# SOME DESCRIPTIVE TITLE # Copyright (C) YEAR Free Software Foundation, Inc. # This file is distributed under the same license as the PACKAGE package. # FIRST AUTHOR , YEAR. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: PACKAGE VERSION\n" "POT-Creation-Date: 2024-06-01 05:55+0200\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: LANGUAGE \n" "Language: \n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" #. type: TH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "HOMECTL" msgstr "" #. type: TH #: archlinux fedora-40 mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "systemd 255" msgstr "" #. type: TH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "homectl" msgstr "" #. ----------------------------------------------------------------- #. * MAIN CONTENT STARTS HERE * #. ----------------------------------------------------------------- #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "NAME" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "homectl - Create, remove, change or inspect home directories" msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "SYNOPSIS" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B [OPTIONS...] {COMMAND} [NAME...]" msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "DESCRIPTION" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "B may be used to create, remove, change or inspect a user\\*(Aqs " "home directory\\&. It\\*(Aqs primarily a command interfacing with B(8) which manages home directories of users\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Home directories managed by systemd-homed\\&.service are self-contained, and " "thus include the user\\*(Aqs full metadata record in the home\\*(Aqs data " "storage itself, making them easy to migrate between machines\\&. In " "particular, a home directory describes a matching user record, and every " "user record managed by systemd-homed\\&.service also implies existence and " "encapsulation of a home directory\\&. The user account and home directory " "become the same concept\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "The following backing storage mechanisms are supported:" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "An individual LUKS2 encrypted loopback file for a user, stored in /home/*\\&." "home\\&. At login the file system contained in this files is mounted, after " "the LUKS2 encrypted volume has been attached\\&. The user\\*(Aqs password is " "identical to the encryption passphrase of the LUKS2 volume\\&. Access to " "data without preceding user authentication is thus not possible, even for " "the system administrator\\&. This storage mechanism provides the strongest " "data security and is thus recommended\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Similar, but the LUKS2 encrypted file system is located on regular block " "device, such as a USB storage stick\\&. In this mode home directories and " "all data they include are nicely migratable between machines, simply by " "plugging the USB stick into different systems at different times\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "An encrypted directory using \"fscrypt\" on file systems that support it (at " "the moment this is primarily \"ext4\"), located in /home/*\\&.homedir\\&. " "This mechanism also provides encryption, but substantially weaker than " "LUKS2, as most file system metadata is unprotected\\&. Moreover it currently " "does not support changing user passwords once the home directory has been " "created\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "A \"btrfs\" subvolume for each user, also located in /home/*\\&.homedir\\&. " "This provides no encryption, but good quota support\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "A regular directory for each user, also located in /home/*\\&.homedir\\&. " "This provides no encryption, but is a suitable fallback available on all " "machines, even where LUKS2, \"fscrypt\" or \"btrfs\" support is not " "available\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "An individual Windows file share (CIFS) for each user\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that systemd-homed\\&.service and B will not manage " "\"classic\" UNIX user accounts as created with B(8) or similar " "tools\\&. In particular, this functionality is not suitable for managing " "system users (i\\&.e\\&. users with a UID below 1000) but is exclusive to " "regular (\"human\") users\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that users/home directories managed via B do " "not show up in /etc/passwd and similar files, they are synthesized via glibc " "NSS during runtime\\&. They are thus resolvable and may be enumerated via " "the B(1) tool\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "This tool interfaces directly with systemd-homed\\&.service, and may execute " "specific commands on the home directories it manages\\&. Since every home " "directory managed that way also defines a JSON user and group record these " "home directories may also be inspected and enumerated via B(1)\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Home directories managed by systemd-homed\\&.service are usually in one of " "two states, or in a transition state between them: when \"active\" they are " "unlocked and mounted, and thus accessible to the system and its programs; " "when \"inactive\" they are not mounted and thus not accessible\\&. " "Activation happens automatically at login of the user and usually can only " "complete after a password (or other authentication token) has been " "supplied\\&. Deactivation happens after the user fully logged out\\&. A home " "directory remains active as long as the user is logged in at least once, " "i\\&.e\\&. has at least one login session\\&. When the user logs in a second " "time simultaneously the home directory remains active\\&. It is deactivated " "only after the last of the user\\*(Aqs sessions ends\\&." msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "OPTIONS" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "The following general options are understood (further options that control " "the various properties of user records managed by systemd-homed\\&.service " "are documented further down):" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--identity=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Read the user\\*(Aqs JSON record from the specified file\\&. If passed as \"-" "\" read the user record from standard input\\&. The supplied JSON object " "must follow the structure documented in \\m[blue]B\\m[]\\&\\s-2\\u[1]\\d\\s+2\\&. This option may be used in " "conjunction with the B and B commands (see below), where it " "allows configuring the user record in JSON as-is, instead of setting the " "individual user record properties (see below)\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 245\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--json=>I, B<-j>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Controls whether to output the user record in JSON format, if the B " "command (see below) is used\\&. Takes one of \"pretty\", \"short\" or " "\"off\"\\&. If \"pretty\" human-friendly whitespace and newlines are " "inserted in the output to make the JSON data more readable\\&. If \"short\" " "all superfluous whitespace is suppressed\\&. If \"off\" (the default) the " "user information is not shown in JSON format but in a friendly human " "readable formatting instead\\&. The B<-j> option picks \"pretty\" when run " "interactively and \"short\" otherwise\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--export-format=>I, B<-E>, B<-EE>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "When used with the B verb in JSON mode (see above) may be used to " "suppress certain aspects of the JSON user record on output\\&. Specifically, " "if \"stripped\" format is used the binding and runtime fields of the record " "are removed\\&. If \"minimal\" format is used the cryptographic signature is " "removed too\\&. If \"full\" format is used the full JSON record is shown " "(this is the default)\\&. This option is useful for copying an existing user " "record to a different system in order to create a similar user there with " "the same settings\\&. Specifically: B may be used as simple command line for " "replicating a user on another host\\&. B<-E> is equivalent to B<-j --export-" "format=stripped>, B<-EE> to B<-j --export-format=minimal>\\&. Note that when " "replicating user accounts user records acquired in \"stripped\" mode will " "retain the original cryptographic signatures and thus may only be modified " "when the private key to update them is available on the destination " "machine\\&. When replicating users in \"minimal\" mode, the signature is " "removed during the replication and thus the record will be implicitly signed " "with the key of the destination machine and may be updated there without any " "private key replication\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<-H>, B<--host=>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Execute the operation remotely\\&. Specify a hostname, or a username and " "hostname separated by \"@\", to connect to\\&. The hostname may optionally " "be suffixed by a port ssh is listening on, separated by \":\", and then a " "container name, separated by \"/\", which connects directly to a specific " "container on the specified host\\&. This will use SSH to talk to the remote " "machine manager instance\\&. Container names may be enumerated with " "BI\\&. Put IPv6 addresses in brackets\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<-M>, B<--machine=>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Execute operation on a local container\\&. Specify a container name to " "connect to, optionally prefixed by a user name to connect as and a " "separating \"@\" character\\&. If the special string \"\\&.host\" is used in " "place of the container name, a connection to the local system is made (which " "is useful to connect to a specific user\\*(Aqs user bus: \"--user --" "machine=lennart@\\&.host\")\\&. If the \"@\" syntax is not used, the " "connection is made as root user\\&. If the \"@\" syntax is used either the " "left hand side or the right hand side may be omitted (but not both) in which " "case the local user name and \"\\&.host\" are implied\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--no-pager>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "Do not pipe output into a pager\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--no-legend>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Do not print the legend, i\\&.e\\&. column headers and the footer with " "hints\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--no-ask-password>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "Do not query the user for authentication for privileged operations\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<-h>, B<--help>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "Print a short help text and exit\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--version>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "Print a short version string and exit\\&." msgstr "" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed #, no-wrap msgid "USER RECORD PROPERTIES" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "The following options control various properties of the user records/home " "directories that systemd-homed\\&.service manages\\&. These switches may be " "used in conjunction with the B and B commands for " "configuring various aspects of the home directory and the user account:" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--real-name=>I, B<-c> I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "The real name for the user\\&. This corresponds with the GECOS field on " "classic UNIX NSS records\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--realm=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "The realm for the user\\&. The realm associates a user with a specific " "organization or installation, and allows distinguishing users of the same " "name defined in different contexts\\&. The realm can be any string that also " "qualifies as valid DNS domain name, and it is recommended to use the " "organization\\*(Aqs or installation\\*(Aqs domain name for this purpose, but " "this is not enforced nor required\\&. On each system only a single user of " "the same name may exist, and if a user with the same name and realm is seen " "it is assumed to refer to the same user while a user with the same name but " "different realm is considered a different user\\&. Note that this means that " "two users sharing the same name but with distinct realms are not allowed on " "the same system\\&. Assigning a realm to a user is optional\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--email-address=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes an electronic mail address to associate with the user\\&. On log-in " "the I<$EMAIL> environment variable is initialized from this value\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--location=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes location specification for this user\\&. This is free-form text, which " "might or might not be usable by geo-location applications\\&. Example: B<--" "location=\"Berlin, Germany\"> or B<--location=\"Basement, Room 3a\">" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--icon-name=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes an icon name to associate with the user, following the scheme defined " "by the \\m[blue]B\\m[]\\&\\s-2\\u[2]\\d\\s+2\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--home-dir=>I, B<-d>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a path to use as home directory for the user\\&. Note that this is the " "directory the user\\*(Aqs home directory is mounted to while the user is " "logged in\\&. This is not where the user\\*(Aqs data is actually stored, see " "B<--image-path=> for that\\&. If not specified defaults to /home/$USER\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--uid=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a preferred numeric UNIX UID to assign this user\\&. If a user is to " "be created with the specified UID and it is already taken by a different " "user on the local system then creation of the home directory is refused\\&. " "Note though, if after creating the home directory it is used on a different " "system and the configured UID is taken by another user there, then B may assign the user a different UID on that system\\&. The specified " "UID must be outside of the system user range\\&. It is recommended to use " "the 60001\\&...60513 UID range for this purpose\\&. If not specified, the " "UID is automatically picked\\&. If the home directory is found to be owned " "by a different UID when logging in, the home directory and everything " "underneath it will have its ownership changed automatically before login " "completes\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "" "Note that changing this option for existing home directories generally has " "no effect on home directories that already have been registered locally " "(have a local I), as the UID used for an account on the local " "system is determined when the home directory is first activated on it, and " "then remains in effect until the home directory is removed\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that users managed by B always have a matching group " "associated with the same name as well as a GID matching the UID of the " "user\\&. Thus, configuring the GID separately is not permitted\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--member-of=>I, B<-G> I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a comma-separated list of auxiliary UNIX groups this user shall belong " "to\\&. Example: B<--member-of=wheel> to provide the user with administrator " "privileges\\&. Note that B does not manage any groups besides " "a group matching the user in name and numeric UID/GID\\&. Thus any groups " "listed here must be registered independently, for example with " "B(8)\\&. Any non-existent groups are ignored\\&. This option may " "be used more than once, in which case all specified group lists are " "combined\\&. If the user is currently a member of a group which is not " "listed, the user will be removed from the group\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "B<--capability-bounding-set=>I, B<--capability-ambient-" "set=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "These options take a space separated list of process capabilities (e\\&." "g\\&. B, B, \\&...) that shall be set in " "the capability bounding and ambient sets for all the user\\*(Aqs " "sessions\\&. See B(7) for details on the capabilities " "concept\\&. These options may be used more than once, in which case the " "specified lists are combined\\&. If the parameter begins with a \"~\" " "character the effect is inverted: the specified capability is dropped from " "the specific set\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 254\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--skel=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a file system path to a directory\\&. Specifies the skeleton directory " "to initialize the home directory with\\&. All files and directories in the " "specified path are copied into any newly create home directory\\&. If not " "specified defaults to /etc/skel/\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--shell=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a file system path\\&. Specifies the shell binary to execute on " "terminal logins\\&. If not specified defaults to /bin/bash\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "B<--setenv=>I[=I]" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes an environment variable assignment to set for all user processes\\&. " "May be used multiple times to set multiple environment variables\\&. When " "\"=\" and I are omitted, the value of the variable with the same name " "in the program environment will be used\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that a number of other settings also result in environment variables to " "be set for the user, including B<--email=>, B<--timezone=> and B<--" "language=>\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--timezone=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a time zone location name that sets the timezone for the specified " "user\\&. When the user logs in the I<$TZ> environment variable is " "initialized from this setting\\&. Example: B<--timezone=Europe/Amsterdam> " "will result in the environment variable \"TZ=:Europe/Amsterdam\"\\&. (\":\" " "is used intentionally as part of the timezone specification, see " "B(3)\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--language=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "" "Takes a specifier indicating the preferred language of the user\\&. The " "I<$LANG> environment variable is initialized from this value on login, and " "thus a value suitable for this environment variable is accepted here, for " "example B<--language=de_DE\\&.UTF8>\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--ssh-authorized-keys=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Either takes a SSH authorized key line to associate with the user record or " "a \"@\" character followed by a path to a file to read one or more such " "lines from\\&. SSH keys configured this way are made available to SSH to " "permit access to this home directory and user record\\&. This option may be " "used more than once to configure multiple SSH keys\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--pkcs11-token-uri=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes an RFC 7512 PKCS#11 URI referencing a security token (e\\&.g\\&. " "YubiKey or PIV smartcard) that shall be able to unlock the user account\\&. " "The security token URI should reference a security token with exactly one " "pair of X\\&.509 certificate and private key\\&. A random secret key is then " "generated, encrypted with the public key of the X\\&.509 certificate, and " "stored as part of the user record\\&. At login time it is decrypted with the " "PKCS#11 module and then used to unlock the account and associated " "resources\\&. See below for an example how to set up authentication with a " "security token\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Instead of a valid PKCS#11 URI, the special strings \"list\" and \"auto\" " "may be specified\\&. If \"list\" is passed, a brief table of suitable, " "currently plugged in PKCS#11 hardware tokens is shown, along with their " "URIs\\&. If \"auto\" is passed, a suitable PKCS#11 hardware token is " "automatically selected (this operation will fail if there isn\\*(Aqt exactly " "one suitable token discovered)\\&. The latter is a useful shortcut for the " "most common case where a single PKCS#11 hardware token is plugged in\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that many hardware security tokens implement both PKCS#11/PIV and FIDO2 " "with the \"hmac-secret\" extension (for example: the YubiKey 5 series), as " "supported with the B<--fido2-device=> option below\\&. Both mechanisms are " "similarly powerful, though FIDO2 is the more modern technology\\&. PKCS#11/" "PIV tokens have the benefit of being recognizable before authentication and " "hence can be used for implying the user identity to use for logging in, " "which FIDO2 does not allow\\&. PKCS#11/PIV devices generally require " "initialization (i\\&.e\\&. storing a private/public key pair on them, see " "example below) before they can be used; FIDO2 security tokens generally do " "not required that, and work out of the box\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--fido2-credential-algorithm=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Specify COSE algorithm used in credential generation\\&. The default value " "is \"es256\"\\&. Supported values are \"es256\", \"rs256\" and \"eddsa\"\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "\"es256\" denotes ECDSA over NIST P-256 with SHA-256\\&. \"rs256\" denotes " "2048-bit RSA with PKCS#1\\&.5 padding and SHA-256\\&. \"eddsa\" denotes " "EDDSA over Curve25519 with SHA-512\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm fedora-40 mageia-cauldron opensuse-tumbleweed msgid "Note that your authenticator may not support some algorithms\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 251\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--fido2-device=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a path to a Linux \"hidraw\" device (e\\&.g\\&. /dev/hidraw1), " "referring to a FIDO2 security token implementing the \"hmac-secret\" " "extension that shall be able to unlock the user account\\&. A random salt " "value is generated on the host and passed to the FIDO2 device, which " "calculates a HMAC hash of the salt using an internal secret key\\&. The " "result is then used as the key to unlock the user account\\&. The random " "salt is included in the user record, so that whenever authentication is " "needed it can be passed to the FIDO2 token again\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Instead of a valid path to a FIDO2 \"hidraw\" device the special strings " "\"list\" and \"auto\" may be specified\\&. If \"list\" is passed, a brief " "table of suitable discovered FIDO2 devices is shown\\&. If \"auto\" is " "passed, a suitable FIDO2 token is automatically selected, if exactly one is " "discovered\\&. The latter is a useful shortcut for the most common case " "where a single FIDO2 hardware token is plugged in\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that FIDO2 devices suitable for this option must implement the \"hmac-" "secret\" extension\\&. Most current devices (such as the YubiKey 5 series) " "do\\&. If the extension is not implemented the device cannot be used for " "unlocking home directories\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "The FIDO2 device may be subsequently removed by setting the device path to " "an empty string (e\\&.g\\&. B)\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Note that many hardware security tokens implement both FIDO2 and PKCS#11/PIV " "(and thus may be used with either B<--fido2-device=> or B<--pkcs11-token-" "uri=>), for a discussion see above\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 246\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--fido2-with-client-pin=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "When enrolling a FIDO2 security token, controls whether to require the user " "to enter a PIN when unlocking the account (the FIDO2 \"clientPin\" " "feature)\\&. Defaults to \"yes\"\\&. (Note: this setting is without effect " "if the security token does not support the \"clientPin\" feature at all, or " "does not allow enabling or disabling it\\&.)" msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 249\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--fido2-with-user-presence=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "When enrolling a FIDO2 security token, controls whether to require the user " "to verify presence (tap the token, the FIDO2 \"up\" feature) when unlocking " "the account\\&. Defaults to \"yes\"\\&. (Note: this setting is without " "effect if the security token does not support the \"up\" feature at all, or " "does not allow enabling or disabling it\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--fido2-with-user-verification=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "When enrolling a FIDO2 security token, controls whether to require user " "verification when unlocking the account (the FIDO2 \"uv\" feature)\\&. " "Defaults to \"no\"\\&. (Note: this setting is without effect if the security " "token does not support the \"uv\" feature at all, or does not allow enabling " "or disabling it\\&.)" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--recovery-key=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Accepts a boolean argument\\&. If enabled a recovery key is configured for " "the account\\&. A recovery key is a computer generated access key that may " "be used to regain access to an account if the password has been forgotten or " "the authentication token lost\\&. The key is generated and shown on screen, " "and should be printed or otherwise transferred to a secure location\\&. A " "recovery key may be entered instead of a regular password to unlock the " "account\\&." msgstr "" #. type: Plain text #: archlinux debian-unstable fedora-40 fedora-rawhide mageia-cauldron #: opensuse-tumbleweed msgid "Added in version 247\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--locked=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. Specifies whether this user account shall be " "locked\\&. If true logins into this account are prohibited, if false (the " "default) they are permitted (of course, only if authorization otherwise " "succeeds)\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--not-before=>I, B<--not-after=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "These options take a timestamp string, in the format documented in B(7) and configures points in time before and after logins into this " "account are not permitted\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--rate-limit-interval=>I, B<--rate-limit-burst=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Configures a rate limit on authentication attempts for this user\\&. If the " "user attempts to authenticate more often than the specified number, on a " "specific system, within the specified time interval authentication is " "refused until the time interval passes\\&. Defaults to 10 times per 1min\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--password-hint=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a password hint to store alongside the user record\\&. This string is " "stored accessible only to privileged users and the user itself and may not " "be queried by other users\\&. Example: B<--password-hint=\"My first " "pet\\*(Aqs name\">\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--enforce-password-policy=>I, B<-P>" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. Configures whether to enforce the system\\*(Aqs " "password policy for this user, regarding quality and strength of selected " "passwords\\&. Defaults to on\\&. B<-P> is short for B<---enforce-password-" "policy=no>\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "B<--password-change-now=>I" msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "Takes a boolean argument\\&. If true the user is asked to change their " "password on next login\\&." msgstr "" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-tumbleweed msgid "" "B<--password-change-min=>I