想在你配置的设备上看到该二维码，请点击它。 配置管理服务器超出限制 配置大小超出限制 配置时间超出限制 确认（密码） 确认 连接 连续失败后锁定 联系方式设置 无法连接指定的KDC服务器 连续 连续模式：有错误不停止。 连续操作模式。报告错误但这个过程仍在继续 连续操作模式。报告错误但是这个过程仍在继续。 在服务器上转换 不能交互式地获取%(name)s 不能读UPG原过滤器定义。检查你的权限。 计数器 计数型（HOTP） 从一个删除用户中创建计划用户 创建一个CA。 创建一个新的CA ACL。 创建一个新HBAC规则。 创建一个新的SELinux用户映射。 创建一个新的自动挂载键。 创建一个新的自动挂载位置。 创建一个新的自动挂载映射。 创建一个新组。 创建一个新的间接挂载点。 创建一个新的服务授权规则。 创建一个新的服务授权目标。 创建一个新库。 创建一个非POSIX组 创建dns记录 创建新的ACI。 创建新的DNS正向区。 创建新的DNS区域（SOA记录）。 创建新的Sudo命令组。 创建新的Sudo命令。 创建新的Sudo规则。 创建反向 为该IP地址创建反向记录 已创建ACI"%(value)s" 已创建CA"%(value)s" 创建记录。 凭证缓存权限不正确 跨域信任没有配置。首先确认你已经在IPA服务器上运行了ipa-adtrust-install命令 目前的DNS记录内容：
当前密码 当前域级别： 需要当前密码 自定义值 DHCID记录 DLV算法 DLV摘要 DLV摘要类型 DLV键标记 DLV记录 DN通用名与用户登录名不匹配 DN电子邮件地址不匹配任何用户的电子邮件地址 在DS中与基类DN相关的用户组容器DN 在DS中与基类DN相关的用户容器DN 已开始任务的DN DN绑定好像没有使用kerberos DNAME目标 DNAME记录 DNS DNS正向区域 DNS正向区域 DNS全局配置 DNS RR类型"%s"在bind-dyndb-ldap插件中不被支持 DNS资源记录 DNS资源记录 DNS服务器 DNS服务器名 DNS服务器 DNS区域 DNS区域设置 DNS区域 DNS检测失败：预期的{%(expected)s}，得到的{%(got)s} DNS类 DNS配置选项 DNS正向区域 DNS正向区域 自从IPA 4.0后DNS转发器语义改变了。你可以使用正向区域（dnsforwardzone-*）来替代。查看帮助文档获取更多详细信息。 DNS没有配置 DNS标签不能长于63个字符 DNS标签不能长于63个字符 DNS记录已删除因为它没有数据。 主机%(host)s的DNS记录不能被移除。(%(reason)s) 一次只能更新一条DNS记录 DNS资源记录 DNS资源记录类型 DNS资源记录 IP地址为%(addr)s的DNS反向区域%(revzone)s没有被该服务器管理 DNS服务器 DNS服务器%(server)s不支持DNSSEC：%(error)s。如果DNSSEC认证在IPA服务器上启用了，请禁用它。 DNS服务器%(server)s不支持EDNS0 (RFC 6891)：%(error)s。如果DNSSEC认证在IPA服务器上启用了，请禁用它。 DNS服务器%(server)s：%(error)s。 DNS服务器 DNS区域 DNS区域%(zone)s没有找到 DNS区域的每个realm域必须包括SOA或NS记录。没有找到记录：%s DNS根区域记录不能被重命名 DNS区域 DNSKEY记录 DNSSEC支持是实验性的。%(additional_info)s DNSSEC认证失败：%(error)s。请确认你的DNSSEC配置或者在所有IPA服务器中禁用DNSSEC认证。 DS算法 DS摘要 DS摘要类型 DS键标记 DS记录 DS记录不得在区域顶点（RFC 4035第2.4节） DS记录需要与一个NS记录共存（RFC 4592第4.6节，RFC 4035第2.4节） 数据 调试输出 默认 默认（回退）组 默认PAC类型 默认的SELinux用户 当在SELinux映射规则中找不到匹配项时使用默认SELinux用户 默认信任视图不能应用于主机上 默认信任视图不能包含IPA用户 默认属性 默认的电子邮件域 默认的 新用户默认组 新用户的默认组不是POSIX 新用户的默认组没有找到 默认组对象类 默认组对象类（以逗号分割） 默认主机组 主目录的默认位置 默认shell 新用户默认shell 默认票据策略不可读 默认存活时间 默认PAC支持服务的类型 默认支持用户认证的类型 默认用户认证类型 默认用户组 默认用户对象类 默认用户对象类（以逗号分割） 默认用户组 授权 授权名 授权 删除 删除%(name)s '%(value)s'？ 删除ACI。 删除DNS正向区。 删除DNS记录条目。 删除DNS资源记录。 删除DNS区域（SOA记录）。 删除IPA服务器。 删除密钥，取消供应 删除服务器 删除Sudo命令组。 删除Sudo命令。 删除Sudo规则。 删除一个CA ACL。 删除一个证书配置文件。 删除一个DNS服务器 删除一个RADIUS代理服务器。 删除一个SELinux用户映射。 删除一个授权。 删除一个组密码策略。 删除一个主机。 删除一个主机组。 删除一个网络组。 删除一个权限。 删除一个特权。 删除一个角色。 删除一个段。 删除一个自助服务权限。 删除一个计划用户。 删除一个拓扑后缀。 删除一个信任。 删除一个用户 删除一个用户，让这个用户可供将来使用 删除一个用户。 删除一个库容器。 删除一个库。 删除所有相关记录 全部删除？ 删除一个组ID覆盖。 删除一个HBAC规则。 删除一个HBAC服务组。 删除一个ID视图。 删除一个ID覆盖。 删除一个ID范围。 删除一个IPA位置。 删除一个IPA服务。 删除一个OTP令牌。 删除一个用户ID覆盖。 删除一个自动成员规则。 删除一个自动挂载键。 删除一个自动挂载位置。 删除一个自动挂载映射。 删除一个存在的HBAC服务。 删除域 删除组。 删除模式 删除服务授权目标。 删除服务授权。 已删除ACI"%(value)s" 已删除CA"%(value)s" 已删除CA ACL"%(value)s" 已删除DNS正向区域"%(value)s" 已删除DNS服务器"%(value)s" 已删除DNS区域"%(value)s" 已删除组ID覆盖"%(value)s" 已删除HBAC规则"%(value)s" 已删除HBAC服务"%(value)s" 已删除HBAC服务组"%(value)s" 已删除ID视图"%(value)s" 已删除ID覆盖"%(value)s" 已删除ID范围"%(value)s" 已删除IPA位置"%(value)s" 已删除IPA服务器"%(value)s" 已删除OTP令牌"%(value)s" 已删除RADIUS代理服务器"%(value)s" 已删除SELinux用户映射"%(value)s" 已删除Sudo命令"%(value)s" 已删除Sudo命令组"%(value)s" 已删除Sudo规则"%(value)s" 已删除用户ID覆盖"%(value)s" 已删除自动成员规则"%(value)s" 已删除自动挂载键"%(value)s" 已删除自动挂载位置"%(value)s" 已删除自动挂载映射"%(value)s" 已删除授权"%(value)s" 已删除组"%(value)s" 已删除主机 "%(value)s" 已删除主机组"%(value)s" 已删除网络组"%(value)s" 已删除权限"%(value)s" 已删除特权"%(value)s" 已删除配置文件"%(value)s" 已删除记录"%(value)s" 已删除角色"%(value)s" 已删除段"%(value)s" 已删除自助服务"%(value)s" 已删除服务"%(value)s" 已删除服务授权规则"%(value)s" 已删除服务授权目标"%(value)s" 已删除计划用户"%(value)s" 已删除拓扑后缀"%(value)s" 已删除信任"%(value)s" 已删除用户"%(value)s" 已删除库"%(value)s" 已删除库容器 删除一个管理组时不允许的。它必须先分离出来。 从拓扑中永久地删除一台服务器。注意这是一个不可逆的操作。 删除这台服务器是不允许的因为这将导致你的安装过程没有CA。 删除这台服务器将使得你的安装过程没有DNS。 阻止 部门编号 已弃用的选项 已弃用；使用%s 过时的；使用额外的目标过滤器 描述 CA描述的目的 从用户"%(value)s"中分离组"%(value)s" 检测 确定是否将模式兼容插件配置成服务器信任域用户和用户组 确定是否在该系统上运行ipa-adtrust-install 国际化消息字典 JSON编码IPA命令字典 JSON编码IPA方法字典 JSON编码IPA对象字典 摘要 摘要类型 数字 直接的 直接成员 纬度方向 经度方向 禁用 禁用DNS正向区。 禁用DNS区域。 禁用一个CA ACL。 禁用一个CA。 禁用一个Sudo规则。 禁用一个用户账户。 禁用一个HBAC规则。 禁用一个SELinux用户映射规则。 禁用每个用户覆盖 禁用一个服务的Kerberos密钥和SSL证书。 禁用该主机的Kerberos密钥，SSL证书和所有的服务。 禁用令牌 禁止使用信任域中的IPA资源 禁用 已禁用CA"%(value)s" 已禁用CA ACL"%(value)s" 已禁用DNS正向区域"%(value)s" 已禁用DNS区域"%(value)s" 已禁用HBAC规则"%(value)s" 已禁用SELinux用户映射"%(value)s" 禁用Sudo规则"%s" 已禁用主机"%(value)s" 已禁用服务"%(value)s" 已禁用信任域"%(value)s" 已禁用用户账户"%(value)s" 不允许用户，用户组，主机或主机组来创建该主机的keytab。 不允许用户，用户组，主机或主机组来创建该服务的keytab。 不允许用户，用户组，主机或主机组来检索该主机的keytab。 不允许用户，用户组，主机或主机组来检索该服务的keytab。 显示DNS资源。 显示Sudo命令组。 显示Sudo命令。 显示Sudo规则。 显示一个段。 给出一个ACI名显示一个单一的ACI。 显示一个自动挂载键。 显示一个自动挂载位置。 显示一个自动挂载映射。 显示一个DNS服务器配置。 显示当前权利。 显示一个指定用户的有效策略 显示DNS正向区信息。 显示DNS区域（SOA记录）信息。 显示一个RADIUS代理服务器信息。 显示一个类信息。 显示一个命令输出信息。 显示一个命令参数信息。 显示一个命令信息。 显示一个授权信息。 显示一个帮助主题信息。 显示一个主机信息。 显示一个主机组信息。 显示指定组信息。 显示一个命名服务授权规则信息。 显示一个命名服务授权目标信息。 显示一个网络组信息。 显示一个权限信息。 显示一个特权信息。 显示范围信息。 显示一个角色信息。 显示一个自助服务权限信息。 显示一个计划用户信息。 显示信任信息。 显示一个用户信息。 显示一个库容器信息。 显示一个库信息。 显示一个组ID覆盖信息。 显示一个HBAC服务组信息。 显示一个HBAC服务信息。 显示一个ID视图信息。 显示一个ID覆盖信息。 显示一个IPA位置信息。 显示一个IPA服务信息。 显示一个OTP令牌信息。 显示一个用户ID覆盖信息。 显示一个自动成员规则信息。 显示密码策略信息。 显示默认（回退）自动成员组的信息。 显示名称 显示该条目的访问权限（需要--all）。更详细的信息请查看ipa帮助页。 显示当前Kerberos票据策略。 显示realm域列表。 显示一个CA ACL的属性。 显示一个CA属性。 显示一个证书配置文件的属性。 显示一个SELinux用户映射规则的属性。 显示一个HBAC规则的属性。 显示当前Kerberos主体的用户记录 不显示二维码 不更新记录只返回预期的记录 你还想执行DNS检查吗？ 你想要检查在DNS中是否有新的权威命名服务器地址 你要删除kerberos别名${alias}吗？ 你要删除证书持有吗？ 你要撤销该证书吗？从下拉列表中选择一个理由。 你要更新系统DNS记录吗？ 文档 Dogtag授权ID 域 域'%(domain)s'不是一个森林'%(forest)s'的根域 域GUID 域级别 域级别不能降低了。 域级别不能提高到{0}，服务器{1}不支持它。 域NetBIOS名 域SID 信任域的域SID 域安全标识符 活动目录域的域控制器（可选的） 域已启用 域名 不创建用户私有组 下载 下载证书为PEM格式文件。 已忽略重复的键： 已忽略重复的映射： 动态更新 编辑 编辑${entity} 有效属性 邮件地址 员工信息 员工编号 员工类型 启用 启用DNS正向区。 启用DNS区域。 启用一个CA ACL。 启用一个CA。 启用一个Sudo规则。 启用一个用户账户。 启用一个HBAC规则。 启用一个SELinux用户映射规则。 启用迁移模式 启用或禁用匿名PKINIT。 启用令牌 启用 已启用CA"%(value)s" 已启用CA ACL"%(value)s" 已启用DNS正向区域"%(value)s" 已启用DNS区域"%(value)s" 已启用HBAC规则"%(value)s" 已启用SELinux用户映射"%(value)s" 启用Sudo规则"%s" 已启用服务器角色 已启用信任域"%(value)s" 已启用用户账户"%(value)s" 加密类型要求 加密类型比较失败！
已注册 注册 注册UUID 注册UUID（没有实现） 注册失败。%s
再次输入 %(label)s进行校验: 键入受信任的组名称。 键入受信任的组或IPA组登录。注意：查找不列举信任域中的组。 键入受信任的用户或IPA用户登录。注意：查找不列举信任域中的用户。 键入受信任的用户登录。 条目 条目%s不存在 条目%s没有找到 条目RDN不是'uid' 条目没有'%(attribute)s' 列举应用视图的所有主机。 错误 错误更改帐户状态 获取默认Kerberos域错误：%s。
获取初始化证书错误：%s。
解析"%1$s"：%2$s错误。
解析keytab错误：%s。
在凭证缓存中存储证书错误：%s。
建立双向信任。默认信任仅是单项的。 建立外部信任到另一个森林域中。信任不会在域外传递。 建立使用 已建立和验证 交换器 排斥 排除的属性 独占的 独占的正则表达式 全部展开 有效期限 webUI中导出插件元数据。 表达式 外部的 外部用户组可以运行的命令（只是sudorule-find） 作为用户来运行的外部用户组 外部用户组可以运行的命令 外部用户 外部用户可以运行的命令（只是sudorule-find） 规则适用的外部用户（只是sudorule-find） 外部主机 额外的成员 外部的信任 额外的目标过滤器 作为其他用户运行失败 作为其他用户组运行失败 不允许创建keytab 不允许检索keytab 失败的主机/主机组 登录失败 失败的成员 错误的所有者 错误的配置文件 失败的服务/服务组 失败的源主机/主机组 失败的目标 添加失败 向keytab中添加密钥失败
添加用户到默认组失败。使用'ipa group-add-member'来手动添加。 绑定服务器失败！
从s4u2proxy条目%(dn)s中清除成员主体%(principal)s失败：%(err)s 为%(master)s清除Custodia密钥失败：%(err)s 为%(master)s清除DNA主机名条目失败：%(err)s 清除%(hostname)s DNS条目失败：%(err)s 清除服务器主体/密钥失败：%(err)s 关闭keytab失败
创建控制失败！
创建密钥材料失败
创建密钥失败！
创建随机密钥失败！
解码控制应答失败！
获取keytab失败
获取keytab失败！
获取结果失败：%s
打开Keytab失败
打开配置文件%s失败
打开keytab失败
打开keytab'%1$s'：%2$s失败
解析配置文件%s失败
解析扩展结果失败：%s
解析结果失败：%s
移除失败 从服务器列表中删除服务器%(master)s失败：%(err)s 未能检索任何密钥 检索加密类型%1$s (#%2$d)失败
检索加密类型#%d失败
失败的用户/用户组 解码证书签名请求失败：%s 失败重置时间间隔 回退主要的组 回退到AD DC LDAP 如果移植失败是因为启用了兼容插件，则错误 如果移植模式是禁用的，则错误 传真号码 获取域名 抓取DNS区域。 从信任森林中获取域失败。在error_log中查看详细信息 没有找到文件 %(file)s 文件包含配置文件配置 文件包含新的库密码 文件包含新的库公钥 文件包含旧的库密码 文件包含旧的库私钥 文件包含库密码 文件包含库私钥 文件包含库公钥 从文件加载证书 文件存储检索数据 存储证书文件。 文件名为空 原始配置文件的文件名。不支持XML格式。 过滤 ${other_entity}过滤器可用 查找 在服务器上找到一个服务器角色 指纹 指纹（SHA1） 指纹类型 客户端缓存的模式指纹 指纹 第一 第一个码 第一个OTP 该范围的第一个Posix ID 信任域范围的第一个Posix ID 匹配RID范围的第一个RID 次要RID范围的第一个RID 令牌被第一次使用 名 标记 下面部分没有被删除： 强制 强制创建DNS区域，即使它会覆盖一个已有区域。 即使命名服务器无法解析，也强制创建DNS区域。 即使命名服务器无法解析，也强制创建DNS区域。（不赞成） 强制更新 即使域在DNS中不存在，也强制添加它 即使命名服务器不在DNS中，也强制改变它 强制服务器删除 强制服务器删除即使它不存在 强制主机加入。即使已经加入了也重新加入。 强制删除%(hostname)s 格式错误 转发器策略 在IPA DNS中转发器策略阻止了它，也许是转发器指向了不正确的主机？ 转发到服务器而不是在本地运行 仅正向区域 转发器 禁止转发 找到'%(value)s' 全名 完全限定的主机名 GECOS字段 GID GID（使用该选项来手动设置它） 普通的 生成OTP 生成一个随机密码用于批量注册 生成一个随机用户密码 在一特定位置生成自动挂载文件。 生成OTP 获得 获取证书 全局DNS配置是空的 全局信任配置 全局转发器 全局转发器。使用标准格式"IP_ADDRESS port PORT"为每个转发器指定一个自定义端口 全局转发器策略。通过设置"none"来禁用全局转发器的所有配置。 授予权限 授于特权 给角色授予特权 组 组 '%s' 不存在 组ID号码 组ID覆盖 组ID覆盖 组选项 组设置 组类型 组容器 组描述 组名 组对象类 组对象覆盖 组搜索域 待覆盖的组 组类型 组应用于哪种规则 用户组 允许创建keytab的用户组 允许检索keytab的用户组 作为用户来运行的用户组 HBAC规则 HBAC规则定义了用户，用户组和主机组 HBAC规则 HBAC服务 HBAC服务组 HBAC服务组 HBAC服务 HBAC测试 HBAC规则 HBAC规则%(rule)s没有找到 HBAC规则和本地成员不能被同时设置 HBAC规则 HBAC服务 HBAC服务描述 HBAC服务组 HBAC服务组描述 HBAC服务组 待添加的HBAC服务组 待移除的HBAC服务组 HBAC服务 待添加的HBAC服务 待移除的HBAC服务 HIP记录 HOTP认证窗口 HOTP同步窗口 HTTP错误 主机硬件MAC地址 主机硬件平台（例如：联想T61） 帮助主题 隐藏 隐藏细节 隐藏规则匹配，不匹配或无效的细节 历史大小 主目录 主目录 水平精度 主机 主机'%(host)s'没有找到 主机'%(hostname)s'没有相配的DNS A/AAAA记录 主机证书 主机组 主机组设置 主机组 允许创建keytab的主机组 允许检索keytab的主机组 主机名 主机设置 主机类别 主机类别（该属性的语义是就近解读） ACL适用于主机类别 规则应用的主机类别 主机组规则 主机组规则 主机硬件平台 (e.g. "Lenovo T61") 主机已加入。
主机不被支持 主机地点(如"Baltimore, MD") 主机位置(如"Lab 2") 主机名 主机操作系统及版本(e.g. "Fedora 9") 主机未分配 基于主机访问控制命令 主机组 主机组的主机应用ID视图。请注意运行命令idview-apply后，视图并不会自动应用到主机组中的主机中去。 主机名 主机名（FQDN） 该服务器的主机名 主机 允许创建keytab的主机 允许检索keytab的主机 ID视图不能被清除的主机或主机组。 不能应用该ID视图的主机或主机组。 应用过该ID视图的主机。 适用于主机的视图 主机应用ID视图 负面响应应该被缓存多久 ID范围 ID范围 ID视图 ID视图名称 ID视图已应用 ID视图应用于%i主机。 ID视图应用于%i主机。 从%i主机中清除ID视图。 从%i主机中清除ID视图。 ID视图 ID覆盖 ID覆盖不能被重命名 信任域的ID范围已存在，但它有一个不同类型。请手动删除旧的范围，或者通过--range-type选项不强制类型。 ID范围类型，是ipa-ad-trust-posix，ipa-ad-trust，ipa-local中的一个 同名但不同域SID的ID范围已存在。新信任域的ID范围必须手动创建。 IP 地址 IP地址%(ip)s在域%(domain)s中已分配。 IP网络创建反向区域名 IPA AD信任代理 IPA AD信任控制器 IPA CA不能被删除 IPA CA不能被禁用 IPA CA更新主服务器 IPA CA服务器 IPA DNS记录 IPA DNS服务器 IPA DNS版本 IPA DNSSec密钥主机 IPA错误 IPA KRA服务器 IPA位置 IPA本地描述 IPA位置 当信任域的SID被指定时，IPA范围类型必须是ipa-ad-trust或ipa-ad-trust-posix中的一个 当信任域的SID没有被指定时，IPA范围类型必不能是ipa-ad-trust或ipa-ad-trust-posix。 IPA服务器 IPA服务器角色 IPA服务器角色 待使用的IPA服务器 IPA服务器 IPA没有管理区域%(zone)s，请手动在你的DNS服务器上添加记录 IPA位置名 IPA位置记录 IPA主服务器%(count)d次阻止来自AD DC的信任有效请求。最有可能是AD DC联系了一个没有信任信息副本的副本。同时，请检查AD DNS能将%(records)s SRV记录解析到正确的IPA服务器上。 IPA主服务器 IPA名称上下文没有找到
IPA对象 IPA角色名 IPA服务器配置为DNSSec密钥主机 IPA服务器域不能被删除 IPA服务器域不能被省略 IPA服务主机名 IPA服务器角色名 IPA服务器配置为AD信任代理 IPA服务器配置为AD信任控制器 IPA服务器配置为证书认证机构 IPA服务器配置为密钥恢复代理 IPA信任 IPA唯一ID IPSECKEY记录 身份 身份设置 如果没有指定CAs，那么允许请求默认CA。 如果问题仍然存在,请联系系统管理员。 不检查最后的CA或DNS服务器 忽略兼容插件 忽略组属性 忽略组对象类 删除后忽略拓扑连通性问题 忽略拓扑错误 忽略用户属性 忽略用户对象类 已忽略 %(src)s 到 %(dst)s 已忽略的键： 忽略这些警告并给予清除 忽略拓扑连通性错误。 导入一个证书配置文件。 导入一个权利证书。 在一特定位置导入自动挂载文件。 已导入的键： 已导入的映射： 已导入配置文件"%(value)s" 包含禁用的 包含启用的 在测试中包含所有禁用的IPA规则 在测试中包含所有启用的IPA规则【默认】 包含 包含的属性 兼容的 兼容的正则表达式 提供了不兼容的选项（-r和-P）
间接的 间接成员HBAC服务 间接成员HBAC服务组 间接成员组 间接成员主机组 间接成员主机 间接成员网络组 间接HBAC规则成员 间接Sudo规则成员 间接组成员 间接主机组成员 间接网络组成员 间接角色成员 间接角色成员 间接成员权限 间接成员用户 间接成员 继承了服务器配置 HOTP令牌初始计数器 左节点初始化 右节点初始化 名字的首字母 多次指定输入数据 输入文件名 输入包含无效的或缺失的值。 对条目'%s'没有'add'权限。 对条目'%s'的'krbLastPwdChange'属性没有'write'权限。 对条目'%s'的'userCertificate'属性没有'write'权限。 访问受限：%(info)s 没有权限创建主题alt名为'%s'的证书。 内部错误 无效的JSON-RPC请求: %(error)s 无效的LDAP URI。 无效的服务主体名
无效的证书 无效的格式。应该是“名称=值” 无效的部分！ 无效的或者不支持的类型。允许的值是：%s 无效的或不支持的库公钥：%s 无效的库类型 区域活跃吗？ 发布 发布方 签发日期 颁发给 发布于 发布到 发行人 证书颁发机构名字 发行人专有名称 发行CA 它仅被用来设置SOA MNAME属性。 职称 加入一个IPA域 KEY算法 KEY标记 KEY协议 KEY公钥 KEY记录 KRA服务没有启用 KX交换器 KX优先权 KX记录 没有找到Kerberos凭证缓存。你有Kerberos票据吗？
Kerberos密钥 没有找到Kerberos密钥 找到Kerberos密钥，主机分配 找到Kerberos密钥，服务分配 Kerberos服务主体名 Kerberos票据策略 没有找到Kerberos用户主体。你有有效的凭证缓存吗？
Kerberos文本初始化失败
Kerberos文本初始化失败：%1$s (%2$d)
Kerberos 错误： %(major)s/%(minor)s Kerberos密码可用 Kerberos主体 Kerberos主体%s已存在。使用'ipa user-mod'来手动设置它。 Kerberos主体过期 该主机的Kerberos主体名 键 密钥泄露 键标记 Keytab文件名 Keytab检索成功并将其存储在：%s
LDAP URI LDAP密码 LDAP密码（如果没有使用Kerberos） LDAP模式 用户和用户组的LDAP范围查找：基，一级，或子树。默认是一级 待管理的LDAP后缀 LDAP超时 LOC高度 LOC纬度方向 LOC经度方向 LOC水平精度 LOC分钟纬度 LOC分钟经度 LOC秒纬度 LOC秒经度 LOC大小 LOC垂直精度 LOC记录 级别 分类 最后 令牌被最后一次使用 上一次认证失败 姓 上一次认证成功 开头和结尾空格是不允许的 左节点 左复制节点-IPA服务器 合法的LDAP过滤（例如：ou=Engineering） TOTP令牌码有效长度 级别 所有服务库列表 所有用户库列表 IPA主服务器配置为DNS服务器列表 所有IPA主服务器列表 删除失败的列表 已启用角色列表 公布给出位置的服务器列表 信任域列表更新成功。使用trustdomain-find命令来列举它们。 对象移植列表；按类型分类。 不能移植的对象列表；按类型分类。 从文件加载LDAP服务器的CA证书 本地域 位置 位置 位置名 ACI的位置 锁定时间 登录 登录shell 数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问URI。 数字越低代表优先级越高。客户端尝试用它们可以得到的最低数字优先级区访问服务器。 MAC地址 MX交换器 MX优先权 MX记录 邮件地址 有缺陷的主体：'%(value)s' 管理指定组的密码策略 管理指定用户的票据策略 已管理的LDAP后缀DN 管理的后缀 已管理的后缀 管理拓扑需要最小的域级别${domainlevel} 管理者 管理 映射 映射类型 令牌标记为禁用（默认：错误的） 主文件 匹配 已匹配规则 匹配类型 最高域级别 最大失败次数 最长存活期 最大生存期（天） 最大的时间（秒）搜索（-1或0表示无限制） 最大的时间（秒）搜索（>0，或-1表示无限制） 最高域级别 返回的最大证书数 返回的最大条目数 返回的最大条目数（0代表无限制） 最大数量的搜索记录（-1表示无限制） 最大数量的搜索记录（-1或0表示无限制） 当没有使用--rules来指定规则时，能处理的最大规则数 最大密码生存期（天） 最大序列号 票据最长存活期（秒） 最大用户名长度 最大值是${value} 可能不是闲置的 成员组 成员HBAC服务 成员HBAC服务组 成员主机 成员主机组 成员Sudo命令 成员用户 成员组 主机组成员 成员主机 成员网络组 隶属于 HBAC规则的成员 HBAC服务组成员 Sudo规则的成员 组成员 组成员 组成员 主机组成员 网络组成员 成员主体 成员服务组 成员服务 成员用户 信任域的成员是“DOM\名称”或“名称@域名”格式 不能被添加的成员 不能被移除的成员 方法名 方法 将DS中的用户和用户组移植到IPA。 迁移模式是禁用的。
使用'ipa config-mod --enable-migration=TRUE'来启用它。 LDAP搜索帮助移植不支持。 最低域级别 最小长度 最小生存期（小时） 最低域级别 最短密码长度 最小字符类数量 最小密码生存期（小时） 最小序列号 最小值是${value} 分钟纬度 分钟经度 杂项信息 缺少新的库公钥 丢失或者无效的 HTTP Referer, %(referer)s 缺少应答控制列表！
缺少应答控制！
缺失值： 缺少库私钥 缺少库公钥 移动电话号码 模式 已修改 已修改"%(value)s"信任配置 已修改ACI"%(value)s" 已修改CA"%(value)s" 已修改CA ACL"%(value)s" 已修改配置文件"%(value)s" 已修改DNS服务器"%(value)s" 已修改HBAC规则"%(value)s" 已修改HBAC服务"%(value)s" 已修改HBAC服务组"%(value)s" 已修改ID范围"%(value)s" 已修改IPA位置"%(value)s" 已修改IPA服务器"%(value)s" 已修改OTP令牌"%(value)s" 已修改RADIUS代理服务器"%(value)s" 已修改SELinux用户映射"%(value)s" 已修改Sudo命令"%(value)s" 已修改Sudo命令组"%(value)s" 已修改Sudo规则"%(value)s" 已修改一个组ID覆盖"%(value)s" 已修改一个ID视图"%(value)s" 已修改一个ID覆盖"%(value)s" 已修改一个用户ID覆盖"%(value)s" 已修改自动成员规则"%(value)s" 已修改自动挂载键"%(value)s" 已修改自动挂载映射"%(value)s" 已修改授权"%(value)s" 已修改组"%(value)s" 已修改主机 "%(value)s" 已修改主机组"%(value)s" 已修改网络组"%(value)s" 已修改权限"%(value)s" 已修改特权"%(value)s" 已修改角色"%(value)s" 已修改段"%(value)s" 已修改自助服务"%(value)s" 已修改服务"%(value)s" 已修改计划用户"%(value)s" 已修改拓扑后缀"%(value)s" 已修改信任"%(value)s"（改变将在60s内生效） 已修改用户"%(value)s" 已修改库"%(value)s" 已修改：密钥没有设置 修改 %(name)s '%(value)s'？ 修改ACI。 修改CA配置。 修改证书配置文件配置。 修改DNS正向区。 修改DNS服务器配置 修改DNS区域（SOA记录）。 修改ID范围。 修改Kerberos票据策略。 修改OTP配置选项。 修改Sudo命令组。 修改Sudo命令。 修改Sudo规则。 修改一个CA ACL。 修改DNS资源记录。 修改一个OTP令牌。 修改一个RADIUS代理服务器。 修改一个SELinux用户映射。 修改一个授权。 修改一个组密码策略。 修改一个组。 修改一个主机组。 修改一个网络组。 修改一个权限。 修改一个特权。 修改一个角色。 修改一个段。 修改一个自助服务权限。 修改一个计划用户。 修改一个拓扑后缀。 修改一个用户。 修改一个库。 修改一个组ID覆盖。 修改一个HBAC规则。 修改一个HBAC服务组。 修改一个HBAC服务。 修改一个ID视图。 修改一个ID覆盖。 修改一个用户ID覆盖。 修改一个自动成员规则。 修改一个自动挂载键。 修改一个自动挂载映射。 修改一个已存在的IPA服务。 修改配置选项 修改全局DNS配置。 修改全局信任配置。 修改主机信息 修改一个IPA位置信息。 修改一个IPA服务器信息。 修改realm域。 修改信任的信任域 找到不止一个拥有键%(key)s的条目，使用--info来选择指定条目。 挂载信息 挂载点 将已删除用户移植到计划区域 多值 必须是一个小数 必须是一个UTC时间值（例如："2014-01-20 17:58:01Z"） 必须是一个整数 NAPTR标记 NAPTR规则 NAPTR优先权 NAPTR正则表达式 NAPTR替换 NAPTR服务 NAPTR记录 NIS域名 NONE值不能与其他PAC类型相结合 NS主机名 NS记录 NS记录是不能和一个%(type)s记录共存的，除非它位于根区域记录（RFC 2181，第6.节） NS记录可以在带'@'的区域被编辑。 NSEC下一个域名 NSEC类型映射 NSEC记录 NSEC3记录 NSEC3PARAM记录 NSEC3PARAM区记录格式：散列算法 标记 迭代 盐值 名称 导出命令的名称 主机组名称 签发的CA名称 导出方法的名称 导出对象的名称 父自动挂载映射名（默认：auto.master）。 信任域的名称 命名服务器'%(host)s'没有相配的DNS A/AAAA记录 命名服务器的反向区域不能是一个相对的DNS名 没有提供--del-all或者选项来删除一个特定的记录。
可以使用命令帮助来查询所有支持的记录类型。 以嵌套的方法来执行 NetBIOS名称 网络组 网络组设置 网络组描述 网络组名称 网络组 网络服务 新的ACI名 新证书 新密码 新的主体密码 新测试 新的kerberos主体别名 新的挂载信息 需要新密码 多次指定新公钥 新的库密码 新的：密钥没有设置 新的：密钥已设置 下一个 下一个域名 没有找到A，AAAA，SSHFP和PTR记录。 在请求的主题中找不到通用名。 在IPA位置%(location)s没有DNS服务器。没有DNS服务器位置是不会按预期工作的。 没有安装DNSSEC密钥主机。DNSSEC区域签名不会工作直到安装DNSSEC密钥主机。 无效的证书 没有归档数据。 没有找到凭证缓存 没有设置（回滚）组 没有条目。 无文件可读 没有空闲的YubiKey槽！ 没有KDC可接受的密钥
发现了不匹配的条目 没有提供选项来删除具体的记录。 没有提供选项来修改具体的记录。 没有权限将该主机加入到IPA域。
没有私有组 没有响应 该条目没有这样的属性 没有这样的虚拟命令 没有系统首选的加密类型？！
%s没有值 无需等待 在keytab文件%s中没有写权限
非活动目录域 非POSIX 不存在或无效的规则 不传递外部信任到另一个活动目录森林的域中 临时的 不晚于 不早于 不是一个管理组 不是一个有效的IP地址 不是一个有效的IPv4地址 不是一个有效的IPv6地址 不是一个有效的网络地址（例如：2001:db8::/64, 192.0.2.0/24） 在非叶子条目上是不允许的 执行信任设置时没有指定足够的参数 不匹配规则 尚未注册 概述 该范围的ID数 已添加的条件数 已移除的条件数 密码即将过期通知天数 每个令牌码拥有的数字个数 返回的条目数 有ID视图未被设置的主机数量： 应用过该ID视图的主机数量： 已添加的成员数 已移除成员数 已添加的所有者数 待移除的所有者数 已添加权限数 已移除权限数 已加载插件数 已添加特权数 已移除权限数 在超时和失败前LDAP操作从远程复制服务器等待回应的用去的秒数 返回变量数（<= total） OTP OTP配置 OTP令牌 OTP令牌设置 OTP令牌 OTP配置选项 OTP设置 OTP令牌 OTP令牌 在DS中被用户组条目所忽略的对象类 在DS中被用户条目所忽略的对象类 在DS中用户查找用户组条目的对象类 在DS中用于查找用户条目的对象类 旧的库密码 旧的库私钥 一次性密码 需要组，权限或它们自己中的一个 一次性密码命令 只允许一个值 每个区域名只允许一种区域类型 当添加一个AD信任时仅有ipa-ad-trust和ipa-ad-trust-posix允许--range-type值。 主机操作系统版本（例如：Fedora 9） 操作系统 操作失败：%s
操作错误 已添加选项 选项组 当IPA范围类型是ipa-ad-trust-posix时，选项rid-base不能使用 选项 选项dom-sid和dom-name不能被同时使用 选项dom-sid和rid-base必须同时使用 选项dom-sid和secondary-rid-base不能同时使用 选项dom-sid/dom-name和rid-base必须同时使用 选项dom-sid/dom-name和secondary-rid-base不能同时使用 选项secondary-rid-base和rid-base必须同时使用 规则 按SELinux用户优先级递增顺序排列，以$分割 组织单位 组织 组织单位 原始DN子树 原始TTL 其他记录类型 我们的域没有配置 内存不足！
内存不足
内存不足
内存不足！ 内存不足！
内存不足！？
输出文件名 仅输出错误 覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持 覆盖默认支持的PAC类型列表。使用'NONE'来禁用该服务的PAC支持，例如，这可能是NFS服务的必要条件。 覆盖已存在的密码 覆盖继承设置 覆盖GID 所有者 所有者%s 所有者用户组 所有者服务 所有者用户 不能被添加的所有者 不能被移除的所有者 PAC类型 PTR主机名 PTR记录 页 传真号码 参数 父映射 解析所有的原始DNS记录并以有条理的方式返回它们 解析错误 密码 密码过期通知（天） 密码策略 密码策略 密码不能在注册主机上设置。 完成密码更改 密码过期 密码历史大小 密码插件功能 密码重置失败。 多次指定密码 密码用于批量注册 密码不匹配 密码不匹配！ 密码已迁移成pre-hashed格式。IPA不能生成Kerberos密钥，除非提供明文密码。所有移植过的用户在能使用他们的Kerberos账号之前需要登录https://your.domain/ipa/migration/。 密码必须匹配 Per-server有条件的转发器策略。设置为"none"来禁止该区域转发至全局转发器。那样的话，有条件的区域转发器被忽视了。 Per-server转发器。使用标准格式"IP_ADDRESS port PORT"为每个转发器指定一个自定义端口 Per-zone转发器。使用标准格式"IP_ADDRESS port PORT"为每个转发器指定一个自定义端口 一段时间后失败次数将被重置（秒） 锁定持续时间（秒） 权限 ACI授予访问的权限 权限阻止：%(file)s 权限标记 权限名称 权限设置 权限类型 权限值 带有标记%s的权限可能不能被修改或删除 权限 委托权限（读，写）。默认是写。 授予权限（读，写，添加，删除，全部） 允许的加密类型 允许颁发证书 Ping一台远程服务器。 平台 请选择一个待添加的DNS资源记录类型 请指定转发器。 请尝试下面选项： 策略 端口 位置参数 位置参数 服务需要预认证 预先共享的密码 预定义的配置文件'%(profile_id)s'不能被删除 优先权 该交换器的优先级。值越低优先级越高 首选语言 前缀用来区分ACI类型（权限，授权，自助，无） 备用用户 备用用户 上一个 主要的RID基 主要RID范围和次要RID范围不能覆盖 主键唯一 主体 不能认证主体%(principal)s：%(message)s 主体'%(principal)s'不允许使用含配置文件'%(profile_id)s'的CA '%(ca)s'来发布证书。 在主题alt名中的主体'%s'与请求的主体不匹配 主体别名 该证书的主体（例如：HTTP/test.example.com） 主体不是这种格式user@REALM：'%(principal)s' 主机名 打印尽可能少 打印调试信息 打印存储在服务器上的条目。仅影响输出格式。 以GSSAPI模式打印原始的XML-RPC输出 优先级 优先级（顺序） 策略优先级（数字越大意味着优先级越低 多次指定私钥 特权 特权设置 特权撤销 特权描述 特权名 特权 配置文件ID 配置文件ID '%(cli_value)s'与配置文件数据'%(file_value)s'不匹配 指向该配置文件的配置文件ID 配置文件类别 ACL适用于配置文件类别 配置文件配置 配置储存在文件'%(file)s'中 配置文件描述 配置文件 提示设置用户密码 预期的 协议 公钥 公钥 多次指定公钥 二维码的宽度大于tty的输出。请调整你的终端。 数量 查询当前域级别。 返回比配置大小限制更多的结果。显示第一个${counter}结果。 快速链接 单用户模式。仅显示错误。 RADIUS代理服务器设置 RADIUS代理服务器 RADIUS代理服务器 RADIUS代理配置 RADIUS代理服务器 RADIUS代理服务器名称 RADIUS代理服务器 RADIUS代理名称 RFC4120-兼容的Kerberos域 RFC822名称与任何用户的电子邮件地址都不匹配 RP记录 RPC命令用于记录当前用户的会话。 RRSIG算法 RRSIG密钥标记 RRSIG分类 RRSIG原始TTL RRSIG签名 RRSIG签名过期 RRSIG签名开端 RRSIG签名者的名字 RRSIG类型覆盖 RRSIG记录 随机密码 范围设置 范围名称 范围大小 范围类型 原始的%s记录 原始的记录 原始的A6记录 原始的AAAA记录 原始的AFSDB记录 原始的APL记录 原始的CERT记录 原始的CNAME记录 原始的DHCID记录 原始的DLV记录 原始的DNAME记录 原始的DNSKEY记录 原始的DS记录 原始的HIP记录 原始的IPSECKEY记录 原始的KEY记录 原始的KX记录 原始的LOC记录 原始的MX记录 原始的NAPTR记录 原始的NS记录 原始的NSEC记录 原始的NSEC3记录 原始的PTR记录 原始的RP记录 原始的RRSIG记录 原始的SIG记录 原始的SPF记录 原始的SRV记录 原始的SSHFP记录 原始的TA记录 原始的TKEY记录 原始的TLSA记录 原始的TSIG记录 原始的TXT记录 原始的目标过滤器 DNS记录的原始值已被设定为"%(name)s"选项 重建信任域"%(value)s" 重新同步在权利服务器上的本地权利缓存。 Realm域 域管理员密码应该被指定 Realm域 域名 Realm-domain不匹配 原因 撤销理由 撤消证书的原因(0-10) 撤销证书的原因（0-10）。输入"ipa help cert"来查看详细撤销原因。 重建自动成员 记录类型 记录创建失败。 记录数据 记录名 记录没有找到。 记录类型 记录 DNS区域记录 重定向 重定向到PTR记录 更新 刷新与信任相关的域列表 刷新页面。 注册密码 正则表达式 相对记录名'%(record)s'将区域名'%(zone)s'当作一个后缀，导致FQDN '%(fqdn)s'。这通常是由于在名称规范后缺少一个点号引起的错误。 拥有相同优先级条目的相对权重。 从服务器重新加载当前设置。 重新加载浏览器。 远程IPA服务器主机名 远程服务器名称 移除被IPA DNS管理的主机的A，AAAA，SSHFP和PTR记录 从一个CA ACL中移除CAs。 删除Kerberos别名 删除权限 从一个计划用户条目中移除一个管理员 向一个用户条目中移除一个管理员 为每个正向区访问授权移除一个权限。 为每个区访问授权移除一个权限。 删除该域中的所有主体 从Sudo规则中移除一个选项。 从一个服务中移除证书 从主机条目中移除证书 移除受Sudo规则影响的命令和命令组。 从一个自动成员规则中移除条件。 对所有不匹配的条目移除默认（回退）组。 从DNS中移除条目 从CRL中删除 删除持有 移除受Sudo规则影响的主机和主机组。 移除可以管理该主机的主机。 移除可以管理该服务的主机。 移除与信任相关的域信息。 从一个命名服务授权规则中移除成员。 从一个命名服务授权目标中移除成员。 从一个命名服务授权中删除成员。 从Sudo命令组中移除成员。 从一个组中移除成员。 从一个主机组中移除成员。 从一个网络组中移除成员。 从一个权限中移除成员。 从特权中移除成员 从一个角色中移除成员。 从一个库中移除成员。 从一个HBAC服务组中移除成员。 从id覆盖用户条目中移除一个或多个证书 向用户条目中移除一个或多个证书 从一个库容器中移除所有者。 从一个库中移除所有者。 从特权中移除权限。 从一个主机条目中移除主体别名 从一个服务中删除主体别名 从用户条目中删除主体别名 从一个角色中移除权限。 从一个CA ACL中移除配置文件。 从一个HBAC规则中移除服务和服务组。 从一个CA ACL中移除服务。 从一个HBAC规则中移除源主机和主机组。 从一个命名服务授权规则中移除目标。 从一个CA ACL中移除目标主机和主机组。 从一个HBAC规则中移除目标主机和主机组。 从一个SELinux用户映射规则中移除目标主机和主机组。 移除受Sudo规则影响的用户和用户组。 从一个CA ACL中移除用户和用户组。 从一个HBAC规则中移除用户和用户组。 向SELinux用户映射规则中移除用户和用户组。 移除可以管理该令牌的用户。 已从主机"%(value)s"中移除别名 已从用户"%(value)s"中删除别名 已从服务主体"%(value)s"中删除别名 已从主机"%(value)s"中移除证书 已从id覆盖用户"%(value)s"中移除证书 已从服务主体"%(value)s"中删除证书 已为用户"%(value)s"删除证书 已从"%(value)s"中移除条件 已为自动成员"%(value)s"移除默认（回滚）组 删除信任域"%(value)s"的信息 已从Sudo规则"%(rule)s"中移除"%(option)s" 已移除系统权限"%(value)s" 从复制拓扑中移除%(servers)s，请稍后... 删除主体%s
重命名 重命名一个ACI。 重命名%(ldap_obj_name)s对象 重命名DNS资源记录对象 重命名组ID覆盖对象 重命名ID视图对象 重命名OTP令牌对象 重命名RADIUS代理服务器对象 重命名用户ID覆盖对象 重命名自动挂载键对象 重命名组对象 重命名权限对象 重命名特权对象 重命名角色对象 重命名计划用户对象 重命名用户对象 已重命名ACI为"%(value)s" 为IPA证书认证机构更新主服务器 替换 副本是活跃的DNSSEC密钥主机。卸载会导致你DNS系统崩溃。首先请禁用或替代DNSSEC密钥主机。 启用复制协议 复制配置 副本更新段：要求"%(pkey)s"。 复制拓扑的后缀"%(suffix)s"包含错误。 复制拓扑的后缀"%(suffix)s"是按序的。 请求一个完整的从另一个节点检索数据的节点重初始化。 请求失败状态%(status)s：%(reason)s 请求号 请求缺少"method" 请求缺少"params" 请求必须是一个字典 请求状态 必需的 必需字段 需要预认证 重置 重置Kerberos票据策略为默认值。 重置OTP 重置密码 重置你的密码。 在DNS中解析主机名。 在DNS中解析主机名。（不赞成） 在信任域中重新解析用户和用户组的安全标识符 恢复 结果 模拟结果 命令返回值 结果被截断，请尝试更明确的搜索 结果应该只包括主键属性("%s") 结果应该只包括主键属性("anchor") 结果应该只包括主键属性("certificate") 结果应该只包括主键属性("cn") 结果应该只包括主键属性("command") 结果应该只包括主键属性("delegation-name") 结果应该只包括主键属性("domain") 结果应该只包括主键属性("group") 结果应该只包括主键属性("group-name") 结果应该只包括主键属性("hostgroup-name") 结果应该只包括主键属性("hostname") 结果应该只包括主键属性("id") 结果应该只包括主键属性("location") 结果应该只包括主键属性("login") 结果应该只包括主键属性("map") 结果应该只包括主键属性("name") 结果应该只包括主键属性("principal") 结果应该只包括主键属性("realm") 结果应该只包括主键属性("service") 结果应该只包括主键属性("sudocmdgroup-name") 结果应该只包括主键属性("sudorule-name") 重试 从库中检索一个数据。 检索一个已存在的证书。 从服务器检索和打印所有属性。影响命令输出。 检索当前密钥不去改变它们 检索权利证书。 从库"%(value)s"中检索数据 检索CA证书链失败：%s 检索CA状态失败%d 检索CA状态失败：%s 重试 用pre-4.0 keytab检索方法重试...
返回到主页面并重试操作 在反向区域%(zone)s中IP地址为%(ip)s的反向记录已存在。 反向区域%(name)s恰好需要%(count)d个IP地址组件，已给出%(user_count)d 反向区域IP网络 返回 撤消原因 撤回 撤销证书。 撤销 撤销于 撤销到 右节点 右复制节点-IPA服务器 权限 授予权限（读，查找，比较，写，添加，删除，全部） 角色 角色设置 角色名 角色状态 角色 信任的根域总是支持现有的信任 规则名 规则状态 规则类型 规则类型（允许） 规则 带测试规则。如果没有指定，--enable是假定的 允许命令 允许测试 作为一个用户来运行 作为任何一个有指定组用户来运行 以一个指定POSIX组的gid来运行 作为外部用户组来运行 作为外部用户来运行 作为用户组类别来运行 作为规则适用的用户组类别来运行 作为用户组来运行 作为用户类别来运行 作为规则适用的用户类别来运行 作为用户来运行 作为组来运行不能接受'%(name)s'来作为一个组名 作为用户来运行不能接受'%(name)s'来作为一个组名 作为用户来运行不能接受'%(name)s'来作为一个用户名 SELinux选项 SELinux用户 SELinux用户映射规则 SELinux用户映射规则 SELinux用户映射规则 SELinux用户映射规则 SELinux用户%(user)s在顺序列表中（配置）没有找到 SELinux用户'%(user)s'是无效的：%(error)s SELinux用户映射默认用户没有在列表中 SELinux用户映射列表在配置中没有找到 SELinux 用户映射订单 SHA1指纹 SHA256指纹 进来的SID黑名单 出去的SID黑名单 SID不能匹配任何信任域 SID不能完全匹配任何信任域的SID 指定信任域名的SID没有找到。请使用dom-sid选项直接指定SID。 对于一个信任域来说，SID不被认为是一个有效的SID SID是无效的 SIG算法 SIG密钥标记 SIG分类 SIG原始TTL SIG签名 SIG签名过期 SIG签名开端 SIG签名者的名字 SIG类型覆盖 SIG记录 SOA类 SOA到期 SOA最低值 SOA mname（权威服务器）覆盖 SOA mname覆盖 SOA记录类 SOA记录到期时间 SOA记录刷新时间 SOA记录重试时间 SOA记录编号 SOA记录存活时间 SOA刷新 SOA重试 SOA序列 SOA存活时间 SPF记录 SRV端口 SRV优先级 SRV目标 SRV重量 SRV记录 SSH公钥 SSH公钥指纹 SSH公钥： SSH公钥 SSHFP算法 SSHFP指纹 SSHFP指纹类型 SSHFP记录 SSSD不能将对象解析成一个有效的SID 盐值 相同于 --%s 保存 模式是最新的（FP '%(fingerprint)s', TTL %(ttl)s s） 查找 查找选项 查找命令参数。 查找信任域 查找有这些%(relationship)s %(ldap_object)s的%(searched_object)s。 查找没有%(relationship)s %(ldap_object)s的%(searched_object)s。 在rootdse中查找%1$s失败，错误%2$d
查找CA ACLs。 查找CAs。 查找证书配置文件。 查找DNS正向区。 查找DNS资源。 查找DNS服务器。 查找DNS区域（SOA记录）。 查找HBAC规则。 查找HBAC服务。 查找IPA位置。 查找IPA名称上下文失败，错误%d
查找IPA服务器。 查找IPA服务。 查找OTP令牌。 查找RADIUS代理服务器。 查找SELinux用户映射。 查找Sudo命令组。 查找Sudo命令。 查找Sudo规则。 查找一个网络组。 查找一个自助服务权限。 查找一个组ID覆盖。 查找一个HBAC服务组。 查找一个ID视图。 查找一个ID覆盖。 查找一个用户ID覆盖。 查找一个自动挂载键。 查找一个自动挂载位置。 查找一个自动挂载映射。 查找自动成员规则。 查找含这些所有者%s的证书。 查找不含这些所有者%s的证书。 查找类。 查找命令输出。 查找命令。 查找授权。 查找权利账户。 查找已存在的证书。 仅查找正向区域 查找组密码策略。 查找包含这些成员用户组的组。 查找包含这些HBAC规则成员的组。 查找包含这些组成员的组。 查找包含这些网络组成员的组。 查找包含这些角色成员的组。 查找包含这些sudo规则成员的组。 查找包含这些成员用户的组。 查找不包含这些成员用户组的组。 查找不包含这些HBAC规则成员的组。 查找不包含这些组成员的组。 查找不包含这些网络组成员的组。 查找不包含这些角色成员的组。 查找不包含这些sudo规则成员的组。 查找不包含这些成员用户的组。 查找组。 查找帮助主题。 查找包含这些成员主机组的主机组。 查找包含这些成员主机的主机组。 查找包含这些HBAC规则成员的主机组。 查找包含这些主机组成员的主机组。 查找包含这些网络组成员的主机组。 查找包含这些sudo规则成员的主机组。 查找不包含这些成员主机组的主机组。 查找不包含这些成员主机的主机组。 查找不包含这些HBAC规则成员的主机组。 查找不包含这些主机组成员的主机组。 查找不包含这些网络组成员的主机组。 查找不包含这些sudo规则成员的主机组。 查找主机组。 查找包含用户注册的主机。 查找由该主机管理的主机。 查找管理该主机的主机。 查找包含这些HBAC规则成员的主机。 查找包含这些主机组成员的主机。 查找包含这些网络组成员的主机。 查找包含这些角色成员的主机。 查找包含这些sudo规则成员的主机。 查找不包含用户注册的主机。 查找不由该主机管理的主机。 查找不管理该主机的主机。 查找不包含这些HBAC规则成员的主机。 查找不包含这些主机组成员的主机。 查找不包含这些网络组成员的主机。 查找不包含这些角色成员的主机。 查找不包含这些sudo规则成员的主机。 查找主机。 查找包含这些成员用户组的网络组。 查找包含这些成员主机组的网络组。 查找包含这些成员主机的网络组。 查找包含这些成员网络组的网络组。 查找包含这些网络组成员的网络组。 查找包含这些成员用户的网络组。 查找不包含这些成员用户组的网络组。 查找不包含这些成员主机组的网络组。 查找不包含这些成员主机的网络组。 查找不包含这些成员网络组的网络组。 查找不包含这些网络组成员的网络组。 查找不包含这些成员用户的网络组。 查找权限。 查找特权。 查找范围。 查找角色。 查找包含这些管理后缀的服务器。 查找不包含这些管理后缀的服务器。 查找服务授权目标。 查找服务授权规则。 查找那些由主机管理的服务。 查找那些不由主机管理的服务。 查找包含这些HBAC规则成员的计划用户。 查找包含这些组成员的计划用户。 查找包含这些网络组成员的计划用户。 查找包含这些角色成员的计划用户。 查找包含这些sudo规则成员的计划用户。 查找不包含这些HBAC规则成员的计划用户。 查找不包含这些组成员的计划用户。 查找不包含这些网络组成员的计划用户。 查找不包含这些角色成员的计划用户。 查找不包含这些sudo规则成员的计划用户。 查找计划用户。 查找拓扑段。 查找拓扑后缀。 查找信任。 查找包含这些HBAC规则成员的用户。 查找包含这些组成员的用户。 查找包含这些网络组成员的用户。 查找包含这些角色成员的用户。 查找包含这些sudo规则成员的用户。 查找不包含这些HBAC规则成员的用户。 查找不包含这些组成员的用户。 查找不包含这些网络组成员的用户。 查找不包含这些角色成员的用户。 查找不包含这些sudo规则成员的用户。 查找用户。 查找库。 查找结果被截断：%(reason)s 范围查找 搜索大小限制 搜索时间限制 第二个码 第二个OTP 次要的RID基 秒纬度 秒经度 密码 安全标识符 安全标识符（SIDs） 部分细节 段名称 选择全部 选择要删除的条目。 选择器 自己 自助服务权限 自助服务权限 自助服务名 %(label)s语义已改变了。%(current_behavior)s %(hint)s 分号分割的IP地址或网络列表允许被查询 分号分割的IP地址或网络列表允许被传输 敏感的 序列号 序列号 序列号（十六进制） 序列号 序列号（十六进制） 十进制序列号或者以0x为前缀的十六进制序列号 服务器 服务器%(srv)s不能连接服务器： %(replicas)s 服务器名 服务器角色 服务器角色 服务器已被删除 服务名称 服务器名没有提供或不可用
服务器删除失败：%(reason)s。 服务器将检查DNS转发器。 服务器 服务器详细信息： 本地服务器 属于IPA位置的服务器 服务 应用改变的配置需要在IPA服务器%(server)s上重启服务%(service)s。 在Kerberos数据库中没有找到服务'%(service)s' 服务证书 服务组 服务选项 服务设置 服务类别 ACL适用于服务类别 规则应用的服务类别 服务授权规则 服务授权规则 服务授权目标 服务授权目标 服务组名称 服务名 服务库的服务名 服务主体 服务主体别名 该证书服务主体（例如：HTTP/test.example.com） 服务主体不是这种格式：服务名/完全限定的主机名：%(reason)s 需要服务主体 服务，共享的和用户选项不能被同时指定 服务，共享的和用户选项不能被同时指定 服务，共享的和用户选项不能被同时指定 服务 会话错误 会话超时 设置 设置域级别 设置OTP 设置SSH公钥 设置一个用户的密码。 一个属性设置为一个名称/值对。格式是属性=值。对于多值属性，命令替换已存在的值。 对所有不匹配的条目设置默认（回退）组。 已为自动成员"%(value)s"设置默认（回滚）组 设置 共享库 显示 显示IPA服务器。 显示二维码 显示结果 显示所有加载的插件。 显示配置uri 显示细节 显示环境变量。 显示全局信任配置。 显示已管理的后缀。 显示服务器角色状态 显示当前OTP配置。 显示当前配置。 显示当前全局DNS配置。 显示允许的加密类型列表并退出 显示库配置。 显示/设置密钥 从${start}到${end}显示${total}条目。 签名 签名过期 签名开端 签名者的名字 简单绑定失败
模拟使用基于主机访问控制 大小 大小限制 数据大小超出限制。目前库数据大小限制为 %(limit)d B 信任域ID范围的大小 忽略DNS检查 不检查最后一个CA主服务器或DNS服务器是否被删除了 忽略覆盖检查 已忽略 %(key)s 已忽略 %(map)s 一些条目没有被删除 一些操作失败。 源主机组 源主机 源主机 源主机类别 规则应用的源主机类别 指定的CAs 指定的命令和命令组 指定的组 指定的主机和主机组 指定的配置文件 指定的服务和服务组 指定的用户和用户组 指定存储keytab信息的位置。 指定外部的${entity} 呈现 计划用户 计划用户 计划用户%s已激活 计划用户 标准记录类型 州/省 状态 角色状态 停止副本更新段：要求"%(pkey)s"。 存储已发布证书 街道地址 有条理的 主题 证书持有者名字 主题DN已被CA'%s'使用 主题DNS名 主题的专有名称 主题EDI参与方名称 主题IP地址 主题Kerberos主体名 主题OID 主题别名 主题UPN 主题URI 主题X.400地址 主题alt名称类型%s被禁止 主题目录名 主题电子邮件地址 提交一个证书签名请求。 子树 子类型 成功 Sudo运行命令组 Sudo允许命令 Sudo命令 Sudo命令组 Sudo命令组 Sudo命令 Sudo阻止命令组 Sudo阻止命令 Sudo选项 Sudo规则 Sudo规则 Sudo命令 后缀名称 作废的 支持的加密类型：
抑制成员属性的处理。 同步OTP令牌 同步一个OTP令牌。 语法错误：%(error)s 系统DNS记录已更新 TA记录 TKEY记录 TLSA证书关联数据 TLSA证书用途 TLSA匹配类型 TLSA选择器 TLSA记录 TOTP同步窗口 TOTP认证窗口 TOTP认证时间差异（秒） TOTP同步时间差异（秒） TOTP令牌/IPA服务器时差 TSIG记录 TXT文本数据 TXT记录 目标 目标DN 目标DN子树 目标统一资源标识符 目标统一资源标识符依据RFC 3986 目标组 目标主机 一个组的目标成员 组目标成员（设置隶属于目标过滤器） 目标反向区域没有找到。 设定你自己的条目 任务DN 任务DN = '%s' 电话号码 测试ACI语法但不写任何东西 文本数据 文本不匹配字段模式 --domain选项不能和--add-domain或--del-domain选项一起使用。使用--domain来显示地指定整个realm域列表，添加/删除个别域，使用--add-domain/--del-domain。 ACI权限%(name)s在%(dn)s中没有找到 IPA域 不能创建域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被IPA管理。请手动创建该记录，包含下面值：'%(realm)s' 不能移除域%(domain)s中的_kerberos TXT记录(%(error)s)。可能是因为该区域没有被IPA管理。请手动移除该记录。 信息为%(info)s的自动挂载键%(key)s不存在 字符%(char)r是不允许的。 默认的用户组不成被删除 阻止类型已被弃用。 目标主机的域名或是'.'如果服务在该域中明显不存在 下面的域不属于该realm：%(domains)s 组不存在 主机名必须是完全限制的：%s
主机名必须不能是：%s
主机名或IP（有或没有端口） 反向记录指向的主机名 “键，信息”对必须是唯一的。信息为%(info)s的键名%(key)s已存在 这种区域的最常见类型是： %s
重试认证的次数 该请求的主题不存在。 为主体获取一个keytab（例如：ftp/ftp.example.com@EXAMPLE.COM） 从keytab中待删除的主体（例如：ftp/ftp.example.com@EXAMPLE.COM） 主体域在该IPA服务器域中不匹配 下面域的realm不能被检测到：%(domains)s。如果有属于该realm的域，请为它们创建一个包含"%(realm)s"的_kerberos TXT记录。 用在LDAP服务器上的模式。支持值是RFC2307和RFC2307bis。默认值时RFC2307bis 查找条件不够具体。预期1和找到%(found)d。 密码用于数据加密 服务可以代表一个客户端进行认证 在证书请求中主题alt名为%s的服务主体不存在 主题或命令名。 所有重试总超时（秒） 用户对象的用户名属性 用户名，密码或令牌码不争取 这个命令在本地IPA域中不能用来改变ID分配。运行`ipa help idrange`查看更多信息 该命令依赖于"editors"组的存在，但是该组没有找到。 该命令需要root访问权限 条目已经存在 条目不能被启用或禁用 条目已经时一个成员 条目已禁用 条目已启用 条目不是一个成员 该组已允许外部成员 该组不是posix因为它是外部的 这已经是一个posix组 这已经是一个posix组了，并且不能转换为外部的 这可能需要一些时间，请稍等... 这个页面有未保存的更改。请保存或恢复。 票据过期 票据策略%s不可读 时间限制 时间限制在几秒钟内的搜索（0代表无限制） 当前时间 存活时间 区域定点记录的生成时间 没有明确TTL定义的记录存活时间 计时型（TOTP） 超时 严重超时 为了建立信任活动目录，IPA服务器的域名和realm名必须匹配 获取命令帮助，使用： 令牌ID 令牌描述（只是信息） 令牌散列算法 令牌模式（只是信息） 令牌密码（Base32；默认：随机） 令牌序列号（只是信息） 令牌同步失败 令牌供应商名称（只是信息） 令牌已同步 主题命令： 主题或命令 拓扑 拓扑段 拓扑段 拓扑不允许服务器%(server)s复制服务器： 拓扑已断开连接 拓扑管理需要最小域级别{0} 拓扑后缀 拓扑后缀 env变量总数（>= count） 如果不是所有结果都返回了，那么为真 正确的表示操作成功 信任 信任设置 信任方向 信任状态 信任类型 信任类型（活动目录，默认） 已信任的域 信任域%(domain)s包含在IPArealm域中。建立信任需要删除之前的。查看"ipa realmdomains-mod --del-domain"命令。 信任域和管理员账户使用不同域 信任域没有返回一个唯一的对象 信任域没有为对象返回一个有效的SID 信任域合作伙伴 已信任的域 允许授权 信任森林 信任用户认证 信任森林 信任 双因素认证（密码+OTP） 双向信任 类型 类型覆盖 类型映射 IPA目标类型（设置子树和对象类目标过滤器） IPA对象类型（用户，用户组，主机，主机组，服务，网络组，dns） 令牌类型 信任域ID范围的类型，是ipa-ad-trust-posix和ipa-ad-trust中的一个 支持的用户认证类型 UID UPN后缀 不适用的 不将ID视图应用到主机 不将ID视图应用到主机组中的主机 不适用的主机组 不适用的主机 不能与CMS通信 不能与CMS通信（状态%d） 不能创建私有组。组'%(group)s'已存在。 无法从%s中确定IPA主机
不能确定Kerberos主体%s是否存在。使用'ipa user-mod'来手动设置它。 无法确定%s的根DN
使用输出编码配置无法显示二维码。请使用令牌URI来配置你的OTP设备 在LDAP中不能启用SSL
无法生成Kerberos凭证缓存
不能初始化ldap库！
无法加入主机：找不到Kerberos凭证缓存
无法加入主机：找不到Kerberos用户主体并且没有提供主机密码。
无法加入主机：Kerberos上下文初始化失败
服务解析主体
无法解析主体名
不能解析主体：%1$s (%2$d)
无法删除条目
不能设置LDAP_OPT_PROTOCOL_VERSION
不能设置LDAP_OPT_X_SASL_NOCANON
不能在AD中验证写权限 恢复删除用户账户。 已恢复用户账户"%(value)s" 取消 取消全部 取消在这个字段做的所有更改。 取消这个更改。 从IPA服务器中取消注册该主机 取消注册失败。
取消注册成功。
唯一ID 未知的 未知的错误 未知的选项：%(option)s 解锁 已解锁账户"%(value)s" 不匹配 取消供应 在--rules中不能解析的规则 未撤销的 未保存的更改 取消选择全部 未指定的 不支持的值 更新 更新DNS条目 更新系统DNS记录 更新位置和IPA服务器DNS记录 更新系统记录'%(record)s'失败：%(error)s 用户 用户组 用户组 用户ID 用户ID号码 用户ID号码（如果没有提供系统会分配一个） 用户ID覆盖 用户ID覆盖 用户选项 用户属性 用户认证类型 用户类别 用户类别 用户类别（该属性的语义是就近解读） ACL适用于用户类别 规则应用的用户类别 用户容器 用户组 ACI授予访问的用户组 用户组规则 用户组规则 待应用权限的用户组 用户登录名 用户名 用户对象类 用户对象覆盖 用户密码 用户搜索字段 待覆盖用户 方便用户的执行操作描述 权限可以应用用户指定属性 权限明确不能应用到用户指定的属性 用户名 用户库的用户名 用户 允许创建keytab的用户 允许检索keytab的用户 有效证书展示 有效起始日期 有效终止日期 验证错误 有效性 有效期结束于 有效期开始于 库 库容器 库容器 库配置 库数据用会话密钥加密 库描述 库名称 库密码 库私钥 库公钥 库盐值 库服务 库类型 共享用户 库 供应商 验证密码 验证主体密码 版本 垂直精度 通过服务 查看 新证书 等待远程端的确认 警告 警告无法识别加密类型。
警告无法识别盐值类型。
警告：转换类型失败（#%d）
警告：盐值类型没有授予随机密码（查看选项-P）
重量 服务器服务权重 当移植一个在IPA域中已存在的组时覆盖组GID并报告成功 是否存储使用该配置文件的证书发布 谁 工作中 将配置文件配置写进文件 你正尝试引用一个不允许覆盖的神奇私有组。而不是尝试覆盖对应用户的GID属性。 你可以使用<a href="${link}" target="_blank">FreeOTP<a/> 来充当OTP令牌的一个应用软件。 你可能需要从树中手动删除它们 要创建一个主机服务，你必须注册一个主机 你将会被重定向到DNS区域。 你的密码将在${days}天到期。 你对域%(domain)s的信任已中断。请再次运行'ipa trust-add'来重新创建它。 YubiKey槽 区域转发器 找到区域：${zone} 区域名 区域名（FQDN） 区域记录'%s'不能被删除 区域刷新间隔 活跃用户名"%(user)s"已存在 算法值：允许间隔0-255 所有的主服务器必须已启用角色%(role)s 发生了内部错误 服务器 '%(server)s' 已经发生了一次内部错误 查询答案'%(owner)s %(rtype)s'缺少DNSSEC签名（没有RRSIG数据） 任何已配置的服务器 api没有这样的命名空间：'%(name)s' 至少指定其中一个选项：类型，用户，主机 至少需要其中一个：类型，过滤器，子树，目标组，属性或它的成员 必须存在至少一个值等同规范主体名称 不支持属性"%(attribute)s" 不允许属性"%s" 属性没有配置 属性和包含的属性是互斥的 属性和包含/排除属性是互斥的 若主体不存在，则自动添加 如果主体不存在则自动添加它（仅对服务主体） 自动挂载键 自动挂载键 自动挂载位置 自动挂载位置 自动挂载映射 自动挂载映射 ber_init()失败，无效的控制？！
ber_scanf()失败，没有找到kvno？！
绑定密码 最多%(len)d个字符 最多%(maxlength)d字节 最多%(maxlength)d字符 最多%(maxvalue)d 最多%(maxvalue)s 不能给一个特权添加带有绑定类型"%(bindtype)s"的权限"%(perm)s" 不能为空 不能连接到'%(uri)s'：%(error)s 不能删除全局密码策略 不能删除管理权限 不能删除信任的根域，使用trust-del来删除它自己的信任 不能禁用信任的根域，使用trust-del来删除它自己的信任 不能打开配置文件%s
不能重命名管理权限 不能为已分配一个特权的权限设置绑定类型 不能同时指定原始证书和文件 不能同时指定完整的目标滤波器和额外的目标滤波器 不能stat()配置文件%s
修改冲突 改变一个POSIX组 改变以便从信任域中支持额外的非IPA成员 结果以%d退出
cn是不变的 待添加的以逗号分隔的HBAC服务组列表 待移除的以逗号分隔的HBAC服务组列表 待添加的以逗号分隔的HBAC服务列表 待移除的以逗号分隔的HBAC服务列表 待添加的以逗号分隔的用户组列表 允许迁移的以逗号分隔的用户组列表 待移除的以逗号分隔的用户组列表 待添加的以逗号分隔的主机组列表 待移除的以逗号分隔的主机组列表 待添加的以逗号分隔的主机列表 待移除的以逗号分隔的主机列表 以逗号分隔的信任域成员列表是“DOM\名称”或“名称@域名”格式 待添加的以逗号分隔的网络组列表 待移除的以逗号分隔的网络组列表 以逗号分隔的权限列表 以逗号分隔的授权列表（读，写，添加，删除，全部） 以逗号分隔的权限列表 待添加的以逗号分隔的权限列表 待移除的以逗号分隔的权限列表 待添加的以逗号分隔的角色列表 待移除的以逗号分隔的角色列表 待添加的以逗号分隔的sudo命令组列表 待移除的以逗号分隔的sudo命令组列表 待添加的以逗号分隔的sudo命令列表 待移除的以逗号分隔的sudo命令列表 待添加的以逗号分隔的用户列表 允许迁移的以逗号分隔的用户列表 待移除的以逗号分隔的用户列表 命令 命令'%(name)s'最多能带%(count)d个参数 命令'%(name)s'没有参数 命令 当命令类别='all'时命令不能被添加 控制sudo配置的命令 域CIFS服务器通信失败 配置选项 容器条目(%(container)s)没有找到 默认的CA ACL只可以被禁用 授权 授权 删除 描述 没有收到Kerberos凭证 不匹配任何可接受的格式： 域 域没有配置 域是不受信任的 域名'%(domain)s'应该规范化：%(normalized)s 域名不能长于255个字符 每个ACL元素必须以分好结束 空的DNS标签 空的过滤器 条目 条目 XML-RPC传输数据整理错误：%(error)s 服务器'%(server)s'错误：%(error)s 执行has bad permissions失败，错误码%d
期望的格式： <0-255> <0-255> <0-65535> 每个长度是十六进制数字或连字符 存储证书文件 文件名 过滤器和它的成员是互斥的 标记必须是"S"，"A"，"U"或"P"中的一个 标记值：允许间隔0-255 即使NS记录不在DNS中，也强制创建它。 强制删除系统权限 即使主体名在DNS中不存在，也强制添加它 fork()失败
格式必须被指定为"%(format)s" %(rfcs)s 正向"%(fwzone)s"无效因为在认证区域"%(authzone)s"缺少合适的NS记录。请添加NS记录"%(ns_rec)s"到父区域"%(authzone)s"。 gid不能被设置为外部组 需要名字 组 作为组来运行 组，权限和它们自己是互斥的 用户组 待添加用户组 待移除的用户组 主机 主机类别不能设置为all'，虽然有允许主机 主机组 主机组 待添加主机组 待移除的主机组 主机组 主机组名"%s"已存在。主机组和网络组共享一个共同的名字空间 主机组 主机名 主机名包含空的标签（连续的点） 请求主题'%(cn)s'的主机名与主体主机名'%(hostname)s'不匹配 主机 当主机类别='all'时主机不能被添加 当类型是'group'是主机不能被设置 待添加主机 待移除的主机 id范围 id范围类型 不完整的时间值 不正确的类型 无效的'%(name)s'：%(error)s 无效的DN（%s） 无效的IP地址格式 无效的IP地址版本(是%(value)d，必须是%(required_value)d)! 无效的IP网络格式 无效的配置文件ID 无效的SSH公钥 无效的地址格式 无效的属性名 无效的域名 无效的域名：%s 无效的域名：没有完全限制 无效的电子邮件格式：%(email)s 无效的域名转换代码 无效的hostmask 无效的端口号 ipa-getkeytab没有权限？
ipa-getkeytab没有找到
是需要的 迭代值：允许间隔0-65535 kerberos票据策略设置 键 %(key)s 已存在 键名%(key)s已存在 左节点({host})不支持后缀'{suff}' 左节点和右节点必须不同 左节点不是一个拓扑节点：%(leftnode)s 左或右节点没有被指定 超出该查询的限制 本地域范围 位置 位置 管理员%(manager)s没有找到 映射 %(map)s 已存在 映射未连接到/etc/auto.master： 完全匹配常用名 最大序列号 成员%s 成员证书配置文件 成员HBAC服务 成员HBAC服务组 成员组 成员主机 成员主机组 成员网络组 成员主体 成员特权 成员角色 成员服务 成员服务授权目标 成员sudo命令 成员sudo命令组 成员用户 最小序列号 缺少base_id 修改主键是不允许的 挂载点是相对于父映射的，不能以/开始 必须是"%s" 必须是'%(value)s' 必须是DNS名 必须是Kerberos主体 必须是TRUE或FALSE 必须是True或False 必须是Unicode文本 必须是一个十进制数 必须是绝对的 必须是一个整数 必须至少%(minlength)d字节 必须至少%(minlength)d字符 必须至少%(minvalue)d 必须至少%(minvalue)s 必须是二进制数据 必须是时间值 必须是字典 必须括在括号里 必须恰好是%(length)d字节 必须恰好是%(length)d字符 必须是%(values)s中的一个 必须是相对的 必须包含一个元组（列表，字典） 必须已启用角色%(role)s 必须匹配模式"%(pattern)s" 网络组 网络组名"%s"已存在。主机组和网络组共享一个共同的名字空间 网络组 待添加的网络组 待移除的网络组 没有命令也没有帮助主题'%(topic)s' 没有修改 没有信任域配置 没有信任域匹配指定的固定名 不允许修改组条目 不允许修改用户条目 不允许执行操作：%s 不允许执行服务器连接检查 没有找到 没有完全限制 管理权限没有修改 数字类'%(cls)s'不在允许的数字类列表中：%(allowed)s 密码数 对象类%s没找到 待移除的一个或多个值 仅支持"ad" 仅在管理权限中可用 只允许字母，数字和%(chars)s。DNS标签不能以%(chars2)s开始或结束 仅有主区域才可以包含记录 每个名称仅允许有一个CNAME记录（RFC 2136，第1.1.5节） 每个名称仅允许有一个DNAME记录（RFC 6672，第2.4节） 仅有一个节点可以被指定 操作没有定义 选项已被重命名；使用%s 选项是不允许的 序号必须是唯一值（%(order)d已被%(rule)s使用） 内存不足
区域外数据：记录名必须是区域或相对名的一个子域 覆盖参数和选项：%(names)s 所有者%s 所有者用户组 %(types)s记录的所有者不应该是一个通配符域名（RFC 4592 第四节） 所有者服务 所有者用户 参数必须是一个列表 参数必须包含[args，options] params[0] (aka args)必须是一个列表 params[1] (aka options)必须是一个字典 密码 密码策略 密码策略 如果没有使用kerberos，则使用密码 权限 权限"%(value)s"已存在 权限 保存 主体没有找到
在XML-RPC响应中找不到主体
待添加主体 待移除的主体 优先权布不能在本地策略上设置 优先权必须是一个唯一值（(%(prio)d已被%(gname)s使用） 特权 特权组 特权主机组 特权服务授权规则 特权服务授权目标 特权 待添加的特权 待移除的特权 配置文件类别不能设置为all'，虽然有允许配置文件 当配置文件类别='all'时配置文件不能被添加 pysss_murmur在服务器上不可用并没有提供base-id。 用EDNS0查询'%(owner)s %(rtype)s'：%(error)s 查询'%(owner)s %(rtype)s'：%(error)s 范围内存在 对象ID范围修改超出定义范围是不允许的 范围类型改变 读取错误
域找不到
域或UPN后缀覆盖信任域命名空间 记录'%(owner)s %(rtype)s'DNSSEC验证服务器 %(ip)s失败 请求失败HTTP状态%d 在XML-RPC响应中找不到结果
从服务器检索和打印所有属性。影响命令输出。 右节点({host})不支持后缀'{suff}' 右节点不是一个拓扑节点：%(rightnode)s 角色 角色 待添加角色 待移除角色 作为组来运行 作为用户来运行 作为用户来运行 盐值：%(err)s 查找POSIX组 查找组，该组在信任域中支持额外的非IPA成员 查找管理组 查找非POSIX组 查找私有组 查询待移植对象的结果被服务器拦截；移植过程可能没有完成
秒 段 段 自助服务权限 自助服务权限 服务器 服务器角色 服务器角色 服务器 服务 服务类别不能设置为all'，虽然有允许服务 服务授权规则 服务授权规则 服务授权目标 服务授权目标 待添加的服务授权目标 待移除的服务授权目标 服务 当服务类别='all'时服务不能被添加 待添加服务 待移除服务 设置权威命名服务器 不应该是一个通配符域名（RFC 4592 第四节） 忽略反向DNS检测 需要sn 计划用户 计划用户 主题alt名称类型%s禁止非用户主体 主题alt名称类型%s禁止用户主体 子树和类型是互斥的 sudo命令 sudo命令组 sudo命令组 待添加的sudo命令组 待移除的sudo命令组 sudo命令 待添加的sudo命令 待移除的sudo命令 sudo规则 sudo规则 后缀 后缀 系统ID视图 目标和目标组是互斥的 IPA服务器和远程域不能共享相同的NetBIOS名：%s 证书编号 正被修改的条目已被删除 值不是"YYYYMMDDHHMMSS"时间格式 必须有至少一个目标条目说明符（例如：目标，目标过滤器，属性） 该选项已被弃用。 该选项已被弃用 太多'@'字符 信任 信任配置 信任域 信任域 信任类型 信任域对象 信任域对象没有找到 信任域用户没有找到 信任 IPA对象类型（用户，用户组，主机，主机组，服务，网络组） 类型，过滤器，子树和目标组是互斥的 未知的命令'%(name)s' %(server)s上未知的错误%(code)d：%(error)s 不支持的功能级 不支持的信任类型 用户 用户%s已是活跃的 用户类别不能设置为all'，虽然有允许用户 用户 用户和主机不能被同时设置 当作为用户来运行或作为组来运行类别='all'时用户不能被添加 当用户类别='all'时用户不能被添加 当类型是'hostgroup'是用户不能被设置 待添加用户 待移除的用户 值 库 库容器 库容器 库 {attr}：没有这样的属性 {role}：角色没有找到