summaryrefslogtreecommitdiffstats
path: root/src/man/po
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-20 15:22:34 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-20 15:22:34 +0000
commited95a928eb095f8585bf216a05182a3e30cc9886 (patch)
treee5039e4c6176a9a4e91f31942e6d2329ff7cc40e /src/man/po
parentAdding upstream version 2.9.4. (diff)
downloadsssd-upstream.tar.xz
sssd-upstream.zip
Adding upstream version 2.9.5.upstream/2.9.5upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'src/man/po')
-rw-r--r--src/man/po/br.po747
-rw-r--r--src/man/po/ca.po753
-rw-r--r--src/man/po/cs.po749
-rw-r--r--src/man/po/de.po751
-rw-r--r--src/man/po/es.po758
-rw-r--r--src/man/po/eu.po739
-rw-r--r--src/man/po/fi.po749
-rw-r--r--src/man/po/fr.po751
-rw-r--r--src/man/po/ja.po751
-rw-r--r--src/man/po/lv.po743
-rw-r--r--src/man/po/nl.po749
-rw-r--r--src/man/po/pt.po751
-rw-r--r--src/man/po/pt_BR.po739
-rw-r--r--src/man/po/ru.po760
-rw-r--r--src/man/po/sv.po760
-rw-r--r--src/man/po/tg.po741
-rw-r--r--src/man/po/uk.po760
-rw-r--r--src/man/po/zh_CN.po741
18 files changed, 7354 insertions, 6138 deletions
diff --git a/src/man/po/br.po b/src/man/po/br.po
index b2f7800..38d0631 100644
--- a/src/man/po/br.po
+++ b/src/man/po/br.po
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-14 11:51-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Breton (http://www.transifex.com/projects/p/sssd/language/"
@@ -227,7 +227,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -268,10 +268,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -296,7 +296,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -604,7 +604,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -873,7 +873,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1900,7 +1900,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Dre ziouer : 0"
@@ -1963,7 +1963,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2025,12 +2025,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2043,6 +2041,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2067,7 +2073,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2145,8 +2151,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "re_expression (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "re_expression (neudennad)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2335,7 +2343,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2369,7 +2377,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2379,7 +2387,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2398,12 +2406,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3042,8 +3044,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr "RANNOƙ DOMANI"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3638,7 +3641,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4275,46 +4278,71 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
-msgid "override_gid (integer)"
+msgid "failover_primary_timeout (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Dre ziouer : 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4322,31 +4350,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4354,104 +4382,104 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4459,27 +4487,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4489,34 +4517,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4525,19 +4553,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4545,25 +4573,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "re_expression (string)"
msgid "local_auth_policy (string)"
msgstr "re_expression (neudennad)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4575,7 +4604,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "re_expression (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "re_expression (neudennad)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4584,7 +4658,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4595,7 +4669,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4603,38 +4677,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 3"
msgid "Default: match"
msgstr "Dre ziouer : 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4643,24 +4717,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4670,14 +4744,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4685,21 +4759,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4707,7 +4781,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4716,7 +4790,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4733,17 +4807,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4751,12 +4825,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4764,12 +4838,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4777,12 +4851,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4791,12 +4865,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4804,19 +4878,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4833,7 +4907,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4841,17 +4915,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4860,7 +4934,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4870,7 +4944,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4890,12 +4964,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4906,69 +4980,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4981,7 +5055,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -4989,7 +5063,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -4998,55 +5072,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5055,17 +5129,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5073,26 +5147,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5101,17 +5175,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5121,7 +5195,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5130,59 +5204,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5191,7 +5265,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5200,17 +5274,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5218,46 +5292,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5266,7 +5340,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5274,12 +5348,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5309,7 +5383,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5318,7 +5392,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5326,7 +5400,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5337,7 +5411,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5348,7 +5422,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5577,16 +5651,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10226,9 +10290,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15438,7 +15502,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15516,7 +15580,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15535,7 +15599,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15545,16 +15609,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15886,7 +15950,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15911,7 +15975,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16053,61 +16117,62 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "re_expression (string)"
msgid "ldap_user_passkey (string)"
msgstr "re_expression (neudennad)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16116,76 +16181,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16193,531 +16258,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/ca.po b/src/man/po/ca.po
index 45f2e26..f802372 100644
--- a/src/man/po/ca.po
+++ b/src/man/po/ca.po
@@ -14,7 +14,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2015-10-18 04:13-0400\n"
"Last-Translator: Robert Antoni Buj Gelonch <rbuj@fedoraproject.org>\n"
"Language-Team: Catalan (http://www.transifex.com/projects/p/sssd/language/"
@@ -256,7 +256,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -299,10 +299,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -327,7 +327,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Per defecte: 10"
@@ -673,7 +673,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -952,7 +952,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Per defecte: Sense establir"
@@ -2074,7 +2074,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Per defecte: 0"
@@ -2137,7 +2137,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Per defecte: none"
@@ -2201,13 +2201,11 @@ msgstr "ldap_chpass_update_last_change (booleĆ )"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Per defecte: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Per defecte: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2219,6 +2217,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Per defecte: False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2243,7 +2249,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2328,8 +2334,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "ad_gpo_map_service (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "ad_gpo_map_service (cadena)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2518,7 +2526,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
#, fuzzy
#| msgid "ad_gpo_map_service (string)"
msgid "pam_gssapi_services"
@@ -2562,7 +2570,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "Exemple: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2572,7 +2580,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2591,12 +2599,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Per defecte: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3263,8 +3265,9 @@ msgstr "Per defecte: buit, Ć©s a dir, s'utilitza ldap_uri."
msgid "DOMAIN SECTIONS"
msgstr "SECCIONS DE DOMINI"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3891,7 +3894,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4564,46 +4567,73 @@ msgstr "Per defecte: Utilitza la part del domini del nom de mĆ quina"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "pam_id_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "pam_id_timeout (enter)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Per defecte: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4611,14 +4641,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -4631,17 +4661,17 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4649,130 +4679,130 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_connection_expire_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_search_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_expire_timeout (enter)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
#, fuzzy
#| msgid "case_sensitive (string)"
msgid "case_sensitive"
msgstr "case_sensitive (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4782,27 +4812,27 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4812,34 +4842,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Per defecte: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4848,19 +4878,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4868,25 +4898,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4898,7 +4929,54 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (cadena)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+#, fuzzy
+#| msgid "gdm-smartcard"
+msgid "Smartcard"
+msgstr "gdm-smartcard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4907,7 +4985,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4918,7 +4996,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
#, fuzzy
#| msgid ""
#| "The following example shows a minimal idmapd.conf which makes use of the "
@@ -4932,38 +5010,38 @@ msgstr ""
"sss. <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: cn"
msgid "Default: match"
msgstr "Per defecte: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4972,24 +5050,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4999,14 +5077,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5014,21 +5092,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5036,7 +5114,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5045,7 +5123,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5065,17 +5143,17 @@ msgstr ""
"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "El servidor intermediari on reenvia PAM."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5089,12 +5167,12 @@ msgstr ""
"de pam existent o crear-ne una de nova i afegir aquĆ­ el nom del servei."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5105,12 +5183,12 @@ msgstr ""
"format _nss_$(libName)_$(function), per exemple _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5118,12 +5196,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (booleĆ )"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5132,12 +5210,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5145,7 +5223,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5154,12 +5232,12 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5176,7 +5254,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5184,17 +5262,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5203,7 +5281,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -5213,7 +5291,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5233,12 +5311,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -5249,69 +5327,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5324,7 +5402,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5332,7 +5410,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5341,55 +5419,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5398,17 +5476,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5416,26 +5494,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5444,17 +5522,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5464,7 +5542,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5473,59 +5551,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5534,7 +5612,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5543,17 +5621,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5561,39 +5639,39 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -5606,7 +5684,7 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5615,7 +5693,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5623,12 +5701,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5682,7 +5760,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5691,7 +5769,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5699,7 +5777,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5710,7 +5788,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5721,7 +5799,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5977,16 +6055,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10872,9 +10940,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Per defecte: cn"
@@ -16386,7 +16454,7 @@ msgstr ""
"L'atribut LDAP que correspon a l'identificador del grup primari de l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Per defecte: gidNumber"
@@ -16464,7 +16532,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -16483,7 +16551,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -16493,8 +16561,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -16503,8 +16571,8 @@ msgstr ""
"pare."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Per defecte: modifyTimestamp"
@@ -16868,7 +16936,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "Per defecte: sshPublicKey"
@@ -16893,7 +16961,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr "L'atribut LDAP que llista la pertanenƧa a grups de l'usuari."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Per defecte: memberOf"
@@ -17040,25 +17108,26 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "The LDAP attribute that contains the names of the group's members."
msgid ""
@@ -17066,37 +17135,37 @@ msgid ""
msgstr "L'atribut LDAP que contƩ els noms dels membres del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "La classe d'objecte d'una entrada de grup a LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Per defecte: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -17105,76 +17174,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "L'atribut LDAP que correspon a l'identificador del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "L'atribut LDAP que contƩ els noms dels membres del grup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Per defecte: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -17182,532 +17251,532 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "La classe d'objecte d'una entrada de netgroup a LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Per defecte: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "L'atribut LDAP que es correspon amb el nom del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "L'atribut LDAP que contƩ els noms dels membres del netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Per defecte: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
"L'atribut LDAP que contƩ les tripletes netgroup (maquina, usuari, domini)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Per defecte: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Per defecte: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Per defecte: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Per defecte: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Per defecte: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Per defecte: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Per defecte: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Per defecte: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Per defecte: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Per defecte: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Per defecte: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Per defecte: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Per defecte: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Per defecte: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/cs.po b/src/man/po/cs.po
index d9646b5..a856422 100644
--- a/src/man/po/cs.po
+++ b/src/man/po/cs.po
@@ -10,7 +10,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2022-05-20 09:18+0000\n"
"Last-Translator: Pavel Borecki <pavel.borecki@gmail.com>\n"
"Language-Team: Czech <https://translate.fedoraproject.org/projects/sssd/sssd-"
@@ -245,7 +245,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -286,10 +286,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -314,7 +314,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -628,7 +628,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -897,7 +897,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1929,7 +1929,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1992,7 +1992,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2054,12 +2054,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2072,6 +2070,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2096,7 +2102,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2174,8 +2180,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "simple_allow_users (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "simple_allow_users (řetězec)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2364,7 +2372,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2398,7 +2406,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2408,7 +2416,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2427,12 +2435,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3077,8 +3079,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3679,7 +3682,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4324,46 +4327,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "dns_resolver_op_timeout"
+msgid "failover_primary_timeout (integer)"
+msgstr "dns_resolver_op_timeout"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "VĆ½chozĆ­: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4371,31 +4401,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4403,120 +4433,120 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "dns_resolver_timeout"
msgid "ldap_search_timeout"
msgstr "dns_resolver_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "dns_resolver_timeout"
msgid "ldap_network_timeout"
msgstr "dns_resolver_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "dns_resolver_op_timeout"
msgid "ldap_opt_timeout"
msgstr "dns_resolver_op_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "dns_resolver_timeout"
msgid "ldap_offline_timeout"
msgstr "dns_resolver_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "dns_resolver_op_timeout"
msgid "ldap_enumeration_refresh_timeout"
msgstr "dns_resolver_op_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "dns_resolver_op_timeout"
msgid "ldap_enumeration_search_timeout"
msgstr "dns_resolver_op_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "dns_resolver_op_timeout"
msgid "ldap_connection_expire_timeout"
msgstr "dns_resolver_op_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "dns_resolver_op_timeout"
msgid "ldap_connection_expire_offset"
msgstr "dns_resolver_op_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4524,27 +4554,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4554,34 +4584,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr "RÅÆznĆ© Å”tĆ­tky uloženĆ© službou nastavovĆ”nĆ­ realmd pro tuto domĆ©nu."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4590,19 +4620,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4610,25 +4640,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "simple_deny_users (string)"
msgid "local_auth_policy (string)"
msgstr "simple_deny_users (řetězec)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4640,7 +4671,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "simple_deny_users (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "simple_deny_users (řetězec)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4649,7 +4725,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4660,7 +4736,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4668,38 +4744,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 3"
msgid "Default: match"
msgstr "VĆ½chozĆ­: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4708,24 +4784,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4735,14 +4811,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4750,21 +4826,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4772,7 +4848,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4781,7 +4857,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4798,17 +4874,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4816,12 +4892,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4829,12 +4905,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4842,12 +4918,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4856,12 +4932,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4869,19 +4945,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4898,7 +4974,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4906,17 +4982,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4925,7 +5001,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4935,7 +5011,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4955,12 +5031,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4971,69 +5047,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5046,7 +5122,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5054,7 +5130,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5063,55 +5139,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5120,17 +5196,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5138,26 +5214,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5166,17 +5242,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5186,7 +5262,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5195,59 +5271,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5256,7 +5332,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5265,17 +5341,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5283,46 +5359,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5331,7 +5407,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5339,12 +5415,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5374,7 +5450,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5383,7 +5459,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5391,7 +5467,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5402,7 +5478,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5413,7 +5489,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5642,16 +5718,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10328,9 +10394,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15540,7 +15606,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15618,7 +15684,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15637,7 +15703,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15647,16 +15713,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15988,7 +16054,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -16013,7 +16079,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16155,25 +16221,26 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "simple_deny_users (string)"
msgid "ldap_user_passkey (string)"
msgstr "simple_deny_users (řetězec)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid ""
#| "The LDAP attribute that contains the names of the netgroup's members."
@@ -16182,37 +16249,37 @@ msgid ""
msgstr "LDAP atribut, kterĆ½ obsahuje jmĆ©na členÅÆ sĆ­Å„ovĆ© skupiny."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16221,76 +16288,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16298,531 +16365,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "TÅ™Ć­da objektu položky danĆ© netgroup v LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "LDAP atribut, kterĆ½ odpovĆ­dĆ” nĆ”zvu netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "LDAP atribut, kterĆ½ obsahuje jmĆ©na členÅÆ sĆ­Å„ovĆ© skupiny."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "TÅ™Ć­da objektu položky hostitele v LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "LDAP atribut, kterĆ½ obsahuje veřejnĆ© ÄĆ”sti SSH klƭčÅÆ hostitele."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/de.po b/src/man/po/de.po
index 81afc72..94374df 100644
--- a/src/man/po/de.po
+++ b/src/man/po/de.po
@@ -10,7 +10,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2021-02-02 14:40+0000\n"
"Last-Translator: Sumit Bose <sbose@redhat.com>\n"
"Language-Team: German <https://translate.fedoraproject.org/projects/sssd/"
@@ -241,7 +241,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -284,10 +284,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -312,7 +312,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Voreinstellung: 10"
@@ -660,7 +660,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -937,7 +937,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Voreinstellung: Nicht gesetzt"
@@ -2098,7 +2098,7 @@ msgstr ""
"emphasis> fĆ¼r eine bestimmte Domain auƟer Kraft gesetzt werden."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Voreinstellung: 0"
@@ -2161,7 +2161,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Voreinstellung: none"
@@ -2225,13 +2225,11 @@ msgstr "ldap_chpass_update_last_change (Boolesch)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Voreinstellung: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Voreinstellung: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2243,6 +2241,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Voreinstellung: False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2267,7 +2273,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2352,8 +2358,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "simple_allow_users (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "simple_allow_users (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2542,7 +2550,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2583,7 +2591,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2593,7 +2601,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2612,12 +2620,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Voreinstellung: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3301,8 +3303,9 @@ msgstr "Voreinstellung: leer, d.h., dass Ā»ldap_uriĀ« benutzt wird"
msgid "DOMAIN SECTIONS"
msgstr "DOMAIN-ABSCHNITTE"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3991,7 +3994,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4743,46 +4746,73 @@ msgstr "Voreinstellung: Der Domain-Teil des Rechnernamens wird benutzt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "pam_id_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "pam_id_timeout (Ganzzahl)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Voreinstellung: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "Ć¼berschreibt die Haupt-GID mit der angegebenen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4790,14 +4820,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -4810,17 +4840,17 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4828,128 +4858,128 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_connection_expire_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout (integer)"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_search_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_expire_timeout (Ganzzahl)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4957,27 +4987,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "flacher (NetBIOS-) Name einer Subdomain"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4992,7 +5022,7 @@ msgstr ""
"verwendet werden. <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
@@ -5000,17 +5030,17 @@ msgstr ""
"Ć¼berschrieben werden."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Voreinstellung: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
@@ -5018,12 +5048,12 @@ msgstr ""
"Kennzeichnungen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5032,19 +5062,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5052,25 +5082,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5082,7 +5113,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (Zeichenkette)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5091,7 +5167,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5102,7 +5178,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -5110,38 +5186,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: cn"
msgid "Default: match"
msgstr "Voreinstellung: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5150,24 +5226,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5177,14 +5253,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5192,21 +5268,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5214,7 +5290,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5223,7 +5299,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5244,17 +5320,17 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "das Proxy-Ziel, an das PAM weiterleitet"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5269,12 +5345,12 @@ msgstr ""
"hinzufĆ¼gen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5285,12 +5361,12 @@ msgstr ""
"Ā»_nss_$(libName)_$(function)Ā«, zum Beispiel Ā»_nss_files_getpwentĀ«."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5298,12 +5374,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (Boolesch)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5317,12 +5393,12 @@ msgstr ""
"veranlassen, die ID im Zwischenspeicher nachzuschlagen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5330,7 +5406,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5339,12 +5415,12 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5361,7 +5437,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5369,17 +5445,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5388,7 +5464,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -5398,7 +5474,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5418,12 +5494,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -5434,69 +5510,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5509,7 +5585,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5517,7 +5593,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5526,55 +5602,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5583,17 +5659,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5601,26 +5677,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5629,17 +5705,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5649,7 +5725,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5658,59 +5734,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5719,7 +5795,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5728,17 +5804,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5746,39 +5822,39 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -5791,7 +5867,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5800,7 +5876,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5808,12 +5884,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5867,7 +5943,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5876,7 +5952,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5884,7 +5960,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5895,7 +5971,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5906,7 +5982,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -6199,16 +6275,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -11387,9 +11453,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Voreinstellung: cn"
@@ -17114,7 +17180,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr "das LDAP-Attribut, das zu der Hauptgruppen-ID des Benutzers gehƶrt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Voreinstellung: gidNumber"
@@ -17195,7 +17261,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -17216,7 +17282,7 @@ msgstr ""
"Dies wird normalerweise nur fĆ¼r Active-Directory-Server benƶtigt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -17226,8 +17292,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -17236,8 +17302,8 @@ msgstr ""
"Ć¼bergeordneten Objekt enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Voreinstellung: modifyTimestamp"
@@ -17633,7 +17699,7 @@ msgstr ""
"das LDAP-Attribut, das die ƶffentlichen SSH-SchlĆ¼ssel des Benutzers enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -17659,7 +17725,7 @@ msgstr ""
"das LDAP-Attribut, das die Gruppenmitgliedschaften des Benutzers auffĆ¼hrt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Voreinstellung: memberOf"
@@ -17817,25 +17883,26 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "The LDAP attribute that contains the port managed by this service."
msgid ""
@@ -17843,37 +17910,37 @@ msgid ""
msgstr "das LDAP-Attribut, das den von diesem Dienst verwalteten Port enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "die Objektklasse eines Gruppeneintrags in LDAP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Voreinstellung: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -17882,52 +17949,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "das LDAP-Attribut, das der Gruppen-ID entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "das LDAP-Attribut, das die Namen der Gruppenmitglieder enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Voreinstellung: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -17936,17 +18003,17 @@ msgstr ""
"wird normalerweise nur fĆ¼r Active-Directory-Server benƶtigt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -17955,7 +18022,7 @@ msgstr ""
"eventuell weitere Flags enthƤlt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -17966,98 +18033,98 @@ msgstr ""
"Domains herausgefiltert werden sollte."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "die Objektklasse eines Netzgruppeneintrags in LDAP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
"Beim IPA-Anbieter sollte stattdessen Ā»ipa_netgroup_object_classĀ« benutzt "
"werden."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Voreinstellung: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "das LDAP-Attribut, das dem Netzgruppennamen entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
"Beim IPA-Anbieter sollte stattdessen Ā»ipa_netgroup_nameĀ« benutzt werden."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "das LDAP-Attribut, das die Namen der Netzgruppenmitglieder enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
"Beim IPA-Anbieter sollte stattdessen Ā»ipa_netgroup_memberĀ« benutzt werden."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Voreinstellung: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
@@ -18065,129 +18132,129 @@ msgstr ""
"enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Diese Option ist fĆ¼r IPA-Anbieter nicht verfĆ¼gbar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Voreinstellung: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Voreinstellung: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "die Objektklasse eines Diensteintrags in LDAP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
@@ -18195,89 +18262,89 @@ msgstr ""
"das LDAP-Attribut, das die Namen von Dienstattributen und ihre Alias enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "das LDAP-Attribut, das den von diesem Dienst verwalteten Port enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Voreinstellung: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
"das LDAP-Attribut, das die von diesem Dienst verstandenen Protokolle enthƤlt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Voreinstellung: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "die Objektklasse eines Sudo-Regeleintrags in LDAP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Voreinstellung: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "das LDAP-Attribut, das dem Namen der Sudo-Regel entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "das LDAP-Attribut, das dem Namen des Befehls entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Voreinstellung: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -18286,17 +18353,17 @@ msgstr ""
"Netzwerk oder des Netzwerkgruppe des Rechners) entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Voreinstellung: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -18305,32 +18372,32 @@ msgstr ""
"oder der Netzwerkgruppe des Benutzers) entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Voreinstellung: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "das LDAP-Attribut, das den Sudo-Optionen entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Voreinstellung: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -18339,17 +18406,17 @@ msgstr ""
"ausgefĆ¼hrt werden kƶnnen"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Voreinstellung: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -18358,17 +18425,17 @@ msgstr ""
"worunter Befehle ausgefĆ¼hrt werden kƶnnen"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Voreinstellung: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -18377,17 +18444,17 @@ msgstr ""
"Sudo-Regel gĆ¼ltig wird."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Voreinstellung: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -18396,121 +18463,121 @@ msgstr ""
"der die Sudo-Regel nicht lƤnger gĆ¼ltig ist."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Voreinstellung: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (Zeichenkette)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "das LDAP-Attribut, das dem Reihenfolgenindex der Regel entspricht"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Voreinstellung: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/es.po b/src/man/po/es.po
index 36bf95b..1b0f9f5 100644
--- a/src/man/po/es.po
+++ b/src/man/po/es.po
@@ -18,7 +18,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2021-10-27 15:05+0000\n"
"Last-Translator: Emilio Herrera <ehespinosa57@gmail.com>\n"
"Language-Team: Spanish <https://translate.fedoraproject.org/projects/sssd/"
@@ -286,7 +286,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -334,10 +334,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -365,7 +365,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Predeterminado: 10"
@@ -776,7 +776,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -1132,7 +1132,7 @@ msgstr ""
"casos donde los nombres de usuarios se deben compartir entre dominios."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Por defecto: No definido"
@@ -2393,7 +2393,7 @@ msgstr ""
"<emphasis>pwd_expiration_warning</emphasis> para un dominio concreto."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Predeterminado: 0"
@@ -2470,7 +2470,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Predeterminado: none"
@@ -2545,13 +2545,11 @@ msgstr "pam_cert_auth (booleano)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Por defecto: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Predeterminado: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2563,6 +2561,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Por defecto: False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2590,7 +2596,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr "Predeterminado:"
@@ -2693,7 +2699,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+#, fuzzy
+#| msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr "pam_p11_allowed_services (entero)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2921,7 +2929,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
#, fuzzy
#| msgid "pam_app_services (string)"
msgid "pam_gssapi_services"
@@ -2964,7 +2972,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "Ejemplo: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2974,7 +2982,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2993,12 +3001,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Predeterminado: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3737,8 +3739,9 @@ msgstr "Predeterminado: VacĆ­o. No empareja grupos."
msgid "DOMAIN SECTIONS"
msgstr "SECCIONES DE DOMINIO"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -4476,7 +4479,7 @@ msgstr ""
"especialmente para grupos que contienen muchos miembros."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -5272,48 +5275,75 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "p11_wait_for_card_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "p11_wait_for_card_timeout (entero)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Predeterminado: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "Anula el valor primario GID con el especificado."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
"Distingue mayĆŗsculas y minĆŗsculas. Este valor es invalido para el proveedor "
"AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr "No sensible a mayĆŗsculas minĆŗsculas."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr "Preserving"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -5325,14 +5355,14 @@ msgstr ""
"protocolo) estĆ”n en minĆŗsculas en la salida."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
#, fuzzy
#| msgid ""
#| "The available options are: <placeholder type=\"variablelist\" id=\"0\"/>"
@@ -5343,17 +5373,17 @@ msgstr ""
"Las opciones disponibles son: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr "Predeterminado: True (False para proveedor AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -5365,61 +5395,61 @@ msgstr ""
"siguientes opciones:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_connection_expire_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
@@ -5428,71 +5458,71 @@ msgstr ""
"explĆ­citamente ldap_krb5_keytab)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_search_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_expire_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
#, fuzzy
#| msgid "auto_private_groups (string)"
msgid "auto_private_groups"
msgstr "auto_private_groups (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
#, fuzzy
#| msgid "Case insensitive."
msgid "case_sensitive"
msgstr "No sensible a mayĆŗsculas minĆŗsculas."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -5502,27 +5532,27 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr "Aviso: Esta opciĆ³n solo trabaja con el proveedor IPA y AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "flat (NetBIOS) nombre de un subdominio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -5538,7 +5568,7 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
@@ -5546,17 +5576,17 @@ msgstr ""
"emphasis>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Por defecto: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
@@ -5564,12 +5594,12 @@ msgstr ""
"este dominio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr "cached_auth_timeout (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5582,7 +5612,7 @@ msgstr ""
"incorrectas, SSSD cae de nuevo a la autenticaciĆ³n en linea."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
@@ -5592,12 +5622,12 @@ msgstr ""
"confianza."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr "El valor especial 0 implica que esta funciĆ³n estĆ” deshabilitada."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5608,25 +5638,26 @@ msgstr ""
"gestionar <quote>initgroups.</quote>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5638,7 +5669,54 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (cadena)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+#, fuzzy
+#| msgid "gdm-smartcard"
+msgid "Smartcard"
+msgstr "gdm-smartcard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5647,7 +5725,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5658,7 +5736,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -5666,31 +5744,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: mail"
msgid "Default: match"
msgstr "Predeterminado: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr "auto_private_groups (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr "true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
@@ -5699,7 +5777,7 @@ msgstr ""
"usuario. El nĆŗmero GID se ignora en este caso."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5712,12 +5790,12 @@ msgstr ""
"unicidad den el espacio de ID."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr "false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
@@ -5726,12 +5804,12 @@ msgstr ""
"a un objeto grupo en las base de datos LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr "hybrid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5746,7 +5824,7 @@ msgstr ""
"grupo, el GID primario del usuario se resuelve al de ese objeto grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
@@ -5755,7 +5833,7 @@ msgstr ""
"una entrada de grupo, de otro modo el GID simplemente no se puede resolver."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5766,7 +5844,7 @@ msgstr ""
"tambiƩn desea retener los grupos privados existentes del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -5775,7 +5853,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
@@ -5784,7 +5862,7 @@ msgstr ""
"POSIX IDs asignados y True para subdominios que usan mapeo de ID automƔtico."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5794,7 +5872,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5806,7 +5884,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5832,17 +5910,17 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "El proxy de destino PAM prĆ³ximo a."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5856,12 +5934,12 @@ msgstr ""
"pam existente o crear una nueva y aƱadir el nombre de servicio aquƭ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5872,12 +5950,12 @@ msgstr ""
"_nss_$(libName)_$(function), por ejemplo _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5885,12 +5963,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (booleano)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5904,12 +5982,12 @@ msgstr ""
"razones de rendimiento."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr "proxy_max_children (entero)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5921,7 +5999,7 @@ msgstr ""
"son encoladas."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5930,12 +6008,12 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr "Dominios de aplicaciones"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5964,7 +6042,7 @@ msgstr ""
"que opcionalmente herede ajustes de un dominio SSSD tradicional."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5976,17 +6054,17 @@ msgstr ""
"establecido correctamente."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr "ParĆ”metros de dominio de aplicaciĆ³n"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr "inherit_from (cadena)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5999,7 +6077,7 @@ msgstr ""
"<quote>hermano</quote>."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -6014,7 +6092,7 @@ msgstr ""
"cache y hace al atributo phone alcanzable a travƩs del interfaz D-Bus."
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6048,12 +6126,12 @@ msgstr ""
"ldap_user_extra_attrs = phone:telephoneNumber\n"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr "SECCIƓN DE DOMINIO DE CONFIANZA"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -6070,57 +6148,57 @@ msgstr ""
"soportadas en la secciĆ³n de dominio de confianza son:"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr "ldap_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr "ldap_user_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr "ldap_group_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr "ldap_netgroup_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr "ldap_service_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr "ldap_sasl_mech,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr "ad_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr "ad_backup_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr "ad_site,"
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr "use_fully_qualified_names"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
@@ -6129,12 +6207,12 @@ msgstr ""
"pƔgina de manual."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr "SECCIƓN DE MAPEO DEL CERTIFICADO"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -6156,7 +6234,7 @@ msgstr ""
"usan autenticaciĆ³n PAM."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -6168,7 +6246,7 @@ msgstr ""
"citerefentry>)."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -6182,12 +6260,12 @@ msgstr ""
"opciones:"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr "matchrule (cadena)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
@@ -6196,7 +6274,7 @@ msgstr ""
"procesados, los demƔs son ignorados."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
@@ -6205,17 +6283,17 @@ msgstr ""
"tengan Extended Key Usage <quote>clientAuth</quote>"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr "maprule (cadena)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr "Define como se encuentra un usuario desde un certificado dado."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
@@ -6224,7 +6302,7 @@ msgstr ""
"como <quote>ldap</quote>, <quote>AD</quote> o <quote>ipa</quote>."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
@@ -6233,12 +6311,12 @@ msgstr ""
"encontrar un usuario con el mismo nombre."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr "domains (cadena)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -6251,17 +6329,17 @@ msgstr ""
"usada para aƱadir la regla a los subdominios tambiƩn."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr "Predetermiado: el dominio configurado en sssd.conf"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr "priority (entero)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -6272,12 +6350,12 @@ msgstr ""
"mƔs alte mientras que <quote>4294967295</quote> es la mƔs baja."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr "Predeterminado: la prioridad mƔs baja"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
@@ -6287,7 +6365,7 @@ msgstr ""
"propiedades especiales:"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
@@ -6296,7 +6374,7 @@ msgstr ""
"usuario coincidente"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -6309,17 +6387,17 @@ msgstr ""
"short_name})</quote>"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr "la opciĆ³n <quote>domains</quote> es ignorada"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr "SECCIƓN DE CONFIGURACIƓN INICIAL"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -6334,7 +6412,7 @@ msgstr ""
"al usuario las credenciales apropiadas."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -6347,22 +6425,22 @@ msgstr ""
"Las siguientes opciones deberĆ­an suministrar una mejor flexibilidad aquĆ­."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr "password_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr "cambiar la cadena de solicitud de contraseƱa"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -6371,37 +6449,37 @@ msgstr ""
"<placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr "[prompting/2fa]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr "para cambiar la cadena de la solicitud del primer factor"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr "second_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr "para cambiar la cadena de la solicitud para el segundo factor"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr "single_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
#, fuzzy
#| msgid ""
#| "boolean value, if True there will be only a single prompt using the value "
@@ -6418,7 +6496,7 @@ msgstr ""
"Ćŗnica cadena"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -6427,19 +6505,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
#, fuzzy
#| msgid "[prompting/password]"
msgid "[prompting/passkey]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -6447,47 +6525,47 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
#, fuzzy
#| msgid "first_prompt"
msgid "interactive_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the interactive prompt."
msgstr "cambiar la cadena de solicitud de contraseƱa"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
#, fuzzy
#| msgid "first_prompt"
msgid "touch_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the touch prompt."
msgstr "cambiar la cadena de solicitud de contraseƱa"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "to configure two-factor authentication prompting, allowed options are: "
@@ -6500,7 +6578,7 @@ msgstr ""
"permitidas son: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
#, fuzzy
#| msgid ""
#| "Each supported authentication method has its own configuration subsection "
@@ -6519,7 +6597,7 @@ msgstr ""
"type=\"variablelist\" id=\"1\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -6530,12 +6608,12 @@ msgstr ""
"pregunta para este servicio."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr "EJEMPLOS"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6589,7 +6667,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -6602,7 +6680,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -6612,7 +6690,7 @@ msgstr ""
"use_fully_qualified_names = false\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -6629,7 +6707,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, fuzzy, no-wrap
#| msgid ""
#| "[certmap/my.domain/rule_name]\n"
@@ -6657,7 +6735,7 @@ msgstr ""
"matchrule = &lt;ISSUER&gt;^CN=My-CA,DC=MY,DC=DOMAIN$&lt;SUBJECT&gt;^CN=User.Name,DC=MY,DC=DOMAIN$\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
#, fuzzy
#| msgid ""
#| "3. The following example shows the configuration for two certificate "
@@ -6963,16 +7041,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -12650,9 +12718,9 @@ msgstr "Nombre del atributo que contiene el nombre de la vista."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Predeterminado: cn"
@@ -18430,7 +18498,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr "El atributo LDAP que corresponde al id del grupo primario del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Predeterminado: gidNumber"
@@ -18515,7 +18583,7 @@ msgstr ""
"El atributo LDAP que contiene el UUID/GUID de un objeto de usuario LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -18538,7 +18606,7 @@ msgstr ""
"es normalmente sĆ³lo necesario para servidores ActiveDirectory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
"Predeterminado: objectSid para ActiveDirectory, no establecido para otros "
@@ -18550,8 +18618,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -18560,8 +18628,8 @@ msgstr ""
"objeto primario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Predeterminado: modifyTimestamp"
@@ -18955,7 +19023,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "El atributo LDAP que contiene las claves pĆŗblicas SSH del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "Predeterminado: sshPublicKey"
@@ -18980,7 +19048,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr "El atributo LDAP que lista los afiliaciĆ³n a grupo de usario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Predeterminado: memberOf"
@@ -19144,12 +19212,20 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap-attributes.5.xml:626
+#, fuzzy
+#| msgid ""
+#| "Note: If an email address of a user conflicts with an email address or "
+#| "fully qualified name of another user, then SSSD will not be able to serve "
+#| "those users properly. If for some reason several users need to share the "
+#| "same email address then set this option to a nonexistent attribute name "
+#| "in order to disable user lookup/login by email."
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
"Aviso: Si una direcciĆ³n de correo electrĆ³nico de un usuario entra en "
"conflicto con una direcciĆ³n de correo electrĆ³nico o el nombre totalmente "
@@ -19160,19 +19236,19 @@ msgstr ""
"bĆŗsqueda/acceso por correo electrĆ³nico."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr "Predeterminado: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "Name of the LDAP attribute containing the email address of the user."
msgid ""
@@ -19181,37 +19257,37 @@ msgstr ""
"Nombre del atributo LDAP que contiene el correo electrĆ³nico del usuario."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "La clase de objeto de una entrada de grupo LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Por defecto: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -19220,52 +19296,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr "Predeterminado: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "El atributo LDAP que corresponde al id del grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "El atributo LDAP que contiene los nombres de los miembros del grupo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Valor predeterminado: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr "El atributo LDAP que contiene el UUID/GUID de un objeto grupo LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -19274,17 +19350,17 @@ msgstr ""
"normalmente sĆ³lo necesario para servidores ActiveDirectory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -19293,7 +19369,7 @@ msgstr ""
"puede ser otras banderas."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -19304,18 +19380,18 @@ msgstr ""
"confianza."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
"Predeterminado: groupType en el proveedor AD, de otro modo no establecido"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr "ldap_group_external_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
@@ -19325,80 +19401,80 @@ msgstr ""
"externos de IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
"Predeterminado: ipaExternalMember en el proveedor IPA, de otro modo no "
"estabecido."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "La clase objeto de una entrada de grupo de red en LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr "En proveedor IPA, ipa_netgroup_object_class, se usarĆ­a en su lugar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Predeterminado: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "El atributo LDAP que corresponde al nombre de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr "Un proveedor IPA, ipa_netgroup_name serĆ­a usado en su lugar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
"El atributo LDAP que contiene los nombres de los miembros de grupo de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr "Un proveedor IPA, ipa_netgroup_member serĆ­a usado en su lugar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Predeterminado: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
@@ -19406,57 +19482,57 @@ msgstr ""
"de red."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Esta opciĆ³n no estĆ” disponible en el proveedor IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Predeterminado: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (cadena)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr "ldap_host_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "La clase de objeto de una entrada de host en LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Por defecto: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr "ldap_host_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr "El atributo LDAP que corresponde al nombre de host."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr "ldap_host_fqdn (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
@@ -19465,72 +19541,72 @@ msgstr ""
"del host."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr "Predeterminado: fqdn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr "ldap_host_serverhostname (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr "Predeterminado: serverHostname"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr "ldap_host_member_of (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr "Atributo LDAP que lista los miembros del grupo del host."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr "ldap_host_ssh_public_key (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "El atributo LDAP que contiene las claves pĆŗblicas SSH del host."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr "ldap_host_uuid (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr "Atributo LDAP que contiene las UUID/GUID de un objeto host LDAP."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "La clase objeto de una entrada de servicio en LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
@@ -19538,89 +19614,89 @@ msgstr ""
"El atributo LDAP que contiene el nombre de servicio de atributos y sus alias."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "El atributo LDAP que contiene el puerto manejado por este servicio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Por defecto: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
"El atributo LDAP que contiene los protocolos entendidos por este servicio."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Por defecto: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "El objeto clase de una regla de entrada sudo en LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Por defecto: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "El atributo LDAP que corresponde a la regla nombre de sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "El atributo LDAP que corresponde al nombre de comando."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Por defecto: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -19629,17 +19705,17 @@ msgstr ""
"red IP del host o grupo de red del host)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Por defecto: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -19648,32 +19724,32 @@ msgstr ""
"grupo o grupo de red del usuario)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Por defecto: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "El atributo LDAP que corresponde a las opciones sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Por defecto: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -19682,17 +19758,17 @@ msgstr ""
"pueden ejecutar como."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Por defectot: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -19701,17 +19777,17 @@ msgstr ""
"ejecutar comandos como."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Por defecto: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -19720,17 +19796,17 @@ msgstr ""
"regla sudo es vƔlida."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Por defecto: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -19739,121 +19815,121 @@ msgstr ""
"la regla sudo dejarƔ de ser vƔlida."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Por defecto: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (cadena)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "El atributo LDAP que corresponde al Ć­ndice de ordenaciĆ³n de la regla."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Por defecto: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/eu.po b/src/man/po/eu.po
index 0d3a52d..20a705e 100644
--- a/src/man/po/eu.po
+++ b/src/man/po/eu.po
@@ -7,7 +7,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-14 11:55-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Basque (http://www.transifex.com/projects/p/sssd/language/"
@@ -226,7 +226,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -267,10 +267,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -295,7 +295,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -603,7 +603,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -872,7 +872,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1885,7 +1885,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1948,7 +1948,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2010,12 +2010,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2028,6 +2026,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2052,7 +2058,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2128,7 +2134,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2318,7 +2324,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2352,7 +2358,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2362,7 +2368,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2381,12 +2387,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3019,8 +3019,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3615,7 +3616,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4250,46 +4251,69 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
-msgid "override_gid (integer)"
+msgid "failover_primary_timeout (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+msgid "Default: 31"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4297,31 +4321,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4329,104 +4353,104 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4434,27 +4458,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4464,34 +4488,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4500,19 +4524,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4520,23 +4544,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
msgid "local_auth_policy (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4548,7 +4573,50 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+msgid "local_auth_policy = match (default)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4557,7 +4625,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4568,7 +4636,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4576,36 +4644,36 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
msgid "Default: match"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4614,24 +4682,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4641,14 +4709,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4656,21 +4724,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4678,7 +4746,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4687,7 +4755,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4704,17 +4772,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4722,12 +4790,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4735,12 +4803,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4748,12 +4816,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4762,12 +4830,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4775,19 +4843,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4804,7 +4872,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4812,17 +4880,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4831,7 +4899,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4841,7 +4909,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4861,12 +4929,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4877,69 +4945,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4952,7 +5020,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -4960,7 +5028,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -4969,55 +5037,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5026,17 +5094,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5044,26 +5112,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5072,17 +5140,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5092,7 +5160,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5101,59 +5169,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5162,7 +5230,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5171,17 +5239,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5189,46 +5257,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5237,7 +5305,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5245,12 +5313,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5280,7 +5348,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5289,7 +5357,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5297,7 +5365,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5308,7 +5376,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5319,7 +5387,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5548,16 +5616,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10187,9 +10245,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15395,7 +15453,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15473,7 +15531,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15492,7 +15550,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15502,16 +15560,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15843,7 +15901,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15868,7 +15926,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16010,59 +16068,60 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
msgid "ldap_user_passkey (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16071,76 +16130,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16148,531 +16207,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/fi.po b/src/man/po/fi.po
index c4d7f56..0dff6b0 100644
--- a/src/man/po/fi.po
+++ b/src/man/po/fi.po
@@ -3,7 +3,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2022-03-20 19:16+0000\n"
"Last-Translator: Jan Kuparinen <copper_fin@hotmail.com>\n"
"Language-Team: Finnish <https://translate.fedoraproject.org/projects/sssd/"
@@ -222,7 +222,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -263,10 +263,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -291,7 +291,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -605,7 +605,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -874,7 +874,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Oletus: ei asetettu"
@@ -1889,7 +1889,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1952,7 +1952,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Oletus: ei mitƤƤn"
@@ -2014,13 +2014,11 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Oletus:epƤtosi"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Oletus:tosi"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2032,6 +2030,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Oletus:epƤtosi"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2056,7 +2062,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr "Oletus:"
@@ -2136,7 +2142,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2326,7 +2332,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2362,7 +2368,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "Esimerkki: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2372,7 +2378,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2391,12 +2397,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Oletus:tosi"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3031,8 +3031,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr "kƤytƶssƤ"
@@ -3627,7 +3628,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4266,46 +4267,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "dns_resolver_op_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "dns_resolver_op_timeout (integeri)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 30"
+msgid "Default: 31"
+msgstr "Oletus: 30"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "epƤtosi"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4313,31 +4341,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4345,124 +4373,124 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_search_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_network_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_opt_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_offline_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_enumeration_refresh_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_enumeration_search_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_connection_expire_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_connection_expire_offset"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "client_idle_timeout"
msgid "ldap_connection_idle_timeout"
msgstr "client_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4472,27 +4500,27 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4502,34 +4530,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4538,19 +4566,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4558,25 +4586,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_user_principal"
msgid "local_auth_policy (string)"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4588,7 +4617,54 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_user_principal"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_user_principal"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+#, fuzzy
+#| msgid "enabled"
+msgid "disabled"
+msgstr "kƤytƶssƤ"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4597,7 +4673,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4608,7 +4684,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4616,38 +4692,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: true"
msgid "Default: match"
msgstr "Oletus:tosi"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr "tosi"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4656,24 +4732,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr "epƤtosi"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4683,14 +4759,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4698,21 +4774,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4720,7 +4796,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4729,7 +4805,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4746,17 +4822,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4764,12 +4840,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4777,12 +4853,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4790,12 +4866,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4804,12 +4880,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4817,19 +4893,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4846,7 +4922,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4854,17 +4930,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4873,7 +4949,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4883,7 +4959,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4903,12 +4979,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4919,69 +4995,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4994,7 +5070,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5002,7 +5078,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5011,55 +5087,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5068,17 +5144,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5086,26 +5162,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5114,17 +5190,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5134,7 +5210,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5143,59 +5219,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5204,7 +5280,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5213,17 +5289,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5231,46 +5307,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5279,7 +5355,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5287,12 +5363,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5322,7 +5398,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5331,7 +5407,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5339,7 +5415,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5350,7 +5426,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5361,7 +5437,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5590,16 +5666,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10231,9 +10297,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15439,7 +15505,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15517,7 +15583,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15536,7 +15602,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15546,16 +15612,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15887,7 +15953,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15912,7 +15978,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16054,61 +16120,62 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_principal"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16117,76 +16184,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16194,531 +16261,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/fr.po b/src/man/po/fr.po
index a19c03f..ce8012a 100644
--- a/src/man/po/fr.po
+++ b/src/man/po/fr.po
@@ -17,7 +17,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2020-07-22 07:49-0400\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: French (http://www.transifex.com/projects/p/sssd/language/"
@@ -260,7 +260,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -303,10 +303,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -331,7 +331,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Par dƩfaut : 10"
@@ -681,7 +681,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -964,7 +964,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Par dƩfaut : non dƩfini"
@@ -2132,7 +2132,7 @@ msgstr ""
"<emphasis>pwd_expiration_warning</emphasis> pour un domaine particulier."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Par dƩfaut : 0"
@@ -2200,7 +2200,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Par dƩfaut : aucun"
@@ -2264,13 +2264,11 @@ msgstr "ldap_chpass_update_last_change (bool)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Par dƩfaut : False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Par dƩfaut : True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2282,6 +2280,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Par dƩfaut : False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2306,7 +2312,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2391,8 +2397,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "ad_gpo_map_service (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "ad_gpo_map_service (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2581,7 +2589,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
#, fuzzy
#| msgid "ad_gpo_map_service (string)"
msgid "pam_gssapi_services"
@@ -2625,7 +2633,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "ExempleĀ : <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2635,7 +2643,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2654,12 +2662,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Par dƩfaut : True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3341,8 +3343,9 @@ msgstr "Par dƩfaut : vide, ldap_uri est donc utilisƩ."
msgid "DOMAIN SECTIONS"
msgstr "SECTIONS DOMAINES"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -4027,7 +4030,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4790,46 +4793,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "pam_id_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "pam_id_timeout (entier)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Par dƩfaut : 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "RedƩfinit le GID primaire avec la valeur spƩcifiƩe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr "Insensible Ć  la casse."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr "Preserving"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4841,14 +4871,14 @@ msgstr ""
"sortie."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -4861,17 +4891,17 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr "Par dĆ©fautĀ : true (false pour le fournisseur AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4879,130 +4909,130 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_connection_expire_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_search_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_expire_timeout (entier)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
#, fuzzy
#| msgid "Case insensitive."
msgid "case_sensitive"
msgstr "Insensible Ć  la casse."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -5012,27 +5042,27 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "nom plat (NetBIOS) d'un sous-domaine."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -5048,7 +5078,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
@@ -5056,17 +5086,17 @@ msgstr ""
"emphasis>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Par dƩfaut : <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
@@ -5074,12 +5104,12 @@ msgstr ""
"ce domaine."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5088,19 +5118,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5108,25 +5138,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5138,7 +5169,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (chaƮne)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5147,7 +5223,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5158,7 +5234,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -5166,38 +5242,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: cn"
msgid "Default: match"
msgstr "Par dƩfaut : cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5206,24 +5282,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5233,14 +5309,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5248,21 +5324,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5270,7 +5346,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5279,7 +5355,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5300,17 +5376,17 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "Le proxy cible duquel PAM devient mandataire."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5324,12 +5400,12 @@ msgstr ""
"ou en crƩer une nouvelle et ajouter le nom de service ici."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5340,12 +5416,12 @@ msgstr ""
"_nss_$(libName)_$(function), par exemple _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5353,12 +5429,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (boolean)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5372,12 +5448,12 @@ msgstr ""
"afin d'amƩliorer les performances."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5385,7 +5461,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5394,12 +5470,12 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5416,7 +5492,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5424,17 +5500,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5443,7 +5519,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -5453,7 +5529,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5473,12 +5549,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -5489,69 +5565,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5564,7 +5640,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5572,7 +5648,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5581,55 +5657,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5638,17 +5714,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5656,26 +5732,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5684,17 +5760,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5704,7 +5780,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5713,59 +5789,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5774,7 +5850,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5783,17 +5859,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5801,39 +5877,39 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -5846,7 +5922,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5855,7 +5931,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5863,12 +5939,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5922,7 +5998,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5931,7 +6007,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5939,7 +6015,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5950,7 +6026,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5961,7 +6037,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -6252,16 +6328,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -11412,9 +11478,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Par dƩfaut : cn"
@@ -17048,7 +17114,7 @@ msgstr ""
"L'attribut LDAP correspondant Ć  l'id du groupe primaire de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Par dƩfaut : gidNumber"
@@ -17129,7 +17195,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -17152,7 +17218,7 @@ msgstr ""
"n'est habituellement nƩcessaire que pour les serveurs Active Directory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -17162,8 +17228,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -17172,8 +17238,8 @@ msgstr ""
"l'objet parent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Par dƩfaut : modifyTimestamp"
@@ -17567,7 +17633,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "L'attribut LDAP qui contient les clƩs publiques SSH de l'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "Par dĆ©fautĀ : sshPublicKey"
@@ -17593,7 +17659,7 @@ msgstr ""
"L'attribut LDAP ƩnumƩrant les groupes auquel appartient un utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Par dƩfaut : memberOf"
@@ -17751,25 +17817,26 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "The LDAP attribute that contains the port managed by this service."
msgid ""
@@ -17777,37 +17844,37 @@ msgid ""
msgstr "L'attribut LDAP qui contient le port gƩrƩ par ce service."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "La classe d'objet d'une entrƩe de groupe dans LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Par dƩfaut : posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -17816,52 +17883,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "L'attribut LDAP correspondant Ć  l'identifiant de groupe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "L'attribut LDAP contenant les noms des membres du groupe."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Par dƩfaut : memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -17870,17 +17937,17 @@ msgstr ""
"n'est habituellement nƩcessaire que pour les serveurs Active Directory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -17889,7 +17956,7 @@ msgstr ""
"voire d'autres indicateurs."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -17900,98 +17967,98 @@ msgstr ""
"hors des domaines approuvƩs."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "La classe d'objet d'une entrƩe de netgroup dans LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
"Pour un fournisseur IPA, ipa_netgroup_object_class doit ĆŖtre utilisĆ© Ć  la "
"place."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Par dƩfaut : nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "L'attribut LDAP correspondant au nom du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
"Dans le fournisseur IPA, ipa_netgroup_name doit ĆŖtre utilisĆ© Ć  la place."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
"Dans le fournisseur IPA, ipa_netgroup_member doit ĆŖtre utilisĆ© Ć  la place."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Par dƩfaut : memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
@@ -17999,129 +18066,129 @@ msgstr ""
"netgroup."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Cette option n'est pas disponible dans le fournisseur IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Par dƩfaut : nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Par dƩfaut : ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (chaƮne)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "La classe d'objet d'une entrƩe de service LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
@@ -18130,88 +18197,88 @@ msgstr ""
"alias."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "L'attribut LDAP qui contient le port gƩrƩ par ce service."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Par dƩfaut : ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr "L'attribut LDAP qui contient les protocoles compris par ce service."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Par dƩfaut : ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "La classe d'objet d'une entrĆ©e de rĆØgle de sudo dans LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Par dƩfaut : sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "L'attribut LDAP qui correspond au nom de la rĆØgle de sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "L'attribut LDAP qui correspond au nom de la commande."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Par dƩfaut : sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -18220,17 +18287,17 @@ msgstr ""
"rƩseau IP de l'hƓte ou netgroup de l'hƓte)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Par dƩfaut : sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -18239,32 +18306,32 @@ msgstr ""
"groupe ou netgroup de l'utilisateur)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Par dƩfaut : sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "L'attribut LDAP qui correspond aux options sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Par dƩfaut : sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -18273,17 +18340,17 @@ msgstr ""
"nom d'utilisateur."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Par dƩfaut : sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -18292,17 +18359,17 @@ msgstr ""
"les commandes seront ĆŖtre exĆ©cutĆ©es."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Par dƩfaut : sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -18311,17 +18378,17 @@ msgstr ""
"rĆØgle sudo est valide."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Par dƩfaut : sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -18330,121 +18397,121 @@ msgstr ""
"rĆØgle sudo ne sera plus valide."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Par dƩfaut : sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "L'attribut LDAP qui correspond Ć  l'index de tri de la rĆØgle."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Par dƩfaut : sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/ja.po b/src/man/po/ja.po
index 5ae596c..996f1d7 100644
--- a/src/man/po/ja.po
+++ b/src/man/po/ja.po
@@ -12,7 +12,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2021-07-20 07:04+0000\n"
"Last-Translator: Ludek Janda <ljanda@redhat.com>\n"
"Language-Team: Japanese <https://translate.fedoraproject.org/projects/sssd/"
@@ -241,7 +241,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -284,10 +284,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -312,7 +312,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "åˆęœŸå€¤: 10"
@@ -644,7 +644,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -921,7 +921,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -2041,7 +2041,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "åˆęœŸå€¤: 0"
@@ -2104,7 +2104,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "åˆęœŸå€¤: none"
@@ -2168,13 +2168,11 @@ msgstr "ldap_chpass_update_last_change (č«–ē†å€¤)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "åˆęœŸå€¤: 偽"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "åˆęœŸå€¤: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2186,6 +2184,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "åˆęœŸå€¤: 偽"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2210,7 +2216,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2295,8 +2301,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "simple_allow_users (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "simple_allow_users (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2485,7 +2493,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2526,7 +2534,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2536,7 +2544,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2555,12 +2563,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "åˆęœŸå€¤: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3222,8 +3224,9 @@ msgstr "åˆęœŸå€¤: ē©ŗć€ć¤ć¾ć‚Š ldap_uri 恌ä½æē”Øć•ć‚Œć¾ć™ć€‚"
msgid "DOMAIN SECTIONS"
msgstr "ćƒ‰ćƒ”ć‚¤ćƒ³ć‚»ć‚Æć‚·ćƒ§ćƒ³"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3871,7 +3874,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4568,46 +4571,73 @@ msgstr "åˆęœŸå€¤: ćƒžć‚·ćƒ³ć®ćƒ›ć‚¹ćƒˆåć®ćƒ‰ćƒ”ć‚¤ćƒ³éƒØåˆ†ć‚’ä½æē”Øć—ć¾ć
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "pam_id_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "pam_id_timeout (ę•“ę•°)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "åˆęœŸå€¤: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "ćƒ—ćƒ©ć‚¤ćƒžćƒŖćƒ¼ GID ć®å€¤ć‚’ęŒ‡å®šć•ć‚ŒćŸć‚‚ć®ć§äøŠę›øćć—ć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4615,14 +4645,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -4635,17 +4665,17 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4653,128 +4683,128 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_connection_expire_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
#, fuzzy
#| msgid "ldap_purge_cache_timeout (integer)"
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_search_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_connection_expire_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_expire_timeout (ę•“ę•°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4782,27 +4812,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "ć‚µćƒ–ćƒ‰ćƒ”ć‚¤ćƒ³ć®ćƒ•ćƒ©ćƒƒćƒˆ (NetBIOS) åć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4812,35 +4842,35 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
"値ćÆ <emphasis>override_homedir</emphasis> ć‚Ŗćƒ—ć‚·ćƒ§ćƒ³ć«ć‚ˆć‚ŠäøŠę›øćć§ćć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "åˆęœŸå€¤: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr "ć“ć®ćƒ‰ćƒ”ć‚¤ćƒ³ć®ćŸć‚ć® realmd čØ­å®šć‚µćƒ¼ćƒ“ć‚¹ć«ć‚ˆć£ć¦ę ¼ē“ć•ć‚ŒćŸę§˜ć€…ćŖć‚æ悰怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4849,19 +4879,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4869,25 +4899,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4899,7 +4930,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (ę–‡å­—åˆ—)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4908,7 +4984,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4919,7 +4995,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4927,38 +5003,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: cn"
msgid "Default: match"
msgstr "åˆęœŸå€¤: cn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4967,24 +5043,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4994,14 +5070,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5009,21 +5085,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5031,7 +5107,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5040,7 +5116,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5060,17 +5136,17 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "äø­ē¶™ć™ć‚‹ćƒ—ćƒ­ć‚­ć‚·ć‚æćƒ¼ć‚²ćƒƒćƒˆ PAM 恧恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5084,12 +5160,12 @@ msgstr ""
"悒恓恓恫čæ½åŠ ć™ć‚‹åæ…č¦ćŒć‚ć‚Šć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5100,12 +5176,12 @@ msgstr ""
"_nss_files_getpwent 恧恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5113,12 +5189,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (č«–ē†å€¤)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5127,12 +5203,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5140,7 +5216,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5149,12 +5225,12 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5171,7 +5247,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5179,17 +5255,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5198,7 +5274,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -5208,7 +5284,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5228,12 +5304,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -5244,69 +5320,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5319,7 +5395,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5327,7 +5403,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5336,55 +5412,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5393,17 +5469,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5411,26 +5487,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5439,17 +5515,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5459,7 +5535,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5468,59 +5544,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5529,7 +5605,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5538,17 +5614,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5556,39 +5632,39 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "The following expansions are supported: <placeholder "
@@ -5601,7 +5677,7 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5610,7 +5686,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5618,12 +5694,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5677,7 +5753,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5686,7 +5762,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5694,7 +5770,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5705,7 +5781,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5716,7 +5792,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5977,16 +6053,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10886,9 +10952,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "åˆęœŸå€¤: cn"
@@ -16342,7 +16408,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr "ćƒ¦ćƒ¼ć‚¶ćƒ¼ć®ćƒ—ćƒ©ć‚¤ćƒžćƒŖćƒ¼ć‚°ćƒ«ćƒ¼ćƒ— ID 恫åƾåæœć™ć‚‹ LDAP ć®å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "åˆęœŸå€¤: gidNumber"
@@ -16420,7 +16486,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -16441,7 +16507,7 @@ msgstr ""
"ActiveDirectory ć‚µćƒ¼ćƒćƒ¼ć«åÆ¾ć—ć¦ć®ćæåæ…要恧恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -16451,16 +16517,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr "č¦Ŗć‚Ŗ惖ć‚ø悧ć‚Æćƒˆć®ęœ€ēµ‚å¤‰ę›“恮ć‚æć‚¤ćƒ ć‚¹ć‚æćƒ³ćƒ—ć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "åˆęœŸå€¤: modifyTimestamp"
@@ -16832,7 +16898,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "ćƒ¦ćƒ¼ć‚¶ćƒ¼ć® SSH å…¬é–‹éµć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -16857,7 +16923,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr "ćƒ¦ćƒ¼ć‚¶ćƒ¼ć®ć‚°ćƒ«ćƒ¼ćƒ—ćƒ”ćƒ³ćƒćƒ¼ć‚’äø€č¦§ć«ć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "åˆęœŸå€¤: memberOf"
@@ -17009,25 +17075,26 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "The LDAP attribute that contains the port managed by this service."
msgid ""
@@ -17035,37 +17102,37 @@ msgid ""
msgstr "ć“ć®ć‚µćƒ¼ćƒ“ć‚¹ć«ć‚ˆć‚Šē®”ē†ć•ć‚Œć‚‹ćƒćƒ¼ćƒˆć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "LDAP ć«ć‚ć‚‹ć‚°ćƒ«ćƒ¼ćƒ—ć‚Øćƒ³ćƒˆćƒŖćƒ¼ć®ć‚Ŗ惖ć‚ø悧ć‚Æ惈ć‚Æćƒ©ć‚¹ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "åˆęœŸå€¤: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -17074,52 +17141,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "ć‚°ćƒ«ćƒ¼ćƒ—ć® ID 恫åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "ć‚°ćƒ«ćƒ¼ćƒ—ć®ćƒ”ćƒ³ćƒćƒ¼ć®åå‰ć‚’å«ć‚€ LDAP ć®å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "åˆęœŸå€¤: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -17128,24 +17195,24 @@ msgstr ""
"ActiveDirectory ć‚µćƒ¼ćƒćƒ¼ć«åÆ¾ć—ć¦ć®ćæåæ…要恧恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -17153,96 +17220,96 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "LDAP ć«ć‚ć‚‹ćƒćƒƒćƒˆćƒÆćƒ¼ć‚Æć‚°ćƒ«ćƒ¼ćƒ—ć‚Øćƒ³ćƒˆćƒŖćƒ¼ć®ć‚Ŗ惖ć‚ø悧ć‚Æ惈ć‚Æćƒ©ć‚¹ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
"IPA ćƒ—ćƒ­ćƒć‚¤ćƒ€ćƒ¼ć«ćŠć„ć¦ćÆ ipa_netgroup_object_class ćŒä»£ć‚ć‚Šć«ä½æē”Øć•ć‚Œć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "åˆęœŸå€¤: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "惍惃惈ćƒÆćƒ¼ć‚Æć‚°ćƒ«ćƒ¼ćƒ—åć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr "IPA ćƒ—ćƒ­ćƒć‚¤ćƒ€ćƒ¼ć«ćŠć„ć¦ćÆ ipa_netgroup_name ćŒä»£ć‚ć‚Šć«ä½æē”Øć•ć‚Œć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "惍惃惈ćƒÆćƒ¼ć‚Æć‚°ćƒ«ćƒ¼ćƒ—ć®ćƒ”ćƒ³ćƒćƒ¼ć®åå‰ć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
"IPA ćƒ—ćƒ­ćƒć‚¤ćƒ€ćƒ¼ć«ćŠć„ć¦ćÆ ipa_netgroup_member ćŒä»£ć‚ć‚Šć«ä½æē”Øć•ć‚Œć¾ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "åˆęœŸå€¤: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
@@ -17250,217 +17317,217 @@ msgstr ""
"恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "恓恮ć‚Ŗćƒ—ć‚·ćƒ§ćƒ³ćÆ IPA ćƒ—ćƒ­ćƒć‚¤ćƒ€ćƒ¼ć«ćŠć„ć¦åˆ©ē”ØåÆčƒ½ć§ćÆć‚ć‚Šć¾ć›ć‚“ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "åˆęœŸå€¤: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "LDAP ć«ć‚ć‚‹ćƒ›ć‚¹ćƒˆć‚Øćƒ³ćƒˆćƒŖćƒ¼ć®ć‚Ŗ惖ć‚ø悧ć‚Æ惈ć‚Æćƒ©ć‚¹ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "åˆęœŸå€¤: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "ćƒ›ć‚¹ćƒˆć® SSH å…¬é–‹éµć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "LDAP ć«ć‚ć‚‹ć‚µćƒ¼ćƒ“ć‚¹ć‚Øćƒ³ćƒˆćƒŖćƒ¼ć®ć‚Ŗ惖ć‚ø悧ć‚Æ惈ć‚Æćƒ©ć‚¹ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr "ć‚µćƒ¼ćƒ“ć‚¹å±žę€§ć®åå‰ćØćć®ć‚Ø悤ćƒŖć‚¢ć‚¹ć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "ć“ć®ć‚µćƒ¼ćƒ“ć‚¹ć«ć‚ˆć‚Šē®”ē†ć•ć‚Œć‚‹ćƒćƒ¼ćƒˆć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "åˆęœŸå€¤: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr "ć“ć®ć‚µćƒ¼ćƒ“ć‚¹ć«ć‚ˆć‚ŠčŖč­˜ć•ć‚Œć‚‹ćƒ—ćƒ­ćƒˆć‚³ćƒ«ć‚’å«ć‚€ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "åˆęœŸå€¤: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "LDAP 恫恂悋 sudo ćƒ«ćƒ¼ćƒ«ć‚Øćƒ³ćƒˆćƒŖćƒ¼ć®ć‚Ŗ惖ć‚ø悧ć‚Æ惈ć‚Æćƒ©ć‚¹ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "åˆęœŸå€¤: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "sudo ćƒ«ćƒ¼ćƒ«åć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "ć‚³ćƒžćƒ³ćƒ‰åć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "åˆęœŸå€¤: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -17469,17 +17536,17 @@ msgstr ""
"ć‚Æć‚°ćƒ«ćƒ¼ćƒ—ļ¼‰ć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "åˆęœŸå€¤: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -17488,49 +17555,49 @@ msgstr ""
"悋 LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "åˆęœŸå€¤: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "sudo ć‚Ŗćƒ—ć‚·ćƒ§ćƒ³ć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "åˆęœŸå€¤: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr "ć‚³ćƒžćƒ³ćƒ‰ć‚’å®Ÿč”Œć™ć‚‹ćƒ¦ćƒ¼ć‚¶ćƒ¼åć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "åˆęœŸå€¤: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -17538,34 +17605,34 @@ msgstr ""
"ć‚³ćƒžćƒ³ćƒ‰ć‚’å®Ÿč”Œć™ć‚‹ć‚°ćƒ«ćƒ¼ćƒ—åć¾ćŸćÆć‚°ćƒ«ćƒ¼ćƒ—ć® GID 恫åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "åˆęœŸå€¤: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr "sudo ćƒ«ćƒ¼ćƒ«ćŒęœ‰åŠ¹ć«ćŖć‚‹é–‹å§‹ę—„ę™‚ć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "åˆęœŸå€¤: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -17574,121 +17641,121 @@ msgstr ""
"恙怂"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "åˆęœŸå€¤: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (ę–‡å­—åˆ—)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "ćƒ«ćƒ¼ćƒ«ć®äø¦ć³ę›æćˆć‚¤ćƒ³ćƒ‡ćƒƒć‚Æć‚¹ć«åƾåæœć™ć‚‹ LDAP å±žę€§ć§ć™ć€‚"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "åˆęœŸå€¤: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/lv.po b/src/man/po/lv.po
index b136611..6fb4ecf 100644
--- a/src/man/po/lv.po
+++ b/src/man/po/lv.po
@@ -9,7 +9,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-15 12:00-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Latvian (http://www.transifex.com/projects/p/sssd/language/"
@@ -229,7 +229,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -270,10 +270,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -298,7 +298,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Noklusējuma: 10"
@@ -606,7 +606,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -875,7 +875,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1906,7 +1906,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1969,7 +1969,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2031,12 +2031,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2049,6 +2047,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2073,7 +2079,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2151,7 +2157,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2341,7 +2347,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2375,7 +2381,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2385,7 +2391,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2404,12 +2410,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3042,8 +3042,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3638,7 +3639,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4281,46 +4282,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "noildze (vesels skaitlis)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 1"
+msgid "Default: 31"
+msgstr "Noklusējuma: 1"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4328,31 +4356,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4360,114 +4388,114 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "noildze (vesels skaitlis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "noildze (vesels skaitlis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "noildze (vesels skaitlis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "noildze (vesels skaitlis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "noildze (vesels skaitlis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4475,27 +4503,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4505,34 +4533,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4541,19 +4569,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4561,23 +4589,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
msgid "local_auth_policy (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4589,7 +4618,50 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+msgid "local_auth_policy = match (default)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4598,7 +4670,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4609,7 +4681,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4617,38 +4689,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 6"
msgid "Default: match"
msgstr "Noklusējuma: 6"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4657,24 +4729,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4684,14 +4756,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4699,21 +4771,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4721,7 +4793,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4730,7 +4802,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4747,17 +4819,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4765,12 +4837,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4778,12 +4850,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4791,12 +4863,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4805,12 +4877,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4818,19 +4890,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4847,7 +4919,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4855,17 +4927,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4874,7 +4946,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4884,7 +4956,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4904,12 +4976,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4920,69 +4992,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4995,7 +5067,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5003,7 +5075,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5012,55 +5084,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5069,17 +5141,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5087,26 +5159,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5115,17 +5187,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5135,7 +5207,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5144,59 +5216,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5205,7 +5277,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5214,17 +5286,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5232,46 +5304,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5280,7 +5352,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5288,12 +5360,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5323,7 +5395,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5332,7 +5404,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5340,7 +5412,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5351,7 +5423,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5362,7 +5434,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5591,16 +5663,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10234,9 +10296,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15450,7 +15512,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15528,7 +15590,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15547,7 +15609,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15557,16 +15619,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15898,7 +15960,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15923,7 +15985,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16065,59 +16127,60 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
msgid "ldap_user_passkey (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Noklusējuma: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16126,76 +16189,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16203,531 +16266,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/nl.po b/src/man/po/nl.po
index d0333c0..9a409e5 100644
--- a/src/man/po/nl.po
+++ b/src/man/po/nl.po
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-15 12:02-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Dutch (http://www.transifex.com/projects/p/sssd/language/"
@@ -238,7 +238,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -281,10 +281,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -309,7 +309,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -631,7 +631,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -900,7 +900,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1943,7 +1943,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Standaard: 0"
@@ -2006,7 +2006,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2068,12 +2068,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2086,6 +2084,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2110,7 +2116,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2190,8 +2196,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "re_expression (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "re_expression (tekst)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2380,7 +2388,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2414,7 +2422,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2424,7 +2432,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2443,12 +2451,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3085,8 +3087,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3681,7 +3684,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4324,46 +4327,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "entry_negative_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "entry_negative_timeout (numeriek)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "Standaard: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4371,31 +4401,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4403,114 +4433,114 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "enum_cache_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "enum_cache_timeout (numeriek)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "reconnection_retries (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "reconnection_retries (numeriek)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "reconnection_retries (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "reconnection_retries (numeriek)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "reconnection_retries (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "reconnection_retries (numeriek)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "reconnection_retries (integer)"
msgid "ldap_connection_expire_offset"
msgstr "reconnection_retries (numeriek)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4518,27 +4548,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4548,34 +4578,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4584,19 +4614,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4604,25 +4634,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "re_expression (string)"
msgid "local_auth_policy (string)"
msgstr "re_expression (tekst)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4634,7 +4665,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "re_expression (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "re_expression (tekst)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4643,7 +4719,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4654,7 +4730,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4662,38 +4738,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 3"
msgid "Default: match"
msgstr "Standaard: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4702,24 +4778,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4729,14 +4805,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4744,21 +4820,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4766,7 +4842,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4775,7 +4851,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4792,17 +4868,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4810,12 +4886,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4823,12 +4899,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4836,12 +4912,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4850,12 +4926,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4863,19 +4939,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4892,7 +4968,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4900,17 +4976,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4919,7 +4995,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4929,7 +5005,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4949,12 +5025,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4965,69 +5041,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5040,7 +5116,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5048,7 +5124,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5057,55 +5133,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5114,17 +5190,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5132,26 +5208,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5160,17 +5236,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5180,7 +5256,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5189,59 +5265,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5250,7 +5326,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5259,17 +5335,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5277,46 +5353,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5325,7 +5401,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5333,12 +5409,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5368,7 +5444,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5377,7 +5453,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5385,7 +5461,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5396,7 +5472,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5407,7 +5483,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5636,16 +5712,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10289,9 +10355,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15501,7 +15567,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15579,7 +15645,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15598,7 +15664,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15608,16 +15674,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15949,7 +16015,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15974,7 +16040,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16116,61 +16182,62 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "re_expression (string)"
msgid "ldap_user_passkey (string)"
msgstr "re_expression (tekst)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16179,76 +16246,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16256,531 +16323,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/pt.po b/src/man/po/pt.po
index d2ae946..db5c5e7 100644
--- a/src/man/po/pt.po
+++ b/src/man/po/pt.po
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-15 12:05-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Portuguese (http://www.transifex.com/projects/p/sssd/language/"
@@ -233,7 +233,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -276,10 +276,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -304,7 +304,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "PadrĆ£o: 10"
@@ -616,7 +616,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -885,7 +885,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1930,7 +1930,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1993,7 +1993,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "PadrĆ£o: none"
@@ -2055,13 +2055,11 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr ""
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "PadrĆ£o: TRUE"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2073,6 +2071,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2097,7 +2103,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2177,8 +2183,10 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
-msgstr ""
+#, fuzzy
+#| msgid "allowed_shells (string)"
+msgid "pam_p11_allowed_services (string)"
+msgstr "allowed_shells (string)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1799
@@ -2367,7 +2375,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2401,7 +2409,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2411,7 +2419,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2430,12 +2438,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "PadrĆ£o: TRUE"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3078,8 +3080,9 @@ msgstr "PadrĆ£o: empty, ou seja, ldap_uri Ć© usado."
msgid "DOMAIN SECTIONS"
msgstr "SECƇƕES DE DOMƍNIO"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3674,7 +3677,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4315,46 +4318,73 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "pam_id_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "pam_id_timeout (integer)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "PadrĆ£o: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4362,31 +4392,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4394,126 +4424,126 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
#, fuzzy
#| msgid "ldap_search_timeout (integer)"
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
#, fuzzy
#| msgid "ldap_network_timeout (integer)"
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
#, fuzzy
#| msgid "ldap_opt_timeout (integer)"
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_offline_timeout"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
#, fuzzy
#| msgid "ldap_krb5_ticket_lifetime (integer)"
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_connection_expire_timeout"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_connection_expire_offset"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
#, fuzzy
#| msgid "ldap_enumeration_refresh_timeout (integer)"
msgid "ldap_connection_idle_timeout"
msgstr "ldap_enumeration_refresh_timeout (integer)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4521,27 +4551,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4551,34 +4581,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4587,19 +4617,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4607,25 +4637,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4637,7 +4668,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (string)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4646,7 +4722,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4657,7 +4733,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4665,38 +4741,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: cn"
msgid "Default: match"
msgstr "PadrĆ£o: NC"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4705,24 +4781,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4732,14 +4808,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4747,21 +4823,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4769,7 +4845,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4778,7 +4854,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4795,17 +4871,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4813,12 +4889,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4826,12 +4902,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4839,12 +4915,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4853,12 +4929,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4866,19 +4942,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4895,7 +4971,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4903,17 +4979,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4922,7 +4998,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4932,7 +5008,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4952,12 +5028,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4968,69 +5044,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -5043,7 +5119,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -5051,7 +5127,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -5060,55 +5136,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5117,17 +5193,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5135,26 +5211,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5163,17 +5239,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5183,7 +5259,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5192,59 +5268,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5253,7 +5329,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5262,17 +5338,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5280,46 +5356,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5328,7 +5404,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5336,12 +5412,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5395,7 +5471,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5404,7 +5480,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5412,7 +5488,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5423,7 +5499,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5434,7 +5510,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5667,16 +5743,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10333,9 +10399,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "PadrĆ£o: NC"
@@ -15563,7 +15629,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15641,7 +15707,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15660,7 +15726,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15670,16 +15736,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "PadrĆ£o: modifyTimestamp"
@@ -16011,7 +16077,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -16036,7 +16102,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16178,61 +16244,62 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_shell (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_shell (string)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16241,76 +16308,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16318,531 +16385,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "PadrĆ£o: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (string)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/pt_BR.po b/src/man/po/pt_BR.po
index 1eaea8e..ffbcbd0 100644
--- a/src/man/po/pt_BR.po
+++ b/src/man/po/pt_BR.po
@@ -4,7 +4,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2017-01-29 10:11-0500\n"
"Last-Translator: Rodrigo de Araujo Sousa Fonseca "
"<rodrigodearaujo@fedoraproject.org>\n"
@@ -223,7 +223,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -264,10 +264,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -292,7 +292,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -600,7 +600,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -869,7 +869,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1882,7 +1882,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1945,7 +1945,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2007,12 +2007,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2025,6 +2023,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2049,7 +2055,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2125,7 +2131,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2315,7 +2321,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2349,7 +2355,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2359,7 +2365,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2378,12 +2384,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3016,8 +3016,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3612,7 +3613,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4247,46 +4248,69 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
-msgid "override_gid (integer)"
+msgid "failover_primary_timeout (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+msgid "Default: 31"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4294,31 +4318,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4326,104 +4350,104 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4431,27 +4455,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4461,34 +4485,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4497,19 +4521,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4517,23 +4541,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
msgid "local_auth_policy (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4545,7 +4570,50 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+msgid "local_auth_policy = match (default)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4554,7 +4622,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4565,7 +4633,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4573,36 +4641,36 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
msgid "Default: match"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4611,24 +4679,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4638,14 +4706,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4653,21 +4721,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4675,7 +4743,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4684,7 +4752,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4701,17 +4769,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4719,12 +4787,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4732,12 +4800,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4745,12 +4813,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4759,12 +4827,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4772,19 +4840,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4801,7 +4869,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4809,17 +4877,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4828,7 +4896,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4838,7 +4906,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4858,12 +4926,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4874,69 +4942,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4949,7 +5017,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -4957,7 +5025,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -4966,55 +5034,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5023,17 +5091,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5041,26 +5109,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5069,17 +5137,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5089,7 +5157,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5098,59 +5166,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5159,7 +5227,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5168,17 +5236,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5186,46 +5254,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5234,7 +5302,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5242,12 +5310,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5277,7 +5345,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5286,7 +5354,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5294,7 +5362,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5305,7 +5373,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5316,7 +5384,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5545,16 +5613,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10184,9 +10242,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15392,7 +15450,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15470,7 +15528,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15489,7 +15547,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15499,16 +15557,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15840,7 +15898,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15865,7 +15923,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16007,59 +16065,60 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
msgid "ldap_user_passkey (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16068,76 +16127,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16145,531 +16204,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/ru.po b/src/man/po/ru.po
index 6c3f3e4..8c3c4fe 100644
--- a/src/man/po/ru.po
+++ b/src/man/po/ru.po
@@ -8,7 +8,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2022-12-14 19:20+0000\n"
"Last-Translator: Elena Mishina <lepata@basealt.ru>\n"
"Language-Team: Russian <https://translate.fedoraproject.org/projects/sssd/"
@@ -277,7 +277,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -326,10 +326,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -358,7 +358,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: 10"
@@ -771,7 +771,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -1124,7 +1124,7 @@ msgstr ""
"ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»ŠµŠ¹ Š² рŠ°Š·Š½Ń‹Ń… Š“Š¾Š¼ŠµŠ½Š°Ń… Š¼Š¾Š³ŃƒŃ‚ Š±Ń‹Ń‚ŃŒ Š¾Š“ŠøŠ½Š°ŠŗŠ¾Š²Ń‹Š¼Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: Š½Šµ Š·Š°Š“Š°Š½Š¾"
@@ -2388,7 +2388,7 @@ msgstr ""
"<emphasis>pwd_expiration_warning</emphasis> Š“Š»Ń ŠŗŠ¾Š½ŠŗрŠµŃ‚Š½Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Š°."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: 0"
@@ -2464,7 +2464,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: none"
@@ -2539,13 +2539,11 @@ msgstr "pam_cert_auth (Š»Š¾Š³ŠøчŠµŃŠŗŠ¾Šµ Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: false"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: true"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2557,6 +2555,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: false"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2584,7 +2590,7 @@ msgid "The path to the certificate database."
msgstr "ŠŸŃƒŃ‚ŃŒ Šŗ Š±Š°Š·Šµ Š“Š°Š½Š½Ń‹Ń… сŠµŃ€Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Š²."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю:"
@@ -2682,7 +2688,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+#, fuzzy
+#| msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr "pam_p11_allowed_services (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2912,7 +2920,7 @@ msgid "Default: no_session"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: no_session"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr "pam_gssapi_services"
@@ -2956,7 +2964,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "ŠŸŃ€ŠøŠ¼ŠµŃ€: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2966,7 +2974,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: - (ŠæрŠ¾Š²ŠµŃ€ŠŗŠ° ŠæŠ¾Š“Š»ŠøŠ½Š½Š¾ŃŃ‚Šø с ŠæŠ¾Š¼Š¾Ń‰ŃŒŃŽ GSSAPI Š¾Ń‚ŠŗŠ»ŃŽŃ‡ŠµŠ½Š°)"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr "pam_gssapi_check_upn"
@@ -2991,12 +2999,6 @@ msgstr ""
"Š•ŃŠ»Šø Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ Ā«FalseĀ», ŠæрŠ¾Š²ŠµŃ€ŠŗŠ° ŠæŠ¾Š“Š»ŠøŠ½Š½Š¾ŃŃ‚Šø Š±ŃƒŠ“ŠµŃ‚ Š²Ń‹ŠæŠ¾Š»Š½ŃŃ‚ŃŒŃŃ Š“Š»Ń Š²ŃŠµŃ… "
"ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»ŠµŠ¹, ŠæŠ¾Š»ŃƒŃ‡ŠøŠ²ŃˆŠøх Š½ŠµŠ¾Š±Ń…Š¾Š“ŠøŠ¼Ń‹Š¹ Š±ŠøŠ»ŠµŃ‚ сŠ»ŃƒŠ¶Š±Ń‹."
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: true"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3804,8 +3806,9 @@ msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ŠæустŠ¾. ŠŠµ ŠøсŠŗŠ»ŃŽŃ‡Š°ŠµŃ‚ся Š½Šø Š¾
msgid "DOMAIN SECTIONS"
msgstr "Š ŠŠ—Š”Š•Š›Š« Š”ŠžŠœŠ•ŠŠ"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr "enabled"
@@ -4562,7 +4565,7 @@ msgstr ""
"ŠŗŠ¾Š»ŠøчŠµŃŃ‚Š²Š¾ учŠ°ŃŃ‚Š½ŠøŠŗŠ¾Š²)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -5376,48 +5379,75 @@ msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ŠøсŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŃŒ Š“Š¾Š¼ŠµŠ½Š½ŃƒŃŽ чŠ°Ń
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "p11_wait_for_card_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "p11_wait_for_card_timeout (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3:1"
+msgid "Default: 31"
+msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: 3:1"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "ŠŸŠµŃ€ŠµŠ¾ŠæрŠµŠ“ŠµŠ»Šøть Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ Š¾ŃŠ½Š¾Š²Š½Š¾Š³Š¾ GID уŠŗŠ°Š·Š°Š½Š½Ń‹Š¼ Š·Š½Š°Ń‡ŠµŠ½ŠøŠµŠ¼."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
"Š” учётŠ¾Š¼ рŠµŠ³ŠøстрŠ°. Š­Ń‚Š¾ Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ Š½Šµ яŠ²Š»ŃŠµŃ‚ся ŠŗŠ¾Ń€Ń€ŠµŠŗтŠ½Ń‹Š¼ Š“Š»Ń ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠ° Š“Š°Š½Š½Ń‹Ń… "
"AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr "Š‘ŠµŠ· учётŠ° рŠµŠ³ŠøстрŠ°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr "Preserving"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -5429,7 +5459,7 @@ msgstr ""
"рŠµŠ³Šøстр Š² Š²Ń‹Š²ŠµŠ“ŠµŠ½Š½Ń‹Ń… Š“Š°Š½Š½Ń‹Ń…."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
@@ -5439,7 +5469,7 @@ msgstr ""
"Š½Š° сŠµŃ€Š²ŠµŃ€Šµ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -5448,17 +5478,17 @@ msgstr ""
"Š·Š½Š°Ń‡ŠµŠ½Šøя: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: True (False Š“Š»Ń ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠ° Š“Š°Š½Š½Ń‹Ń… AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -5470,47 +5500,47 @@ msgstr ""
"ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Š¾Š²:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr "ldap_offline_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
@@ -5519,57 +5549,57 @@ msgstr ""
"ldap_krb5_keytab Š½Šµ Š·Š°Š“Š°Š½ яŠ²Š½Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr "auto_private_groups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr "case_sensitive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -5579,28 +5609,28 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
"ŠŸŃ€ŠøŠ¼ŠµŃ‡Š°Š½ŠøŠµ: этŠ¾Ń‚ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ рŠ°Š±Š¾Ń‚Š°ŠµŃ‚ тŠ¾Š»ŃŒŠŗŠ¾ Š“Š»Ń ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠ¾Š² Š“Š°Š½Š½Ń‹Ń… IPA Šø AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "ŠæŠ»Š¾ŃŠŗŠ¾Šµ (NetBIOS) ŠøŠ¼Ń ŠæŠ¾Š“Š“Š¾Š¼ŠµŠ½Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -5616,7 +5646,7 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
@@ -5624,29 +5654,29 @@ msgstr ""
"<emphasis>override_homedir</emphasis>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
"Š Š°Š·Š»ŠøчŠ½Ń‹Šµ Š¼ŠµŃ‚ŠŗŠø, сŠ¾Ń…Ń€Š°Š½Ń‘Š½Š½Ń‹Šµ сŠ»ŃƒŠ¶Š±Š¾Š¹ Š½Š°ŃŃ‚Ń€Š¾Š¹ŠŗŠø realmd Š“Š»Ń этŠ¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr "cached_auth_timeout (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5660,7 +5690,7 @@ msgstr ""
"сŠµŃ‚ŠµŠ²Š¾Š¼ рŠµŠ¶ŠøŠ¼Šµ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
@@ -5670,12 +5700,12 @@ msgstr ""
"Š·Š½Š°Ń‡ŠµŠ½Šøя."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr "Š”ŠæŠµŃ†ŠøŠ°Š»ŃŒŠ½Š¾Šµ Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ Ā«0Ā» ŠæŠ¾Š“рŠ°Š·ŃƒŠ¼ŠµŠ²Š°ŠµŃ‚, чтŠ¾ этŠ° Š²Š¾Š·Š¼Š¾Š¶Š½Š¾ŃŃ‚ŃŒ Š¾Ń‚ŠŗŠ»ŃŽŃ‡ŠµŠ½Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5686,25 +5716,26 @@ msgstr ""
"Š¾Š±Ń€Š°Š±Š¾Ń‚ŠŗŠø <quote>initgroups.</quote>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5716,7 +5747,56 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (стрŠ¾ŠŗŠ°)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+#, fuzzy
+#| msgid "gdm-smartcard"
+msgid "Smartcard"
+msgstr "gdm-smartcard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+#, fuzzy
+#| msgid "enabled"
+msgid "disabled"
+msgstr "enabled"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5725,7 +5805,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5736,7 +5816,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
#, fuzzy
#| msgid ""
#| "The following example creates a container named 'mycontainer': "
@@ -5750,31 +5830,31 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: mail"
msgid "Default: match"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr "auto_private_groups (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr "true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
@@ -5783,7 +5863,7 @@ msgstr ""
"UID ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń. ŠŠ¾Š¼ŠµŃ€ GID Š² этŠ¾Š¼ сŠ»ŃƒŃ‡Š°Šµ ŠøŠ³Š½Š¾Ń€ŠøруŠµŃ‚ся."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5797,12 +5877,12 @@ msgstr ""
"ŠæрŠ¾ŃŃ‚Ń€Š°Š½ŃŃ‚Š²Šµ ŠøŠ“ŠµŠ½Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Ń€Š¾Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr "false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
@@ -5811,12 +5891,12 @@ msgstr ""
"ссыŠ»Š°Ń‚ŃŒŃŃ Š½Š° Š¾Š±ŃŠŠµŠŗт Š³Ń€ŃƒŠæŠæы Š² Š±Š°Š·Šµ Š“Š°Š½Š½Ń‹Ń… LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr "hybrid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5831,7 +5911,7 @@ msgstr ""
"Š¾ŃŠ½Š¾Š²Š½Š¾Š¹ GID этŠ¾Š³Š¾ ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń рŠ°Š·Ń€ŠµŃˆŠ°ŠµŃ‚ся Š² этŠ¾Ń‚ Š¾Š±ŃŠŠµŠŗт Š³Ń€ŃƒŠæŠæы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
@@ -5840,7 +5920,7 @@ msgstr ""
"Š³Ń€ŃƒŠæŠæы; Š² ŠøŠ½Š¾Š¼ сŠ»ŃƒŃ‡Š°Šµ GID ŠæрŠ¾ŃŃ‚Š¾ Š±ŃƒŠ“ŠµŃ‚ Š½ŠµŠ²Š¾Š·Š¼Š¾Š¶Š½Š¾ рŠ°Š·Ń€ŠµŃˆŠøть."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5851,7 +5931,7 @@ msgstr ""
"сŠ¾Ń…Ń€Š°Š½Šøть сущŠµŃŃ‚Š²ŃƒŃŽŃ‰ŠøŠµ Š·Š°ŠŗрытыŠµ Š³Ń€ŃƒŠæŠæы ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»ŠµŠ¹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -5860,7 +5940,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
@@ -5870,7 +5950,7 @@ msgstr ""
"ŠæŠ¾Š“Š“Š¾Š¼ŠµŠ½Š¾Š², ŠŗŠ¾Ń‚Š¾Ń€Ń‹Šµ ŠøсŠæŠ¾Š»ŃŒŠ·ŃƒŃŽŃ‚ Š°Š²Ń‚Š¾Š¼Š°Ń‚ŠøчŠµŃŠŗŠ¾Šµ сŠ¾ŠæŠ¾ŃŃ‚Š°Š²Š»ŠµŠ½ŠøŠµ ŠøŠ“ŠµŠ½Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Ń€Š¾Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5880,7 +5960,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5892,7 +5972,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5917,17 +5997,17 @@ msgstr ""
"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "Š¦ŠµŠ»ŃŒ, ŠŗŠ¾Ń‚Š¾Ń€Š¾Š¹ ŠæŠµŃ€ŠµŃŃ‹Š»Š°ŠµŃ‚ Š“Š°Š½Š½Ń‹Šµ ŠæрŠ¾ŠŗсŠø PAM."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5941,12 +6021,12 @@ msgstr ""
"ŠŗŠ¾Š½Ń„ŠøŠ³ŃƒŃ€Š°Ń†ŠøŠµŠ¹ PAM ŠøŠ»Šø сŠ¾Š·Š“Š°Ń‚ŃŒ Š½Š¾Š²ŃƒŃŽ Šø Š“Š¾Š±Š°Š²Šøть Š·Š“ŠµŃŃŒ ŠøŠ¼Ń сŠ»ŃƒŠ¶Š±Ń‹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5957,12 +6037,12 @@ msgstr ""
"_nss_$(libName)_$(function), Š½Š°ŠæрŠøŠ¼ŠµŃ€: _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr "proxy_resolver_lib_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5973,12 +6053,12 @@ msgstr ""
"Š²ŠøŠ“ _nss_$(libName)_$(function), Š½Š°ŠæрŠøŠ¼ŠµŃ€: _nss_dns_gethostbyname2_r."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (Š»Š¾Š³ŠøчŠµŃŠŗŠ¾Šµ Š·Š½Š°Ń‡ŠµŠ½ŠøŠµ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5992,12 +6072,12 @@ msgstr ""
"ŠøŠ“ŠµŠ½Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Ń€Š° Š² ŠŗэшŠµ Š² цŠµŠ»ŃŃ… усŠŗŠ¾Ń€ŠµŠ½Šøя ŠæрŠµŠ“Š¾ŃŃ‚Š°Š²Š»ŠµŠ½Šøя рŠµŠ·ŃƒŠ»ŃŒŃ‚Š°Ń‚Š¾Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr "proxy_max_children (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -6009,7 +6089,7 @@ msgstr ""
"ŠæŠ¾ŃŃ‚Š°Š½Š¾Š²ŠŗŠø Š·Š°ŠæрŠ¾ŃŠ¾Š² Š² Š¾Ń‡ŠµŃ€ŠµŠ“ь."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -6018,12 +6098,12 @@ msgstr ""
"<placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr "Š”Š¾Š¼ŠµŠ½Ń‹ ŠæрŠøŠ»Š¾Š¶ŠµŠ½ŠøŠ¹"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -6052,7 +6132,7 @@ msgstr ""
"трŠ°Š“ŠøцŠøŠ¾Š½Š½Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Š° SSSD."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -6063,17 +6143,17 @@ msgstr ""
"ŠæŠ¾Ń€ŃŠ“Š¾Šŗ ŠæŠ¾ŠøсŠŗŠ° Š“Š»Ń Š“Š¾Š¼ŠµŠ½Š° ŠæрŠøŠ»Š¾Š¶ŠµŠ½ŠøŠ¹ Šø ŠµŠ³Š¾ рŠ¾Š“стŠ²ŠµŠ½Š½Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Š° POSIX."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr "ŠŸŠ°Ń€Š°Š¼ŠµŃ‚ры Š“Š¾Š¼ŠµŠ½Š¾Š² ŠæрŠøŠ»Š¾Š¶ŠµŠ½ŠøŠ¹"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr "inherit_from (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -6086,7 +6166,7 @@ msgstr ""
"<quote>рŠ¾Š“стŠ²ŠµŠ½Š½Š¾Š³Š¾</quote> Š“Š¾Š¼ŠµŠ½Š°."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -6101,7 +6181,7 @@ msgstr ""
"Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚ phone Š“Š¾ŃŃ‚ŃƒŠæŠ½Ń‹Š¼ чŠµŃ€ŠµŠ· ŠøŠ½Ń‚ŠµŃ€Ń„ŠµŠ¹Ń D-Bus."
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6135,12 +6215,12 @@ msgstr ""
"ldap_user_extra_attrs = phone:telephoneNumber\n"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr "Š ŠŠ—Š”Š•Š› Š”ŠžŠ’Š•Š Š•ŠŠŠ«Š„ Š”ŠžŠœŠ•ŠŠžŠ’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -6158,57 +6238,57 @@ msgstr ""
"ŠæŠ¾Š“Š“ŠµŃ€Š¶ŠøŠ²Š°ŃŽŃ‚ся сŠ»ŠµŠ“ующŠøŠµ ŠæŠ°Ń€Š°Š¼ŠµŃ‚ры:"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr "ldap_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr "ldap_user_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr "ldap_group_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr "ldap_netgroup_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr "ldap_service_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr "ldap_sasl_mech,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr "ad_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr "ad_backup_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr "ad_site,"
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr "use_fully_qualified_names"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
@@ -6217,12 +6297,12 @@ msgstr ""
"сŠæрŠ°Š²Š¾Ń‡Š½Š¾Š¹ стрŠ°Š½ŠøцŠµ."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr "Š ŠŠ—Š”Š•Š› Š”ŠžŠŸŠžŠ”Š¢ŠŠ’Š›Š•ŠŠ˜ŠÆ Š”Š•Š Š¢Š˜Š¤Š˜ŠšŠŠ¢ŠžŠ’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -6245,7 +6325,7 @@ msgstr ""
"ŠæрŠ¾Š²ŠµŃ€ŠŗŠø ŠæŠ¾Š“Š»ŠøŠ½Š½Š¾ŃŃ‚Šø."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -6256,7 +6336,7 @@ msgstr ""
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>)."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -6269,12 +6349,12 @@ msgstr ""
"replaceable>]</quote>. Š’ этŠ¾Š¼ рŠ°Š·Š“ŠµŠ»Šµ Š“Š¾ŠæустŠøŠ¼Ń‹ сŠ»ŠµŠ“ующŠøŠµ ŠæŠ°Ń€Š°Š¼ŠµŃ‚ры:"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr "matchrule (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
@@ -6283,7 +6363,7 @@ msgstr ""
"сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‚ этŠ¾Š¼Ńƒ ŠæрŠ°Š²ŠøŠ»Ńƒ. Š’сŠµ Š¾ŃŃ‚Š°Š»ŃŒŠ½Ń‹Šµ Š±ŃƒŠ“ут ŠøŠ³Š½Š¾Ń€ŠøрŠ¾Š²Š°Ń‚ŃŒŃŃ."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
@@ -6293,17 +6373,17 @@ msgstr ""
"<quote>clientAuth</quote>"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr "maprule (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr "ŠžŠæрŠµŠ“ŠµŠ»ŃŠµŃ‚ сŠæŠ¾ŃŠ¾Š± ŠæŠ¾ŠøсŠŗŠ° ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń Š“Š»Ń уŠŗŠ°Š·Š°Š½Š½Š¾Š³Š¾ сŠµŃ€Ń‚ŠøфŠøŠŗŠ°Ń‚Š°."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
@@ -6313,7 +6393,7 @@ msgstr ""
"quote>."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
@@ -6322,12 +6402,12 @@ msgstr ""
"ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń с тŠ°ŠŗŠøŠ¼ Š¶Šµ ŠøŠ¼ŠµŠ½ŠµŠ¼."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr "domains (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -6340,17 +6420,17 @@ msgstr ""
"ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Š° Š¼Š¾Š¶Š½Š¾ Š“Š¾Š±Š°Š²Šøть ŠæрŠ°Š²ŠøŠ»Š¾ тŠ°ŠŗŠ¶Šµ Šø Š² ŠæŠ¾Š“Š“Š¾Š¼ŠµŠ½Ń‹."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: Š½Š°ŃŃ‚Ń€Š¾ŠµŠ½Š½Ń‹Š¹ Š“Š¾Š¼ŠµŠ½ Š² sssd.conf"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr "priority (цŠµŠ»Š¾Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -6361,12 +6441,12 @@ msgstr ""
"ŠæрŠøŠ¾Ń€ŠøтŠµŃ‚, Š° <quote>4294967295</quote> ā€” сŠ°Š¼Ń‹Š¹ Š½ŠøŠ·ŠŗŠøŠ¹."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: сŠ°Š¼Ń‹Š¹ Š½ŠøŠ·ŠŗŠøŠ¹ ŠæрŠøŠ¾Ń€ŠøтŠµŃ‚"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
@@ -6376,7 +6456,7 @@ msgstr ""
"сŠ²Š¾Š¹ŃŃ‚Š²Š°:"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
@@ -6385,7 +6465,7 @@ msgstr ""
"RULE_NAME"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -6398,17 +6478,17 @@ msgstr ""
"<quote>({subject_rfc822_name.short_name})</quote>"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr "ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ <quote>domains</quote> ŠøŠ³Š½Š¾Ń€ŠøруŠµŃ‚ся"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr "Š ŠŠ—Š”Š•Š› ŠŠŠ”Š¢Š ŠžŠ™ŠšŠ˜ Š—ŠŠŸŠ ŠžŠ”ŠžŠ’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -6423,7 +6503,7 @@ msgstr ""
"Š·Š°ŠæрŠ¾ŃŠøт у ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠµ учётŠ½Ń‹Šµ Š“Š°Š½Š½Ń‹Šµ."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -6436,22 +6516,22 @@ msgstr ""
"Š”Š»ŠµŠ“ующŠøŠµ ŠæŠ°Ń€Š°Š¼ŠµŃ‚ры Š¾Š±ŠµŃŠæŠµŃ‡ŠøŠ²Š°ŃŽŃ‚ Š±Š¾Š»ŠµŠµ Š³ŠøŠ±Šŗую Š½Š°ŃŃ‚Ń€Š¾Š¹Šŗу."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr "password_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr "ŠøŠ·Š¼ŠµŠ½Šøть стрŠ¾Šŗу Š·Š°ŠæрŠ¾ŃŠ° ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -6460,37 +6540,37 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr "[prompting/2fa]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr "ŠøŠ·Š¼ŠµŠ½Šøть стрŠ¾Šŗу Š·Š°ŠæрŠ¾ŃŠ° ŠæŠµŃ€Š²Š¾Š³Š¾ фŠ°ŠŗтŠ¾Ń€Š°"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr "second_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr "ŠøŠ·Š¼ŠµŠ½Šøть стрŠ¾Šŗу Š·Š°ŠæрŠ¾ŃŠ° Š²Ń‚Š¾Ń€Š¾Š³Š¾ фŠ°ŠŗтŠ¾Ń€Š°"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr "single_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -6503,7 +6583,7 @@ msgstr ""
"фŠ°ŠŗтŠ¾Ń€Š°, Š“Š°Š¶Šµ ŠµŃŠ»Šø Š²Ń‚Š¾Ń€Š¾Š¹ фŠ°ŠŗтŠ¾Ń€ яŠ²Š»ŃŠµŃ‚ся Š½ŠµŠ¾Š±ŃŠ·Š°Ń‚ŠµŠ»ŃŒŠ½Ń‹Š¼."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -6516,19 +6596,19 @@ msgstr ""
"ŠæŠ°Ń€Š¾Š»ŃŒ, Š»ŠøŠ±Š¾ Š¾Š±Š° фŠ°ŠŗтŠ¾Ń€Š°, сŠ»ŠµŠ“уŠµŃ‚ ŠøсŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŃŒ Š“Š²ŃƒŃ…ŃŃ‚Š°ŠæŠ½Ń‹Š¹ Š·Š°ŠæрŠ¾Ń."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
#, fuzzy
#| msgid "[prompting/password]"
msgid "[prompting/passkey]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -6536,47 +6616,47 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
#, fuzzy
#| msgid "interactive"
msgid "interactive_prompt"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the interactive prompt."
msgstr "ŠøŠ·Š¼ŠµŠ½Šøть стрŠ¾Šŗу Š·Š°ŠæрŠ¾ŃŠ° ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
#, fuzzy
#| msgid "first_prompt"
msgid "touch_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the touch prompt."
msgstr "ŠøŠ·Š¼ŠµŠ½Šøть стрŠ¾Šŗу Š·Š°ŠæрŠ¾ŃŠ° ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "to configure password prompting, allowed options are: <placeholder "
@@ -6589,7 +6669,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
#, fuzzy
#| msgid ""
#| "Each supported authentication method has its own configuration subsection "
@@ -6608,7 +6688,7 @@ msgstr ""
"<placeholder type=\"variablelist\" id=\"1\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -6619,12 +6699,12 @@ msgstr ""
"ŠŗŠ¾Š½ŠŗрŠµŃ‚Š½Š¾ Š“Š»Ń этŠ¾Š¹ сŠ»ŃƒŠ¶Š±Ń‹."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr "ŠŸŠ Š˜ŠœŠ•Š Š«"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6678,7 +6758,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -6690,7 +6770,7 @@ msgstr ""
"Š“Š¾ŠŗуŠ¼ŠµŠ½Ń‚Š°Ń†ŠøŠø. <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -6700,7 +6780,7 @@ msgstr ""
"use_fully_qualified_names = false\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -6717,7 +6797,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, fuzzy, no-wrap
#| msgid ""
#| "[certmap/my.domain/rule_name]\n"
@@ -6745,7 +6825,7 @@ msgstr ""
"matchrule = &lt;ISSUER&gt;^CN=My-CA,DC=MY,DC=DOMAIN$&lt;SUBJECT&gt;^CN=User.Name,DC=MY,DC=DOMAIN$\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
#, fuzzy
#| msgid ""
#| "3. The following example shows the configuration for two certificate "
@@ -7055,16 +7135,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -12933,9 +13003,9 @@ msgstr "Š˜Š¼Ń Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š°, Š² ŠŗŠ¾Ń‚Š¾Ń€Š¾Š¼ хрŠ°Š½Šøтся ŠøŠ¼Ń ŠæрŠ
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: cn"
@@ -19698,7 +19768,7 @@ msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ“ŠµŠ½Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Ń€Ńƒ Š¾ŃŠ½Š¾Š²Š½Š¾Š¹ Š³Ń€ŃƒŠæŠæы ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: gidNumber"
@@ -19780,7 +19850,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт UUID/GUID Š¾Š±ŃŠŠµŠŗтŠ° ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -19803,7 +19873,7 @@ msgstr ""
"трŠµŠ±ŃƒŠµŃ‚ся тŠ¾Š»ŃŒŠŗŠ¾ Š“Š»Ń сŠµŃ€Š²ŠµŃ€Š¾Š² Active Directory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
"ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: objectSid Š“Š»Ń Active Directory, Š½Šµ Š·Š°Š“Š°Š½Š¾ Š“Š»Ń Š“руŠ³Šøх сŠµŃ€Š²ŠµŃ€Š¾Š²."
@@ -19814,8 +19884,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -19824,8 +19894,8 @@ msgstr ""
"рŠ¾Š“ŠøтŠµŠ»ŃŒŃŠŗŠ¾Š³Š¾ Š¾Š±ŃŠŠµŠŗтŠ°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: modifyTimestamp"
@@ -20216,7 +20286,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт Š¾Ń‚ŠŗрытыŠµ ŠŗŠ»ŃŽŃ‡Šø SSH ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sshPublicKey"
@@ -20242,7 +20312,7 @@ msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP сŠ¾ сŠæŠøсŠŗŠ¾Š¼ Š³Ń€ŃƒŠæŠæ, учŠ°ŃŃ‚Š½ŠøŠŗŠ¾Š¼ ŠŗŠ¾Ń‚Š¾Ń€Ń‹Ń… яŠ²Š»ŃŠµŃ‚ся ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»ŃŒ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: memberOf"
@@ -20412,12 +20482,20 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap-attributes.5.xml:626
+#, fuzzy
+#| msgid ""
+#| "Note: If an email address of a user conflicts with an email address or "
+#| "fully qualified name of another user, then SSSD will not be able to serve "
+#| "those users properly. If for some reason several users need to share the "
+#| "same email address then set this option to a nonexistent attribute name "
+#| "in order to disable user lookup/login by email."
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
"ŠŸŃ€ŠøŠ¼ŠµŃ‡Š°Š½ŠøŠµ: ŠµŃŠ»Šø Š°Š“рŠµŃ эŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Š¹ ŠæŠ¾Ń‡Ń‚Ń‹ ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń ŠŗŠ¾Š½Ń„Š»ŠøŠŗтуŠµŃ‚ с Š°Š“рŠµŃŠ¾Š¼ "
"эŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Š¹ ŠæŠ¾Ń‡Ń‚Ń‹ ŠøŠ»Šø ŠæŠ¾Š»Š½Ń‹Š¼ ŠøŠ¼ŠµŠ½ŠµŠ¼ Š“руŠ³Š¾Š³Š¾ ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń, SSSD Š½Šµ уŠ“Š°ŃŃ‚ся "
@@ -20428,19 +20506,19 @@ msgstr ""
"эŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Š¹ ŠæŠ¾Ń‡Ń‚Šµ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "Name of the LDAP attribute containing the email address of the user."
msgid ""
@@ -20449,37 +20527,37 @@ msgstr ""
"Š˜Š¼Ń Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š° LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт Š°Š“рŠµŃ эŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Š¹ ŠæŠ¾Ń‡Ń‚Ń‹ ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« Š“Š Š£ŠŸŠŸŠ«"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø Š³Ń€ŃƒŠæŠæы Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -20488,52 +20566,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: cn (rfc2307, rfc2307bis Šø IPA), sAMAccountName (AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ“ŠµŠ½Ń‚ŠøфŠøŠŗŠ°Ń‚Š¾Ń€Ńƒ Š³Ń€ŃƒŠæŠæы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠøŠ¼ŠµŠ½Š° учŠ°ŃŃ‚Š½ŠøŠŗŠ¾Š² Š³Ń€ŃƒŠæŠæы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт UUID/GUID Š¾Š±ŃŠŠµŠŗтŠ° Š³Ń€ŃƒŠæŠæы LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -20542,17 +20620,17 @@ msgstr ""
"трŠµŠ±ŃƒŠµŃ‚ся тŠ¾Š»ŃŒŠŗŠ¾ Š“Š»Ń сŠµŃ€Š²ŠµŃ€Š¾Š² Active Directory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr "ldap_group_type (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -20561,7 +20639,7 @@ msgstr ""
"Š²Š¾Š·Š¼Š¾Š¶Š½Š¾, Š“руŠ³ŠøŠµ фŠ»Š°Š³Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -20572,18 +20650,18 @@ msgstr ""
"Š»Šø Š±Ń‹Ń‚ŃŒ Š¾Ń‚Ń„ŠøŠ»ŃŒŃ‚Ń€Š¾Š²Š°Š½Š° Š“Š»Ń Š“Š¾Š²ŠµŃ€ŠµŠ½Š½Ń‹Ń… Š“Š¾Š¼ŠµŠ½Š¾Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
"ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: groupType Š“Š»Ń ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠ° Š“Š°Š½Š½Ń‹Ń… AD, Š² ŠøŠ½Š¾Š¼ сŠ»ŃƒŃ‡Š°Šµ Š½Šµ Š·Š°Š“Š°Š½Š¾"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr "ldap_group_external_member (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
@@ -20593,80 +20671,80 @@ msgstr ""
"IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
"ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipaExternalMember Š“Š»Ń ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠ° Š“Š°Š½Š½Ń‹Ń… IPA, Š² ŠøŠ½Š¾Š¼ сŠ»ŃƒŃ‡Š°Šµ Š½Šµ "
"Š·Š°Š“Š°Š½Š¾."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« Š”Š•Š¢Š•Š’ŠžŠ™ Š“Š Š£ŠŸŠŸŠ«"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø сŠµŃ‚ŠµŠ²Š¾Š¹ Š³Ń€ŃƒŠæŠæы Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
"Š’ ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠµ Š“Š°Š½Š½Ń‹Ń… IPA сŠ»ŠµŠ“уŠµŃ‚ ŠøсŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŃŒ ipa_netgroup_object_class."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ¼ŠµŠ½Šø сŠµŃ‚ŠµŠ²Š¾Š¹ Š³Ń€ŃƒŠæŠæы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr "Š’ ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠµ Š“Š°Š½Š½Ń‹Ń… IPA сŠ»ŠµŠ“уŠµŃ‚ ŠøсŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŃŒ ipa_netgroup_name."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠøŠ¼ŠµŠ½Š° учŠ°ŃŃ‚Š½ŠøŠŗŠ¾Š² сŠµŃ‚ŠµŠ²Š¾Š¹ Š³Ń€ŃƒŠæŠæы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr "Š’ ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠµ Š“Š°Š½Š½Ń‹Ń… IPA сŠ»ŠµŠ“уŠµŃ‚ ŠøсŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŃŒ ipa_netgroup_member."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
@@ -20674,217 +20752,217 @@ msgstr ""
"Š³Ń€ŃƒŠæŠæ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Š­Ń‚Š¾Ń‚ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ Š½ŠµŠ“Š¾ŃŃ‚ŃƒŠæŠµŠ½ Š² ŠæŠ¾ŃŃ‚Š°Š²Ń‰ŠøŠŗŠµ Š“Š°Š½Š½Ń‹Ń… IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« Š£Š—Š›Š"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr "ldap_host_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø уŠ·Š»Š° Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr "ldap_host_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ¼ŠµŠ½Šø уŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr "ldap_host_fqdn (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠæŠ¾Š»Š½Š¾Š¼Ńƒ Š“Š¾Š¼ŠµŠ½Š½Š¾Š¼Ńƒ ŠøŠ¼ŠµŠ½Šø уŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: fqdn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr "ldap_host_serverhostname (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: serverHostname"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr "ldap_host_member_of (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP сŠ¾ сŠæŠøсŠŗŠ¾Š¼ Š³Ń€ŃƒŠæŠæ, учŠ°ŃŃ‚Š½ŠøŠŗŠ¾Š¼ ŠŗŠ¾Ń‚Š¾Ń€Ń‹Ń… яŠ²Š»ŃŠµŃ‚ся уŠ·ŠµŠ»."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr "ldap_host_ssh_public_key (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт Š¾Ń‚ŠŗрытыŠµ ŠŗŠ»ŃŽŃ‡Šø SSH уŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr "ldap_host_uuid (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт UUID/GUID Š¾Š±ŃŠŠµŠŗтŠ° уŠ·Š»Š° LDAP."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« Š”Š›Š£Š–Š‘Š«"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø сŠ»ŃƒŠ¶Š±Ń‹ Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠøŠ¼Ń Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š¾Š² сŠ»ŃƒŠ¶Š±Ń‹ Šø Šøх ŠæсŠµŠ²Š“Š¾Š½ŠøŠ¼Ń‹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠæŠ¾Ń€Ń‚, уŠæрŠ°Š²Š»ŃŠµŠ¼Ń‹Š¹ этŠ¾Š¹ сŠ»ŃƒŠ¶Š±Š¾Š¹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠæрŠ¾Ń‚Š¾ŠŗŠ¾Š»Ń‹, ŠæŠ¾Š“Š“ŠµŃ€Š¶ŠøŠ²Š°ŠµŠ¼Ń‹Šµ этŠ¾Š¹ сŠ»ŃƒŠ¶Š±Š¾Š¹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« SUDO"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø ŠæрŠ°Š²ŠøŠ»Š° sudo Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ¼ŠµŠ½Šø ŠæрŠ°Š²ŠøŠ»Š° sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠøŠ¼ŠµŠ½Šø ŠŗŠ¾Š¼Š°Š½Š“ы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -20893,17 +20971,17 @@ msgstr ""
"ŠøŠ»Šø сŠµŃ‚ŠµŠ²Š¾Š¹ Š³Ń€ŃƒŠæŠæŠµ уŠ·Š»Š°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -20912,32 +20990,32 @@ msgstr ""
"сŠµŃ‚ŠµŠ²Š¾Š¹ Š³Ń€ŃƒŠæŠæŠµ ŠæŠ¾Š»ŃŒŠ·Š¾Š²Š°Ń‚ŠµŠ»Ń)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Š°Š¼ SUDO."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -20946,17 +21024,17 @@ msgstr ""
"Š²Ń‹ŠæŠ¾Š»Š½ŃŃ‚ŃŒŃŃ ŠŗŠ¾Š¼Š°Š½Š“ы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -20965,17 +21043,17 @@ msgstr ""
"Š¼Š¾Š³ŃƒŃ‚ Š²Ń‹ŠæŠ¾Š»Š½ŃŃ‚ŃŒŃŃ ŠŗŠ¾Š¼Š°Š½Š“ы."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -20983,17 +21061,17 @@ msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ Š“Š°Ń‚Šµ Šø Š²Ń€ŠµŠ¼ŠµŠ½Šø Š½Š°Ń‡Š°Š»Š° Š“ŠµŠ¹ŃŃ‚Š²Šøя ŠæрŠ°Š²ŠøŠ»Š° SUDO."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -21002,121 +21080,121 @@ msgstr ""
"ŠæрŠ°Š²ŠøŠ»Š° sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, сŠ¾Š¾Ń‚Š²ŠµŃ‚стŠ²ŃƒŃŽŃ‰ŠøŠ¹ ŠæŠ¾Ń€ŃŠ“ŠŗŠ¾Š²Š¾Š¼Ńƒ Š½Š¾Š¼ŠµŃ€Ńƒ ŠæрŠ°Š²ŠøŠ»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« AUTOFS"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« IP-Š£Š—Š›Š"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr "ldap_iphost_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø IP-уŠ·Š»Š° Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr "ldap_iphost_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠøŠ¼Ń Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š¾Š² IP-уŠ·Š»Š° Šø Šøх ŠæсŠµŠ²Š“Š¾Š½ŠøŠ¼Ń‹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr "ldap_iphost_number (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт Š°Š“рŠµŃ IP-уŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipHostNumber"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š« IP-Š”Š•Š¢Š˜"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr "ldap_ipnetwork_object_class (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr "ŠšŠ»Š°ŃŃ Š¾Š±ŃŠŠµŠŗтŠ¾Š² Š·Š°ŠæŠøсŠø IP-сŠµŃ‚Šø Š² LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipNetwork"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr "ldap_ipnetwork_name (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт ŠøŠ¼Ń Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š¾Š² IP-сŠµŃ‚Šø Šø Šøх ŠæсŠµŠ²Š“Š¾Š½ŠøŠ¼Ń‹."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr "ldap_ipnetwork_number (стрŠ¾ŠŗŠ°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, ŠŗŠ¾Ń‚Š¾Ń€Ń‹Š¹ сŠ¾Š“ŠµŃ€Š¶Šøт Š°Š“рŠµŃ IP-сŠµŃ‚Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr "ŠŸŠ¾ уŠ¼Š¾Š»Ń‡Š°Š½Šøю: ipNetworkNumber"
diff --git a/src/man/po/sv.po b/src/man/po/sv.po
index ff51320..6cf5f78 100644
--- a/src/man/po/sv.po
+++ b/src/man/po/sv.po
@@ -6,7 +6,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2023-02-15 14:20+0000\n"
"Last-Translator: Gƶran Uddeborg <goeran@uddeborg.se>\n"
"Language-Team: Swedish <https://translate.fedoraproject.org/projects/sssd/"
@@ -267,7 +267,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -315,10 +315,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -346,7 +346,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Standard: 10"
@@ -749,7 +749,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -1098,7 +1098,7 @@ msgstr ""
"anvƤndarnamn kan ƶverlappa mellan domƤner."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Standard: inte satt"
@@ -2335,7 +2335,7 @@ msgstr ""
"<emphasis>pwd_expiration_warning</emphasis> fƶr en viss domƤn."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Standard: 0"
@@ -2411,7 +2411,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Standard: none"
@@ -2486,13 +2486,11 @@ msgstr "pam_cert_auth (bool)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Standard: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Standard: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2504,6 +2502,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Standard: False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2531,7 +2537,7 @@ msgid "The path to the certificate database."
msgstr "SƶkvƤgen till certifikatdatabasen."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr "Standard:"
@@ -2624,7 +2630,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+#, fuzzy
+#| msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr "pam_p11_allowed_services (heltal)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2852,7 +2860,7 @@ msgid "Default: no_session"
msgstr "Standard: no_session"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr "pam_gssapi_services"
@@ -2895,7 +2903,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "Exempel: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2905,7 +2913,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr "Standard: - (GSSAPI-autentisering Ƥr avaktiverat)"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr "pam_gssapi_check_upn"
@@ -2929,12 +2937,6 @@ msgstr ""
"Om falskt kommer varje anvƤndare som kan fƄ den begƤrda biljetten att "
"autentiseras."
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Standard: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3724,8 +3726,9 @@ msgstr "Standard: Tom. Inga grupper uteslutna."
msgid "DOMAIN SECTIONS"
msgstr "DOMƄNSEKTIONER"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr "aktiverat"
@@ -4472,7 +4475,7 @@ msgstr ""
"innehƄller mƄnga medlemmar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -5277,46 +5280,73 @@ msgstr "Standard: anvƤnd domƤndelen av maskinens vƤrdnamn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "p11_wait_for_card_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "p11_wait_for_card_timeout (heltal)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3:1"
+msgid "Default: 31"
+msgstr "Standard: 3:1"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (heltal)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "ErsƤtt det primƤra GID-vƤrdet med det angivna."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr "SkiftlƤgeskƤnsligt. Detta vƤrde Ƥr inte giltigt fƶr AD-leverantƶrer."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr "SkiftlƤgesokƤnsligt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr "Preserving"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -5327,7 +5357,7 @@ msgstr ""
"tjƤnster Ƥven protokollnamn) fortfarande skiftas ner i utdata."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
@@ -5336,7 +5366,7 @@ msgstr ""
"du sƤtta det pƄ bƄde klienten och SSSD pƄ servern."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -5345,17 +5375,17 @@ msgstr ""
"vƤrdena pƄ alternativen Ƥr: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr "Standard: True (False fƶr AD-leverantƶren)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -5366,47 +5396,47 @@ msgstr ""
"fƶljande alternativ Ƥrvas:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr "ldap_offline_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
@@ -5415,57 +5445,57 @@ msgstr ""
"ldap_krb5_keytab sƤtts sƤrskilt)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr "auto_private_groups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr "case_sensitive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -5475,28 +5505,28 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
"Observera: detta alternativ fungerar endast med leverantƶrerna IPA och AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "platt (NetBIOS) namn pƄ en underdomƤn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -5511,36 +5541,36 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
"VƤrdet kan ƄsidosƤttas av alternativet <emphasis>override_homedir</emphasis>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Standard: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
"Diverse taggar lagrade av realmd-konfigurationstjƤnsten fƶr denna domƤn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr "cached_auth_timeout (heltal)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5553,7 +5583,7 @@ msgstr ""
"uppkopplad autentisering."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
@@ -5562,12 +5592,12 @@ msgstr ""
"inte mƶjligt att ange olika vƤrden fƶr varje betrodd domƤn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr "SpecialvƤrdet 0 betyder att denna funktion Ƥr avaktiverad."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5578,25 +5608,26 @@ msgstr ""
"<quote>initgroups.</quote>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5608,7 +5639,56 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (strƤng)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+#, fuzzy
+#| msgid "gdm-smartcard"
+msgid "Smartcard"
+msgstr "gdm-smartcard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+#, fuzzy
+#| msgid "enabled"
+msgid "disabled"
+msgstr "aktiverat"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5617,7 +5697,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5628,7 +5708,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
#, fuzzy
#| msgid ""
#| "The following example creates a container named 'mycontainer': "
@@ -5642,31 +5722,31 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: mail"
msgid "Default: match"
msgstr "Standard: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr "auto_private_groups (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr "true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
@@ -5675,7 +5755,7 @@ msgstr ""
"GID-numret ignoreras i detta lƤge."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5688,12 +5768,12 @@ msgstr ""
"framtvingar unika nummer ƶver hela ID-rymden."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr "false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
@@ -5702,12 +5782,12 @@ msgstr ""
"ett gruppobjekt i LDAP-databasen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr "hybrid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5722,7 +5802,7 @@ msgstr ""
"upp till det gruppobjektet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
@@ -5731,7 +5811,7 @@ msgstr ""
"kan GID:t helt enkelt inte slƄs upp."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5742,7 +5822,7 @@ msgstr ""
"befintliga anvƤndarnas privata grupper."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -5751,7 +5831,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
@@ -5761,7 +5841,7 @@ msgstr ""
"ƶversƤttning."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5771,7 +5851,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5783,7 +5863,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5808,17 +5888,17 @@ msgstr ""
"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "ProxymƄlet PAM Ƥr en proxy fƶr."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5832,12 +5912,12 @@ msgstr ""
"eller skapa en ny och lƤgga till tjƤnstenamnet hƤr."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5848,12 +5928,12 @@ msgstr ""
"exempel _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr "proxy_resolver_lib_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5864,12 +5944,12 @@ msgstr ""
"_nss_$(libName)_$(function), till exempel _nss_dns_gethostbyname2_r."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (boolean)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -5882,12 +5962,12 @@ msgstr ""
"SSSD att utfƶra ID-uppslagningen frƄn cachen av prestandaskƤl."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr "proxy_max_children (heltal)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -5899,7 +5979,7 @@ msgstr ""
"begƤranden skulle kƶas upp."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -5908,12 +5988,12 @@ msgstr ""
"id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr "ProgramdomƤner"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -5942,7 +6022,7 @@ msgstr ""
"traditionell SSSD-domƤn."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -5953,17 +6033,17 @@ msgstr ""
"programdomƤnen och dess POSIX-syskondomƤn sƤtts korrekt."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr "ProgramdomƤnparametrar"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr "inherit_from (strƤng)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -5976,7 +6056,7 @@ msgstr ""
"quote>domƤnens instƤllningar."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -5991,7 +6071,7 @@ msgstr ""
"attributet telefon nƄbart via D-Bus-grƤnssnittet."
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6025,12 +6105,12 @@ msgstr ""
"ldap_user_extra_attrs = telefon:telephoneNumber\n"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr "SEKTIONEN BETRODDA DOMƄNER"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -6047,57 +6127,57 @@ msgstr ""
"alternativ i sektionen fƶr betrodda domƤner Ƥr:"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr "ldap_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr "ldap_user_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr "ldap_group_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr "ldap_netgroup_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr "ldap_service_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr "ldap_sasl_mech,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr "ad_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr "ad_backup_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr "ad_site,"
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr "use_fully_qualified_names"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
@@ -6106,12 +6186,12 @@ msgstr ""
"manualsidan."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr "CERTIFIKATSMAPPNINGSSEKTION"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -6133,7 +6213,7 @@ msgstr ""
"fallet nƤr lokala tjƤnster anvƤnder PAM fƶr autentisering."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -6145,7 +6225,7 @@ msgstr ""
"detaljer)."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -6158,12 +6238,12 @@ msgstr ""
"replaceable>]</quote>. I denna sektion Ƥr fƶljande alternativ tillƄtna:"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr "matchrule (strƤng)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
@@ -6172,7 +6252,7 @@ msgstr ""
"alla andra ignoreras."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
@@ -6181,17 +6261,17 @@ msgstr ""
"Extended Key Usage <quote>clientAuth</quote>"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr "maprule (strƤng)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr "Definierar hur anvƤndaren hittas fƶr ett givet certifikat."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
@@ -6200,7 +6280,7 @@ msgstr ""
"<quote>ldap</quote>, <quote>AD</quote> eller <quote>ipa</quote>."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
@@ -6209,12 +6289,12 @@ msgstr ""
"anvƤndare med samma namn."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr "domains (strƤng)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -6227,17 +6307,17 @@ msgstr ""
"lƤgga till regeln till underdomƤner ocksƄ."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr "Standard: den konfigurerade domƤnen i sssd.conf"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr "priority (heltal)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -6248,12 +6328,12 @@ msgstr ""
"prioriteten medan <quote>4294967295</quote> Ƥr den lƤgsta."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr "Standard: den lƤgsta prioriteten"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
@@ -6263,7 +6343,7 @@ msgstr ""
"speciella egenskaper:"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
@@ -6272,7 +6352,7 @@ msgstr ""
"anvƤndaren"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -6285,17 +6365,17 @@ msgstr ""
"short_name})</quote>"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr "alternativet <quote>domains</quote> ignoreras"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr "SEKTIONEN FƖR FRƅGEKONFIGURATION"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -6310,7 +6390,7 @@ msgstr ""
"tillƤmpliga kreditiv."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -6323,22 +6403,22 @@ msgstr ""
"anvƤndarfall. Fƶljande alternativ bƶr ge en bƤttre flexibilitet hƤr."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr "password_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr "fƶr att Ƥndra strƤngen i lƶsenordsfrƄgan"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -6347,37 +6427,37 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr "[prompting/2fa]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr "fƶr att Ƥndra strƤngen som frƄgar efter den fƶrsta faktorn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr "second_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr "fƶr att Ƥndra strƤngen som frƄgar efter den andra faktorn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr "single_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -6390,7 +6470,7 @@ msgstr ""
"faktorn Ƥr frivillig."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -6403,19 +6483,19 @@ msgstr ""
"med lƶsenordet eller med bƄda faktorerna mƄste tvƄstegsfƶrfrƄgan anvƤndas."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
#, fuzzy
#| msgid "[prompting/password]"
msgid "[prompting/passkey]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -6423,47 +6503,47 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
#, fuzzy
#| msgid "interactive"
msgid "interactive_prompt"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the interactive prompt."
msgstr "fƶr att Ƥndra strƤngen i lƶsenordsfrƄgan"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
#, fuzzy
#| msgid "first_prompt"
msgid "touch_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the touch prompt."
msgstr "fƶr att Ƥndra strƤngen i lƶsenordsfrƄgan"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "to configure two-factor authentication prompting, allowed options are: "
@@ -6476,7 +6556,7 @@ msgstr ""
"alternativen: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
#, fuzzy
#| msgid ""
#| "Each supported authentication method has its own configuration subsection "
@@ -6495,7 +6575,7 @@ msgstr ""
">"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -6506,12 +6586,12 @@ msgstr ""
"enskilt fƶr denna tjƤnst."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr "EXEMPEL"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6565,7 +6645,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -6577,7 +6657,7 @@ msgstr ""
"domƤner fƶr fler detaljer. <placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -6587,7 +6667,7 @@ msgstr ""
"use_fully_qualified_names = false\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -6603,7 +6683,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, fuzzy, no-wrap
#| msgid ""
#| "[certmap/my.domain/rule_name]\n"
@@ -6631,7 +6711,7 @@ msgstr ""
"matchrule = &lt;ISSUER&gt;^CN=My-CA,DC=MIN,DC=DOMƄN$&lt;SUBJECT&gt;^CN=User.Name,DC=MIN,DC=DOMƄN$\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
#, fuzzy
#| msgid ""
#| "3. The following example shows the configuration for two certificate "
@@ -6932,16 +7012,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -12688,9 +12758,9 @@ msgstr "Namn pƄ attributet som har namnet pƄ vyn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Standard: cn"
@@ -19343,7 +19413,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr "LDAP-attributet som motsvarar anvƤndarens primƤra grupp-id."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Standard: gidNumber"
@@ -19424,7 +19494,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr "LDAP-attributet som innehƄller UUID/GUID fƶr ett LDAP-anvƤndarobjekt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -19447,7 +19517,7 @@ msgstr ""
"Ƥr normalt bara nƶdvƤndigt fƶr Active Directory-servrar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr "Standard: objectSid fƶr Active Directory, inte satt fƶr andra servrar."
@@ -19457,8 +19527,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -19467,8 +19537,8 @@ msgstr ""
"fƶrƤldraobjektet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Standard: modifyTimestamp"
@@ -19858,7 +19928,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "LDAP-attributet som innehƄller anvƤndarens publika SSH-nycklar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "Standard: sshPublicKey"
@@ -19883,7 +19953,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr "LDAP-attributet som rƤknar upp anvƤndarens gruppmedlemskap."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Standard: memberOf"
@@ -20051,12 +20121,20 @@ msgstr "Namnet pƄ LDAP-attributet som innehƄller anvƤndarens e-postadress."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap-attributes.5.xml:626
+#, fuzzy
+#| msgid ""
+#| "Note: If an email address of a user conflicts with an email address or "
+#| "fully qualified name of another user, then SSSD will not be able to serve "
+#| "those users properly. If for some reason several users need to share the "
+#| "same email address then set this option to a nonexistent attribute name "
+#| "in order to disable user lookup/login by email."
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
"Observera: om en e-postadress fƶr anvƤndaren stƄr i konflikt med en e-"
"postadress eller fullt kvalificerat namn fƶr en annan anvƤndare, dƄ kommer "
@@ -20066,19 +20144,19 @@ msgstr ""
"via e-post."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr "Standard: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "Name of the LDAP attribute containing the email address of the user."
msgid ""
@@ -20086,37 +20164,37 @@ msgid ""
msgstr "Namnet pƄ LDAP-attributet som innehƄller anvƤndarens e-postadress."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr "GRUPPATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "Objektklassen hos en gruppost i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Standard: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -20125,52 +20203,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr "Standard: cn (rfc2307, rfc2307bis och IPA), sAMAccountName (AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "LDAP-attributet som motsvarar gruppens id."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "LDAP-attributet som innehƄller namnen pƄ gruppens medlemmar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Standard: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr "LDAP-attributet som innehƄller UUID/GUID fƶr ett LDAP-gruppobjekt."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -20179,17 +20257,17 @@ msgstr ""
"normalt bara nƶdvƤndigt fƶr Active Directory-servrar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr "ldap_group_type (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -20198,7 +20276,7 @@ msgstr ""
"kanske andra flaggor."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -20209,17 +20287,17 @@ msgstr ""
"domƤner."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr "Standard: groupType i AD-leverantƶren, inte satt annars"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr "ldap_group_external_member (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
@@ -20228,134 +20306,134 @@ msgstr ""
"domƤn. Fƶr nƤrvarande stƶdjs endast IPA:s externa medlemmar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr "Standard: ipaExternalMember i IPA-leverantƶren, inte satt annars."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr "NƄTGRUPPSATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "Objektklassen hos en nƤtgruppspost i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr "I IPA-leverantƶren skall ipa_netgroup_object_class anvƤndas istƤllet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Standard: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "LDAP-attributet som motsvarar nƤtgruppnamnet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr "I IPA-leverantƶren skall ipa_netgroup_name anvƤndas istƤllet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr "LDAP-attributet som innehƄller namnen pƄ nƤtgruppens medlemmar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr "I IPA-leverantƶren skall ipa_netgroup_member anvƤndas istƤllet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Standard: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
"LDAP-attributet som innehƄller nƤtgrupptrippeln (vƤrd, anvƤndare, domƤn)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Detta alternativ Ƥr inte tillgƤngligt i IPA-leverantƶren."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Standard: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (strƤng)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr "VƄRDATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr "ldap_host_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "Objektklassen hos en vƤrdpost i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Standard: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr "ldap_host_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr "LDAP-attributet som motsvarar vƤrdens namn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr "ldap_host_fqdn (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
@@ -20363,72 +20441,72 @@ msgstr ""
"LDAP-attributet som motsvarar vƤrdens fullstƤndigt kvalificerade domƤnnamn."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr "Standard: fqdn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr "ldap_host_serverhostname (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr "Standard: serverHostname"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr "ldap_host_member_of (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr "LDAP-attributet som rƤknar upp vƤrdens gruppmedlemskap."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr "ldap_host_ssh_public_key (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "LDAP-attributet som innehƄller vƤrdens publika SSH-nycklar."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr "ldap_host_uuid (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr "LDAP-attributet som innehƄller UUID/GUID fƶr ett LDAP-vƤrdobjekt."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr "TJƄNSTEATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "Objektklassen hos en servicepost i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
@@ -20436,88 +20514,88 @@ msgstr ""
"LDAP-attributet som innehƄller namnet pƄ tjƤnsteattribut och deras alias."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "LDAP-attributet som innehƄller porten som hanteras av denna tjƤnst."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Standard: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr "LDAP-attributet som innehƄller protokollen som denna tjƤnst fƶrstƄr."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Standard: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr "SUDO-ATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "Objektklassen hos en sudo-regelpost i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Standard: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "LDAP-attributet som motsvarar sudo-regelnamnet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "LDAP-attributet som motsvarar kommandonamnet."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Standard: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -20526,17 +20604,17 @@ msgstr ""
"IP-nƤtverk eller vƤrdens nƤtgrupp)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Standard: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -20545,32 +20623,32 @@ msgstr ""
"anvƤndarens nƤtgrupp)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Standard: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "LDAP-attributet som motsvarar sudo-alternativen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Standard: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -20578,17 +20656,17 @@ msgstr ""
"LDAP-attributet som motsvarar anvƤndarnamnet som kommandon fƄr kƶras som."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Standard: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -20597,17 +20675,17 @@ msgstr ""
"fƄr kƶras som."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Standard: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -20615,17 +20693,17 @@ msgstr ""
"LDAP-attributet som motsvarar startdagen/-tiden dƄ sudo-regeln Ƥr giltig."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Standard: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
@@ -20634,57 +20712,57 @@ msgstr ""
"Ƥr giltig."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Standard: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "LDAP-attributet som motsvarar ordningsindexet fƶr regeln."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Standard: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr "AUTOFS-ATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr "IP-VƄRDATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr "ldap_iphost_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr "Objektklassen fƶr en iphost-post i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr "Standard: ipHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr "ldap_iphost_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
@@ -20692,47 +20770,47 @@ msgstr ""
"LDAP-attributet som innehƄller namnet pƄ IP-vƤrdattributen och deras alias."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr "ldap_iphost_number (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr "LDAP-attributet som innehƄller IP-vƤrdadressen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr "Standard: ipHostNumber"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr "IP-NƄTVERKSATTRIBUT"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr "ldap_ipnetwork_object_class (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr "Objektklassen fƶr en ipnetwork-post i LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr "Standard: ipNetwork"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr "ldap_ipnetwork_name (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
@@ -20741,17 +20819,17 @@ msgstr ""
"alias."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr "ldap_ipnetwork_number (strƤng)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr "LDAP-attributet som innehƄller IP-nƤtverksadressen."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr "Standard: ipNetworkNumber"
diff --git a/src/man/po/tg.po b/src/man/po/tg.po
index e4dc18d..33a758c 100644
--- a/src/man/po/tg.po
+++ b/src/man/po/tg.po
@@ -7,7 +7,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2014-12-15 12:10-0500\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Tajik (http://www.transifex.com/projects/p/sssd/language/"
@@ -226,7 +226,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -267,10 +267,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -295,7 +295,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "ŠŸŠµŃˆŃ„Š°Ń€Š·: 10"
@@ -603,7 +603,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -872,7 +872,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1893,7 +1893,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "ŠŸŠµŃˆŃ„Š°Ń€Š·: 0"
@@ -1956,7 +1956,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2018,12 +2018,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2036,6 +2034,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2060,7 +2066,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2136,7 +2142,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2326,7 +2332,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2360,7 +2366,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2370,7 +2376,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2389,12 +2395,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3027,8 +3027,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3623,7 +3624,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4258,46 +4259,71 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
-msgid "override_gid (integer)"
+msgid "failover_primary_timeout (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "ŠŸŠµŃˆŃ„Š°Ń€Š·: 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4305,31 +4331,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4337,104 +4363,104 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4442,27 +4468,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4472,34 +4498,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4508,19 +4534,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4528,23 +4554,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
msgid "local_auth_policy (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4556,7 +4583,50 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+msgid "local_auth_policy = match (default)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4565,7 +4635,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4576,7 +4646,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4584,38 +4654,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 3"
msgid "Default: match"
msgstr "ŠŸŠµŃˆŃ„Š°Ń€Š·: 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4624,24 +4694,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4651,14 +4721,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4666,21 +4736,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4688,7 +4758,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4697,7 +4767,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4714,17 +4784,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4732,12 +4802,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4745,12 +4815,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4758,12 +4828,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4772,12 +4842,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4785,19 +4855,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4814,7 +4884,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4822,17 +4892,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4841,7 +4911,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4851,7 +4921,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4871,12 +4941,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4887,69 +4957,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4962,7 +5032,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -4970,7 +5040,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -4979,55 +5049,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5036,17 +5106,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5054,26 +5124,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5082,17 +5152,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5102,7 +5172,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5111,59 +5181,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5172,7 +5242,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5181,17 +5251,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5199,46 +5269,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5247,7 +5317,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5255,12 +5325,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5290,7 +5360,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5299,7 +5369,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5307,7 +5377,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5318,7 +5388,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5329,7 +5399,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5558,16 +5628,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10197,9 +10257,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15407,7 +15467,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15485,7 +15545,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15504,7 +15564,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15514,16 +15574,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15855,7 +15915,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15880,7 +15940,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16022,59 +16082,60 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
msgid "ldap_user_passkey (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16083,76 +16144,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16160,531 +16221,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""
diff --git a/src/man/po/uk.po b/src/man/po/uk.po
index d771cc8..b9b7a80 100644
--- a/src/man/po/uk.po
+++ b/src/man/po/uk.po
@@ -15,7 +15,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2022-12-13 18:20+0000\n"
"Last-Translator: Yuri Chornoivan <yurchor@ukr.net>\n"
"Language-Team: Ukrainian <https://translate.fedoraproject.org/projects/sssd/"
@@ -284,7 +284,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -333,10 +333,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -365,7 +365,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: 10"
@@ -777,7 +777,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -1133,7 +1133,7 @@ msgstr ""
"ріŠ·Š½Šøх Š“Š¾Š¼ŠµŠ½Š°Ń… Š¼Š¾Š¶ŃƒŃ‚ŃŒ Š±ŃƒŃ‚Šø Š¾Š“Š½Š°ŠŗŠ¾Š²ŠøŠ¼Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: Š½Šµ Š²ŃŃ‚Š°Š½Š¾Š²Š»ŠµŠ½Š¾"
@@ -2400,7 +2400,7 @@ msgstr ""
"<emphasis>pwd_expiration_warning</emphasis> Š“Š»Ń Š¾ŠŗрŠµŠ¼Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Ńƒ."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: 0"
@@ -2478,7 +2478,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: none"
@@ -2553,13 +2553,11 @@ msgstr "pam_cert_auth (Š±ŃƒŠ»ŠµŠ²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń)"
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
-msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
+msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: True"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1692
@@ -2571,6 +2569,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: False"
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2598,7 +2604,7 @@ msgid "The path to the certificate database."
msgstr "ŠØŠ»ŃŃ… Š“Š¾ Š±Š°Š·Šø Š“Š°Š½Šøх сŠµŃ€Ń‚ŠøфіŠŗŠ°Ń‚Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń:"
@@ -2696,7 +2702,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+#, fuzzy
+#| msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr "pam_p11_allowed_services (ціŠ»Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2928,7 +2936,7 @@ msgid "Default: no_session"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: no_session"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr "pam_gssapi_services"
@@ -2972,7 +2980,7 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr "ŠŸŃ€ŠøŠŗŠ»Š°Š“: <placeholder type=\"programlisting\" id=\"0\"/>"
@@ -2982,7 +2990,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: - (рŠ¾Š·ŠæіŠ·Š½Š°Š²Š°Š½Š½Ń Š·Š° GSSAPI Š²ŠøŠ¼ŠŗŠ½ŠµŠ½Š¾)"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr "pam_gssapi_check_upn"
@@ -3007,12 +3015,6 @@ msgstr ""
"ŠÆŠŗщŠ¾ Š¼Š°Ń” Š·Š½Š°Ń‡ŠµŠ½Š½Ń False, рŠ¾Š·ŠæіŠ·Š½Š°Š½ŠøŠ¼Šø Š²Š²Š°Š¶Š°Ń‚ŠøŠ¼ŃƒŃ‚ŃŒŃŃ усі ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Ń–, яŠŗі "
"Š·Š¼Š¾Š¶ŃƒŃ‚ŃŒ Š¾Ń‚Ń€ŠøŠ¼Š°Ń‚Šø Š±Š°Š¶Š°Š½ŠøŠ¹ ŠŗŠ²ŠøтŠ¾Šŗ сŠ»ŃƒŠ¶Š±Šø."
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: True"
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3816,8 +3818,9 @@ msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ŠæŠ¾Ń€Š¾Š¶Š½Ń”. ŠŠµ Š²ŠøŠŗŠ»ŃŽŃ‡Š°Ń‚Šø Š
msgid "DOMAIN SECTIONS"
msgstr "Š ŠžŠ—Š”Š†Š›Š˜ Š”ŠžŠœŠ•ŠŠ†Š’"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr "enabled"
@@ -4572,7 +4575,7 @@ msgstr ""
"учŠ°ŃŠ½ŠøŠŗіŠ²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -5398,47 +5401,74 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
+#, fuzzy
+#| msgid "p11_wait_for_card_timeout (integer)"
+msgid "failover_primary_timeout (integer)"
+msgstr "p11_wait_for_card_timeout (ціŠ»Šµ чŠøсŠ»Š¾)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3:1"
+msgid "Default: 31"
+msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: 3:1"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
msgid "override_gid (integer)"
msgstr "override_gid (ціŠ»Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3780
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr "Š—Š°Š¼Ń–Ń€ŠøтŠø Š·Š½Š°Ń‡ŠµŠ½Š½Ń Š¾ŃŠ½Š¾Š²Š½Š¾Š³Š¾ GID Š½Š° Š²ŠŗŠ°Š·Š°Š½Šµ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr "case_sensitive (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr "True"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
"Š’Ń€Š°Ń…Š¾Š²ŃƒŃ”Ń‚ŃŒŃŃ рŠµŠ³Ń–стр. Š¦Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń є Š½ŠµŠŗŠ¾Ń€ŠµŠŗтŠ½ŠøŠ¼ Š“Š»Ń Š·Š°ŃŠ¾Š±Ńƒ Š½Š°Š“Š°Š½Š½Ń Š“Š°Š½Šøх AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr "False"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr "Š‘ŠµŠ· Š²Ń€Š°Ń…ŃƒŠ²Š°Š½Š½Ń рŠµŠ³Ń–ŃŃ‚Ń€Ńƒ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr "Preserving"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -5450,7 +5480,7 @@ msgstr ""
"Š±ŃƒŠ“Šµ ŠæŠµŃ€ŠµŠ²ŠµŠ“ŠµŠ½Š¾ у Š½ŠøŠ¶Š½Ń–Š¹ рŠµŠ³Ń–стр."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
@@ -5459,7 +5489,7 @@ msgstr ""
"Š“Š°Š½Šøх IPA, Š²Š°Š¼ Š“Š¾Š²ŠµŠ“ŠµŃ‚ŃŒŃŃ Š²ŃŃ‚Š°Š½Š¾Š²ŠøтŠø Š¹Š¾Š³Š¾ Š½Š° Š±Š¾Ń†Ń– ŠŗŠ»Ń–Ń”Š½Ń‚Š° і SSSD Š½Š° сŠµŃ€Š²ŠµŃ€Ń–."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
@@ -5468,17 +5498,17 @@ msgstr ""
"Š·Š½Š°Ń‡ŠµŠ½Š½Ń: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: True (False Š“Š»Ń Š·Š°ŃŠ¾Š±Ńƒ Š½Š°Š“Š°Š½Š½Ń Š“Š°Š½Šøх AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr "subdomain_inherit (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -5490,47 +5520,47 @@ msgstr ""
"ŠæŠ°Ń€Š°Š¼ŠµŃ‚ріŠ²:"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr "ldap_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr "ldap_network_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr "ldap_opt_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr "ldap_offline_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr "ldap_enumeration_refresh_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr "ldap_enumeration_refresh_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr "ldap_purge_cache_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr "ldap_purge_cache_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
@@ -5539,57 +5569,57 @@ msgstr ""
"ldap_krb5_keytab Š½Šµ Š²ŃŃ‚Š°Š½Š¾Š²Š»ŠµŠ½Š¾ яŠ²Š½ŠøŠ¼ чŠøŠ½Š¾Š¼)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr "ldap_krb5_ticket_lifetime"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr "ldap_enumeration_search_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr "ldap_connection_expire_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr "ldap_connection_expire_offset"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr "ldap_connection_idle_timeout"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr "ldap_use_tokengroups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr "ldap_user_principal"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr "ignore_group_members"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr "auto_private_groups"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr "case_sensitive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -5599,28 +5629,28 @@ msgstr ""
" "
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
"Š—Š°ŃƒŠ²Š°Š¶ŠµŠ½Š½Ń: цŠµŠ¹ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ ŠæрŠ°Ń†ŃŽŃ” Š»ŠøшŠµ Š“Š»Ń Š·Š°ŃŠ¾Š±Ń–Š² Š½Š°Š“Š°Š½Š½Ń Š“Š°Š½Šøх IPA і AD."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr "subdomain_homedir (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr "%F"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr "сŠæрŠ¾Ń‰ŠµŠ½Š° (NetBIOS) Š½Š°Š·Š²Š° ŠæіŠ“Š“Š¾Š¼ŠµŠ½Ńƒ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -5635,7 +5665,7 @@ msgstr ""
"emphasis>. <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
@@ -5643,17 +5673,17 @@ msgstr ""
"emphasis>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: <filename>/home/%d/%u</filename>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr "realmd_tags (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
@@ -5661,12 +5691,12 @@ msgstr ""
"Š“Š¾Š¼ŠµŠ½Ńƒ."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr "cached_auth_timeout (ціŠ»Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -5680,7 +5710,7 @@ msgstr ""
"рŠ¾Š·ŠæіŠ·Š½Š°Š²Š°Š½Š½Ń."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
@@ -5690,12 +5720,12 @@ msgstr ""
"Š·Š½Š°Ń‡ŠµŠ½Š½Ń Š“Š»Ń ріŠ·Š½Šøх Š“Š¾Š²Ń–Ń€ŠµŠ½Šøх Š“Š¾Š¼ŠµŠ½Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr "Š”ŠæŠµŃ†Ń–Š°Š»ŃŒŠ½Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń 0 Š¾Š·Š½Š°Ń‡Š°Ń”, щŠ¾ цю Š¼Š¾Š¶Š»ŠøŠ²Ń–ŃŃ‚ŃŒ Š²ŠøŠ¼ŠŗŠ½ŠµŠ½Š¾."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -5706,25 +5736,26 @@ msgstr ""
"Š¾Š±Ń€Š¾Š±ŠŗŠø <quote>initgroups</quote>."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
#, fuzzy
#| msgid "ldap_pwd_policy (string)"
msgid "local_auth_policy (string)"
msgstr "ldap_pwd_policy (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -5736,7 +5767,56 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+#, fuzzy
+#| msgid "ldap_pwd_policy (string)"
+msgid "local_auth_policy = match (default)"
+msgstr "ldap_pwd_policy (ряŠ“Š¾Šŗ)"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+#, fuzzy
+#| msgid "gdm-smartcard"
+msgid "Smartcard"
+msgstr "gdm-smartcard"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr "IPA"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr "AD"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+#, fuzzy
+#| msgid "enabled"
+msgid "disabled"
+msgstr "enabled"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -5745,7 +5825,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -5756,7 +5836,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
#, fuzzy
#| msgid ""
#| "The following example creates a container named 'mycontainer': "
@@ -5770,31 +5850,31 @@ msgstr ""
"<placeholder type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: mail"
msgid "Default: match"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr "auto_private_groups (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr "true"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
@@ -5803,7 +5883,7 @@ msgstr ""
"ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°. Š£ цьŠ¾Š¼Ńƒ Š²ŠøŠæŠ°Š“Šŗу Š½Š¾Š¼ŠµŃ€ GID Š±ŃƒŠ“Šµ ŠæрŠ¾Ń–Š³Š½Š¾Ń€Š¾Š²Š°Š½Š¾."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -5816,12 +5896,12 @@ msgstr ""
"ŠæрŠøŠ¼ŃƒŃŠ¾Š²Š¾ Š²ŃŃ‚Š°Š½Š¾Š²Š»ŃŽŃ” уŠ½Ń–ŠŗŠ°Š»ŃŒŠ½Ń–ŃŃ‚ŃŒ Š·Š°ŠæŠøсіŠ² у ŠæрŠ¾ŃŃ‚Š¾Ń€Ń– іŠ“ŠµŠ½Ń‚ŠøфіŠŗŠ°Ń‚Š¾Ń€Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr "false"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
@@ -5830,12 +5910,12 @@ msgstr ""
"Š²ŠŗŠ°Š·ŃƒŠ²Š°Ń‚Šø Š½Š° Š¾Š±'єŠŗт Š³Ń€ŃƒŠæŠø у Š±Š°Š·Ń– Š“Š°Š½Šøх LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr "hybrid"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -5850,7 +5930,7 @@ msgstr ""
"цьŠ¾Š³Š¾ ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š° Š²ŠøŠ·Š½Š°Ń‡Š°Ń‚ŠøŠ¼Šµ цŠµŠ¹ Š¾Š±'єŠŗт Š³Ń€ŃƒŠæŠø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
@@ -5859,7 +5939,7 @@ msgstr ""
"Š³Ń€ŃƒŠæŠø, іŠ½Š°ŠŗшŠµ Š½Š°Š“іŠ¹Š½Šµ Š²ŠøŠ·Š½Š°Ń‡ŠµŠ½Š½Ń GID Š±ŃƒŠ“Šµ ŠæрŠ¾ŃŃ‚Š¾ Š½ŠµŠ¼Š¾Š¶Š»ŠøŠ²ŠøŠ¼."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -5870,7 +5950,7 @@ msgstr ""
"Š·Š±ŠµŃ€ŠµŠ¶ŠµŠ½Š½ŃŠ¼ Š½Š°ŃŠ²Š½Šøх ŠæрŠøŠ²Š°Ń‚Š½Šøх Š³Ń€ŃƒŠæ Š“Š»Ń ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -5879,7 +5959,7 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
@@ -5889,7 +5969,7 @@ msgstr ""
"Š²ŠøŠŗŠ¾Ń€ŠøстŠ¾Š²ŃƒŃ”Ń‚ŃŒŃŃ Š°Š²Ń‚Š¾Š¼Š°Ń‚ŠøчŠ½Š° ŠæрŠøŠ²'яŠ·ŠŗŠ° Š“Š¾ іŠ“ŠµŠ½Ń‚ŠøфіŠŗŠ°Ń‚Š¾Ń€Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -5899,7 +5979,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -5911,7 +5991,7 @@ msgstr ""
"auto_private_groups = false\n"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -5936,17 +6016,17 @@ msgstr ""
"quote> <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr "proxy_pam_target (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr "ŠšŠ¾Š¼Šæā€™ŃŽŃ‚ŠµŃ€, Š“Š»Ń яŠŗŠ¾Š³Š¾ Š²ŠøŠŗŠ¾Š½ŃƒŃ” ŠæрŠ¾Šŗсі-сŠµŃ€Š²ŠµŃ€ PAM."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
#, fuzzy
#| msgid ""
#| "Default: not set by default, you have to take an existing pam "
@@ -5960,12 +6040,12 @@ msgstr ""
"Š½Š°Š»Š°ŃˆŃ‚ŃƒŠ²Š°Š½Š½ŃŠ¼Šø pam Š°Š±Š¾ стŠ²Š¾Ń€ŠøтŠø Š½Š¾Š²Ń– і тут Š“Š¾Š“Š°Ń‚Šø Š½Š°Š·Š²Ńƒ сŠ»ŃƒŠ¶Š±Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr "proxy_lib_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -5976,12 +6056,12 @@ msgstr ""
"Š½Š°ŠæрŠøŠŗŠ»Š°Š“ _nss_files_getpwent."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr "proxy_resolver_lib_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -5992,12 +6072,12 @@ msgstr ""
"_nss_$(Š½Š°Š·Š²Š°_Š±Ń–Š±Š»Ń–Š¾Ń‚ŠµŠŗŠø)_$(фуŠ½Šŗція), Š½Š°ŠæрŠøŠŗŠ»Š°Š“ _nss_dns_gethostbyname2_r."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr "proxy_fast_alias (Š±ŃƒŠ»ŠµŠ²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -6012,12 +6092,12 @@ msgstr ""
"у ŠŗŠµŃˆŃ–, щŠ¾Š± ŠæрŠøшŠ²ŠøŠ“шŠøтŠø Š½Š°Š“Š°Š½Š½Ń рŠµŠ·ŃƒŠ»ŃŒŃ‚Š°Ń‚Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr "proxy_max_children (ціŠ»Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -6029,7 +6109,7 @@ msgstr ""
"Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Š½Š½Ń чŠµŃ€Š³Šø Š·Š°ŠæŠøтіŠ²."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
@@ -6038,12 +6118,12 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr "Š”Š¾Š¼ŠµŠ½Šø ŠæрŠ¾Š³Ń€Š°Š¼ (application)"
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -6071,7 +6151,7 @@ msgstr ""
"яŠŗŠøŠ¹ Š¼Š¾Š¶Šµ усŠæŠ°Š“ŠŗŠ¾Š²ŃƒŠ²Š°Ń‚Šø ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ Š· трŠ°Š“ŠøціŠ¹Š½Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Ńƒ SSSD."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -6082,17 +6162,17 @@ msgstr ""
"Š¹Š¾Š³Š¾ Š“Š¾Š¼ŠµŠ½Š¾Š¼-Š±Š»ŠøŠ·Š½ŃŽŠŗŠ¾Š¼ у POSIX Š¼Š°Ń” Š±ŃƒŃ‚Šø Š²ŃŃ‚Š°Š½Š¾Š²Š»ŠµŠ½Š¾ Š½Š°Š»ŠµŠ¶Š½ŠøŠ¼ чŠøŠ½Š¾Š¼."
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr "ŠŸŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø Š“Š¾Š¼ŠµŠ½Ń–Š² ŠæрŠ¾Š³Ń€Š°Š¼"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr "inherit_from (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -6104,7 +6184,7 @@ msgstr ""
"рŠ¾Š·ŃˆŠøрюють Š°Š±Š¾ ŠæŠµŃ€ŠµŠ²ŠøŠ·Š½Š°Ń‡Š°ŃŽŃ‚ŃŒ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø Š“Š¾Š¼ŠµŠ½Ńƒ-<quote>Š±Š»ŠøŠ·Š½ŃŽŠŗŠ°</quote>."
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -6119,7 +6199,7 @@ msgstr ""
"у ŠŗŠµŃˆŃ– і рŠ¾Š±Šøть Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚ phone Š“Š¾ŃŃ‚ŃƒŠæŠ½ŠøŠ¼ чŠµŃ€ŠµŠ· іŠ½Ń‚ŠµŃ€Ń„ŠµŠ¹Ń D-Bus."
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6153,12 +6233,12 @@ msgstr ""
"ldap_user_extra_attrs = phone:telephoneNumber\n"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr "Š ŠžŠ—Š”Š†Š› Š”ŠžŠ’Š†Š Š•ŠŠ˜Š„ Š”ŠžŠœŠ•ŠŠ†Š’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -6176,57 +6256,57 @@ msgstr ""
"тŠ°Šŗі ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø:"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr "ldap_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr "ldap_user_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr "ldap_group_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr "ldap_netgroup_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr "ldap_service_search_base,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr "ldap_sasl_mech,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr "ad_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr "ad_backup_server,"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr "ad_site,"
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr "use_fully_qualified_names"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
@@ -6235,12 +6315,12 @@ msgstr ""
"ŠæіŠ“ручŠ½ŠøŠŗŠ°."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr "Š ŠžŠ—Š”Š†Š› ŠŸŠ Š˜Š’'ŠÆŠ—ŠšŠ˜ Š”Š•Š Š¢Š˜Š¤Š†ŠšŠŠ¢Š†Š’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -6263,7 +6343,7 @@ msgstr ""
"Š²ŠøŠŗŠ¾Ń€ŠøстŠ¾Š²ŃƒŃŽŃ‚ŃŒ Š“Š»Ń рŠ¾Š·ŠæіŠ·Š½Š°Š²Š°Š½Š½Ń PAM."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -6275,7 +6355,7 @@ msgstr ""
"citerefentry>)."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -6288,12 +6368,12 @@ msgstr ""
"replaceable>]</quote>. Š£ цьŠ¾Š¼Ńƒ рŠ¾Š·Š“іŠ»Ń– Š¼Š¾Š¶Š½Š° Š²ŠøŠŗŠ¾Ń€ŠøстŠ¾Š²ŃƒŠ²Š°Ń‚Šø тŠ°Šŗі ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø:"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr "matchrule (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
@@ -6302,7 +6382,7 @@ msgstr ""
"цьŠ¾Š¼Ńƒ ŠæрŠ°Š²ŠøŠ»Ńƒ. Š£ŃŃ– іŠ½ŃˆŃ– сŠµŃ€Ń‚ŠøфіŠŗŠ°Ń‚Šø Š±ŃƒŠ“Šµ ŠæрŠ¾Ń–Š³Š½Š¾Ń€Š¾Š²Š°Š½Š¾."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
@@ -6312,17 +6392,17 @@ msgstr ""
"<quote>clientAuth</quote>"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr "maprule (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr "Š’ŠøŠ·Š½Š°Ń‡Š°Ń” сŠæŠ¾ŃŃ–Š± ŠæŠ¾ŃˆŃƒŠŗу ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š° Š“Š»Ń Š²ŠŗŠ°Š·Š°Š½Š¾Š³Š¾ сŠµŃ€Ń‚ŠøфіŠŗŠ°Ń‚Š°."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
@@ -6331,7 +6411,7 @@ msgstr ""
"Š“Š°Š½Šøх, Š·Š¾ŠŗрŠµŠ¼Š° <quote>ldap</quote>, <quote>AD</quote> тŠ° <quote>ipa</quote>."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
@@ -6340,12 +6420,12 @@ msgstr ""
"Š·Š°ŠæŠøс ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š° і тŠ°ŠŗŠ¾ŃŽ сŠ°Š¼Š¾ŃŽ Š½Š°Š·Š²Š¾ŃŽ."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr "domains (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -6358,17 +6438,17 @@ msgstr ""
"ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ Š¼Š¾Š¶Š½Š° Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Ń‚Šø і Š“Š»Ń Š“Š¾Š“Š°Š²Š°Š½Š½Ń ŠæрŠ°Š²ŠøŠ»Š° Š“Š¾ ŠæіŠ“Š“Š¾Š¼ŠµŠ½Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: Š“Š¾Š¼ŠµŠ½, яŠŗŠøŠ¹ Š½Š°Š»Š°ŃˆŃ‚Š¾Š²Š°Š½Š¾ у sssd.conf"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr "priority (ціŠ»Šµ чŠøсŠ»Š¾)"
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -6379,12 +6459,12 @@ msgstr ""
"ŠæріŠ¾Ń€ŠøтŠµŃ‚Š½Ń–ŃŃ‚ŃŒ, Š° <quote>4294967295</quote> ā€” Š½Š°Š¹Š½ŠøŠ¶Ń‡Š°."
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: Š½Š°Š¹Š½ŠøŠ¶Ń‡Š° ŠæріŠ¾Ń€ŠøтŠµŃ‚Š½Ń–ŃŃ‚ŃŒ"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
@@ -6394,7 +6474,7 @@ msgstr ""
"сŠæŠµŃ†Ń–Š°Š»ŃŒŠ½Šøх Š²Š»Š°ŃŃ‚ŠøŠ²Š¾ŃŃ‚ŠµŠ¹:"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
@@ -6403,7 +6483,7 @@ msgstr ""
"Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š½Š¾Š³Š¾ Š¾Š±Š»Ń–ŠŗŠ¾Š²Š¾Š³Š¾ Š·Š°ŠæŠøсу ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -6416,17 +6496,17 @@ msgstr ""
"quote> Š°Š±Š¾ <quote>({Š½Š°Š·Š²Š°_Š¾Š±'єŠŗтŠ°_rfc822.ŠŗŠ¾Ń€Š¾Ń‚ŠŗŠ°_Š½Š°Š·Š²Š°})</quote>"
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr "ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€ <quote>domains</quote> Š±ŃƒŠ“Šµ ŠæрŠ¾Ń–Š³Š½Š¾Ń€Š¾Š²Š°Š½Š¾"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr "Š ŠžŠ—Š”Š†Š› ŠŠŠ›ŠŠØŠ¢ŠžŠ’Š£Š’ŠŠŠŠÆ Š—ŠŠŸŠ˜Š¢Š†Š’"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -6442,7 +6522,7 @@ msgstr ""
"рŠµŃ”стрŠ°Ń†Ń–Š¹Š½Šøх Š“Š°Š½Šøх."
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -6456,22 +6536,22 @@ msgstr ""
"Š²ŠøŠæŠ°Š“ŠŗŠ°Ń… Š¼Š°ŃŽŃ‚ŃŒ Š·Š°Š±ŠµŠ·ŠæŠµŃ‡ŠøтŠø Š¾ŠæŠøсŠ°Š½Ń– Š½ŠøŠ¶Ń‡Šµ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr "password_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr "Š“Š»Ń Š·Š¼Ń–Š½Šø ряŠ“ŠŗŠ° Š·Š°ŠæŠøту ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
@@ -6480,37 +6560,37 @@ msgstr ""
"type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr "[prompting/2fa]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr "Š“Š»Ń Š·Š¼Ń–Š½Šø ряŠ“ŠŗŠ° Š·Š°ŠæŠøту Š“Š»Ń ŠæŠµŃ€ŃˆŠ¾Š³Š¾ фŠ°ŠŗтŠ¾Ń€Š°"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr "second_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr "Š“Š»Ń Š·Š¼Ń–Š½Šø ряŠ“ŠŗŠ° Š·Š°ŠæŠøту Š“Š»Ń Š“руŠ³Š¾Š³Š¾ фŠ°ŠŗтŠ¾Ń€Š°"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr "single_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -6523,7 +6603,7 @@ msgstr ""
"яŠŗщŠ¾ Š“руŠ³ŠøŠ¹ фŠ°ŠŗтŠ¾Ń€ Š½Šµ є Š¾Š±Š¾Š²'яŠ·ŠŗŠ¾Š²ŠøŠ¼."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -6536,19 +6616,19 @@ msgstr ""
"ŠæŠ°Ń€Š¾Š»ŠµŠ¼, Š°Š±Š¾ Š·Š° Š“Š²Š¾Š¼Š° фŠ°ŠŗтŠ¾Ń€Š°Š¼Šø, Š¼Š°Ń” Š±ŃƒŃ‚Šø Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Š½Š¾ Š“Š²Š¾ŠŗрŠ¾ŠŗŠ¾Š²ŠøŠ¹ Š·Š°ŠæŠøт."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
#, fuzzy
#| msgid "[prompting/password]"
msgid "[prompting/passkey]"
msgstr "[prompting/password]"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -6556,47 +6636,47 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
#, fuzzy
#| msgid "interactive"
msgid "interactive_prompt"
msgstr "interactive"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the interactive prompt."
msgstr "Š“Š»Ń Š·Š¼Ń–Š½Šø ряŠ“ŠŗŠ° Š·Š°ŠæŠøту ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
#, fuzzy
#| msgid "first_prompt"
msgid "touch_prompt"
msgstr "first_prompt"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
#, fuzzy
#| msgid "to change the string of the password prompt"
msgid "to change the message of the touch prompt."
msgstr "Š“Š»Ń Š·Š¼Ń–Š½Šø ряŠ“ŠŗŠ° Š·Š°ŠæŠøту ŠæŠ°Ń€Š¾Š»Ń"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
#, fuzzy
#| msgid ""
#| "to configure two-factor authentication prompting, allowed options are: "
@@ -6609,7 +6689,7 @@ msgstr ""
"ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Šø: <placeholder type=\"variablelist\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
#, fuzzy
#| msgid ""
#| "Each supported authentication method has its own configuration subsection "
@@ -6628,7 +6708,7 @@ msgstr ""
"type=\"variablelist\" id=\"1\"/>"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -6639,12 +6719,12 @@ msgstr ""
"Š“Š»Ń цієї сŠ»ŃƒŠ¶Š±Šø."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr "ŠŸŠ Š˜ŠšŠ›ŠŠ”Š˜"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -6698,7 +6778,7 @@ msgstr ""
"enumerate = False\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -6711,7 +6791,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -6721,7 +6801,7 @@ msgstr ""
"use_fully_qualified_names = false\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -6738,7 +6818,7 @@ msgstr ""
"type=\"programlisting\" id=\"0\"/>"
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, fuzzy, no-wrap
#| msgid ""
#| "[certmap/my.domain/rule_name]\n"
@@ -6766,7 +6846,7 @@ msgstr ""
"matchrule = &lt;ISSUER&gt;^CN=My-CA,DC=MY,DC=DOMAIN$&lt;SUBJECT&gt;^CN=User.Name,DC=MY,DC=DOMAIN$\n"
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
#, fuzzy
#| msgid ""
#| "3. The following example shows the configuration for two certificate "
@@ -7074,16 +7154,6 @@ msgstr "rfc2307"
msgid "rfc2307bis"
msgstr "rfc2307bis"
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr "IPA"
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr "AD"
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -12947,9 +13017,9 @@ msgstr "ŠŠ°Š·Š²Š° Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š°, у яŠŗŠ¾Š¼Ńƒ Š·Š±ŠµŃ€Ń–Š³Š°Ń”Ń‚ŃŒŃŃ Š½Š°
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: cn"
@@ -19729,7 +19799,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” іŠ“ŠµŠ½Ń‚ŠøфіŠŗŠ°Ń‚Š¾Ń€Ńƒ Š¾ŃŠ½Š¾Š²Š½Š¾Ń— Š³Ń€ŃƒŠæŠø ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: gidNumber"
@@ -19812,7 +19882,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть UUID/GUID Š¾Š±ā€™Ń”ŠŗтŠ° ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š° LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -19835,7 +19905,7 @@ msgstr ""
"ŠæŠ¾Ń‚ріŠ±ŠµŠ½ Š»ŠøшŠµ Š“Š»Ń сŠµŃ€Š²ŠµŃ€Ń–Š² ActiveDirectory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
"Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: objectSid Š“Š»Ń ActiveDirectory, Š½Šµ Š²ŃŃ‚Š°Š½Š¾Š²Š»ŠµŠ½Š¾ Š“Š»Ń іŠ½ŃˆŠøх "
@@ -19847,8 +19917,8 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr "ldap_user_modify_timestamp (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
@@ -19857,8 +19927,8 @@ msgstr ""
"Š¾Š±ā€™Ń”ŠŗтŠ°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: modifyTimestamp"
@@ -20247,7 +20317,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, яŠŗŠøŠ¹ Š¼Ń–стŠøть Š²Ń–Š“ŠŗрŠøті ŠŗŠ»ŃŽŃ‡Ń– SSH ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sshPublicKey"
@@ -20272,7 +20342,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP Š·Ń– сŠæŠøсŠŗŠ¾Š¼ Š³Ń€ŃƒŠæ, у яŠŗŠøх Š±ŠµŃ€Šµ учŠ°ŃŃ‚ŃŒ ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: memberOf"
@@ -20440,12 +20510,20 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap-attributes.5.xml:626
+#, fuzzy
+#| msgid ""
+#| "Note: If an email address of a user conflicts with an email address or "
+#| "fully qualified name of another user, then SSSD will not be able to serve "
+#| "those users properly. If for some reason several users need to share the "
+#| "same email address then set this option to a nonexistent attribute name "
+#| "in order to disable user lookup/login by email."
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
"Š—Š°ŃƒŠ²Š°Š¶ŠµŠ½Š½Ń: яŠŗщŠ¾ Š°Š“рŠµŃŠ° ŠµŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Ń— ŠæŠ¾ŃˆŃ‚Šø ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š° ŠŗŠ¾Š½Ń„Š»Ń–Šŗтує іŠ· Š°Š“рŠµŃŠ¾ŃŽ "
"ŠµŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Ń— ŠæŠ¾ŃˆŃ‚Šø Š°Š±Š¾ ŠæŠ¾Š²Š½ŠøŠ¼ іŠ¼'яŠ¼ іŠ½ŃˆŠ¾Š³Š¾ ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°, SSSD Š½Šµ Š·Š¼Š¾Š¶Šµ "
@@ -20455,19 +20533,19 @@ msgstr ""
"Š²Ń…Ń–Š“ Š“Š¾ сŠøстŠµŠ¼Šø Š·Š° Š°Š“рŠµŃŠ¾ŃŽ ŠµŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Ń— ŠæŠ¾ŃˆŃ‚Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: mail"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
#, fuzzy
#| msgid "ldap_user_name (string)"
msgid "ldap_user_passkey (string)"
msgstr "ldap_user_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
#, fuzzy
#| msgid "Name of the LDAP attribute containing the email address of the user."
msgid ""
@@ -20476,37 +20554,37 @@ msgstr ""
"ŠŠ°Š·Š²Š° Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Š° LDAP, яŠŗŠøŠ¹ Š¼Ń–стŠøть Š°Š“рŠµŃŃƒ ŠµŠ»ŠµŠŗтрŠ¾Š½Š½Š¾Ń— ŠæŠ¾ŃˆŃ‚Šø ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ Š“Š Š£ŠŸŠ˜"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr "ldap_group_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±ā€™Ń”ŠŗтіŠ² Š·Š°ŠæŠøсу Š³Ń€ŃƒŠæŠø у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: posixGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr "ldap_group_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -20515,52 +20593,52 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: cn (rfc2307, rfc2307bis і IPA), sAMAccountName (AD)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr "ldap_group_gid_number (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” іŠ“ŠµŠ½Ń‚ŠøфіŠŗŠ°Ń‚Š¾Ń€Ńƒ Š³Ń€ŃƒŠæŠø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr "ldap_group_member (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, у яŠŗŠ¾Š¼Ńƒ Š¼Ń–ŃŃ‚ŃŃ‚ŃŒŃŃ іŠ¼ŠµŠ½Š° учŠ°ŃŠ½ŠøŠŗіŠ² Š³Ń€ŃƒŠæŠø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: memberuid (rfc2307) / member (rfc2307bis)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr "ldap_group_uuid (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть UUID/GUID Š¾Š±ā€™Ń”ŠŗтŠ° Š³Ń€ŃƒŠæŠø LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr "ldap_group_objectsid (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
@@ -20569,17 +20647,17 @@ msgstr ""
"Š»ŠøшŠµ Š“Š»Ń сŠµŃ€Š²ŠµŃ€Ń–Š² ActiveDirectory."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr "ldap_group_modify_timestamp (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr "ldap_group_type (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
@@ -20588,7 +20666,7 @@ msgstr ""
"Š¼Š¾Š¶Š»ŠøŠ²Š¾, іŠ½ŃˆŃ– ŠæрŠ°ŠæŠ¾Ń€Ń†Ń–."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -20599,19 +20677,19 @@ msgstr ""
"Š²Ń–Š“фіŠ»ŃŒŃ‚Ń€Š¾Š²Š°Š½Š¾ у сŠæŠøсŠŗу Š½Š°Š“іŠ¹Š½Šøх (Š“Š¾Š²Ń–Ń€ŠµŠ½Šøх) Š“Š¾Š¼ŠµŠ½Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
"Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: groupType у Š·Š°ŃŠ¾Š±Ń– Š½Š°Š“Š°Š½Š½Ń Š“Š°Š½Šøх AD, у іŠ½ŃˆŠøх Š·Š°ŃŠ¾Š±Š°Ń… Š½Šµ "
"Š²ŃŃ‚Š°Š½Š¾Š²Š»ŠµŠ½Š¾"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr "ldap_group_external_member (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
@@ -20621,209 +20699,209 @@ msgstr ""
"Š·Š°ŠæŠøсіŠ² учŠ°ŃŠ½ŠøŠŗіŠ² IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
"Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipaExternalMember у Š·Š°ŃŠ¾Š±Ń– Š½Š°Š“Š°Š½Š½Ń Š“Š°Š½Šøх IPA, у іŠ½ŃˆŠøх "
"Š·Š°ŃŠ¾Š±Š°Ń… Š½Šµ Š²ŠøŠ·Š½Š°Ń‡ŠµŠ½Š¾."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ ŠœŠ•Š Š•Š–Š•Š’ŠžŠ‡ Š“Š Š£ŠŸŠ˜"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr "ldap_netgroup_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±ā€™Ń”ŠŗтіŠ² Š·Š°ŠæŠøсу Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Š¾Ń— Š³Ń€ŃƒŠæŠø (netgroup) у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr "Š£ Š½Š°Š“Š°Š²Š°Ń‡Ń– Š“Š°Š½Šøх IPA Š¼Š°Ń” Š±ŃƒŃ‚Šø Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Š½Š¾ ipa_netgroup_object_class."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: nisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr "ldap_netgroup_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š½Š°Š·Š²Ń– Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Š¾Ń— Š³Ń€ŃƒŠæŠø (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr "Š£ Š½Š°Š“Š°Š²Š°Ń‡Ń– Š“Š°Š½Šøх IPA Š¼Š°Ń” Š±ŃƒŃ‚Šø Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Š½Š¾ ipa_netgroup_name."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr "ldap_netgroup_member (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, у яŠŗŠ¾Š¼Ńƒ Š¼Ń–ŃŃ‚ŃŃ‚ŃŒŃŃ іŠ¼ŠµŠ½Š° учŠ°ŃŠ½ŠøŠŗіŠ² Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Š¾Ń— Š³Ń€ŃƒŠæŠø (netgroup)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr "Š£ Š½Š°Š“Š°Š²Š°Ń‡Ń– Š“Š°Š½Šøх IPA Š¼Š°Ń” Š±ŃƒŃ‚Šø Š²ŠøŠŗŠ¾Ń€ŠøстŠ°Š½Š¾ ipa_netgroup_member."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: memberNisNetgroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr "ldap_netgroup_triple (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть тріŠ¹ŠŗŠø Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Š¾Ń— Š³Ń€ŃƒŠæŠø (Š²ŃƒŠ·Š¾Š», ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡, Š“Š¾Š¼ŠµŠ½)."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr "Š¦ŠøŠ¼ ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Š¾Š¼ Š½Šµ Š¼Š¾Š¶Š½Š° сŠŗŠ¾Ń€ŠøстŠ°Ń‚Šøся у Š½Š°Š“Š°Š²Š°Ń‡Ń– Š“Š°Š½Šøх IPA."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: nisNetgroupTriple"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr "ldap_netgroup_modify_timestamp (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ Š’Š£Š—Š›Š"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr "ldap_host_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±ā€™Ń”ŠŗтіŠ² Š·Š°ŠæŠøсу Š²ŃƒŠ·Š»Š° у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipService"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr "ldap_host_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š½Š°Š·Š²Ń– Š²ŃƒŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr "ldap_host_fqdn (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” ŠæŠ¾Š²Š½Ń–Š¹ Š½Š°Š·Š²Ń– Š²ŃƒŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: fqdn"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr "ldap_host_serverhostname (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: serverHostname"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr "ldap_host_member_of (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP Š·Ń– сŠæŠøсŠŗŠ¾Š¼ Š³Ń€ŃƒŠæ, у яŠŗŠøх Š±ŠµŃ€Šµ учŠ°ŃŃ‚ŃŒ Š²ŃƒŠ·Š¾Š»."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr "ldap_host_ssh_public_key (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, яŠŗŠøŠ¹ Š¼Ń–стŠøть Š²Ń–Š“ŠŗрŠøті ŠŗŠ»ŃŽŃ‡Ń– SSH Š²ŃƒŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr "ldap_host_uuid (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть UUID/GUID Š¾Š±ā€™Ń”ŠŗтŠ° Š²ŃƒŠ·Š»Š° LDAP."
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ Š”Š›Š£Š–Š‘Š˜"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr "ldap_service_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±ā€™Ń”ŠŗтіŠ² Š·Š°ŠæŠøсу сŠ»ŃƒŠ¶Š±Šø у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr "ldap_service_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
@@ -20831,88 +20909,88 @@ msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть Š½Š°Š·Š²Ńƒ Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Ń–Š² сŠ»ŃƒŠ¶Š±Šø тŠ° Š·Š°Š¼Ń–Š½Š½ŠøŠŗіŠ² цŠøх Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr "ldap_service_port (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть Š½Š¾Š¼ŠµŃ€ ŠæŠ¾Ń€Ń‚Ńƒ, яŠŗŠøŠ¼ ŠŗŠµŃ€ŃƒŃ” ця сŠ»ŃƒŠ¶Š±Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipServicePort"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr "ldap_service_proto (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š¼Ń–стŠøть ŠæрŠ¾Ń‚Š¾ŠŗŠ¾Š»Šø, Š·Š° яŠŗŠøŠ¼ Š¼Š¾Š¶Šµ ŠæрŠ°Ń†ŃŽŠ²Š°Ń‚Šø ця сŠ»ŃƒŠ¶Š±Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipServiceProtocol"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ SUDO"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr "ldap_sudorule_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±ā€™Ń”ŠŗтіŠ² Š·Š°ŠæŠøсу ŠæрŠ°Š²ŠøŠ»Š° sudo у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoRole"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr "ldap_sudorule_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š½Š°Š·Š²Ń– ŠæрŠ°Š²ŠøŠ»Š° sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr "ldap_sudorule_command (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š½Š°Š·Š²Ń– ŠŗŠ¾Š¼Š°Š½Š“Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoCommand"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr "ldap_sudorule_host (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
@@ -20921,17 +20999,17 @@ msgstr ""
"Š²ŃƒŠ·Š»Š°, Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Ń–Š¹ Š³Ń€ŃƒŠæі Š²ŃƒŠ·Š»Š°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr "ldap_sudorule_user (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
@@ -20940,32 +21018,32 @@ msgstr ""
"Š°Š±Š¾ Š½Š°Š·Š²Ń– Š¼ŠµŃ€ŠµŠ¶ŠµŠ²Š¾Ń— Š³Ń€ŃƒŠæŠø ŠŗŠ¾Ń€ŠøстуŠ²Š°Ń‡Š°)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr "ldap_sudorule_option (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” ŠæŠ°Ń€Š°Š¼ŠµŃ‚Ń€Š°Š¼ sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoOption"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr "ldap_sudorule_runasuser (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
@@ -20974,17 +21052,17 @@ msgstr ""
"ŠŗŠ¾Š¼Š°Š½Š“Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoRunAsUser"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr "ldap_sudorule_runasgroup (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
@@ -20993,17 +21071,17 @@ msgstr ""
"Š²ŠøŠŗŠ¾Š½ŃƒŠ²Š°Ń‚Šø ŠŗŠ¾Š¼Š°Š½Š“Šø."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoRunAsGroup"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr "ldap_sudorule_notbefore (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
@@ -21011,74 +21089,74 @@ msgstr ""
"ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š“Š°Ń‚Ń– і чŠ°ŃŃƒ Š½Š°Š±ŃƒŃ‚Ń‚Ń чŠøŠ½Š½Š¾ŃŃ‚Ń– ŠæрŠ°Š²ŠøŠ»Š¾Š¼ sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoNotBefore"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr "ldap_sudorule_notafter (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” Š“Š°Ń‚Ń– і чŠ°ŃŃƒ Š²Ń‚Ń€Š°Ń‚Šø чŠøŠ½Š½Š¾ŃŃ‚Ń– ŠæрŠ°Š²ŠøŠ»Š¾Š¼ sudo."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoNotAfter"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr "ldap_sudorule_order (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, щŠ¾ Š²Ń–Š“ŠæŠ¾Š²Ń–Š“Š°Ń” ŠæŠ¾Ń€ŃŠ“ŠŗŠ¾Š²Š¾Š¼Ńƒ Š½Š¾Š¼ŠµŃ€Ńƒ ŠæрŠ°Š²ŠøŠ»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: sudoOrder"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ AUTOFS"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ Š’Š£Š—Š›Š IP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr "ldap_iphost_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±'єŠŗтіŠ² Š·Š°ŠæŠøсу iphost у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipHost"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr "ldap_iphost_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
@@ -21087,47 +21165,47 @@ msgstr ""
"Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr "ldap_iphost_number (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, яŠŗŠøŠ¹ Š¼Ń–стŠøть Š°Š“рŠµŃŃƒ IP Š²ŃƒŠ·Š»Š°."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipHostNumber"
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr "ŠŠ¢Š Š˜Š‘Š£Š¢Š˜ ŠœŠ•Š Š•Š–Š† IP"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr "ldap_ipnetwork_object_class (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr "ŠšŠ»Š°Ń Š¾Š±'єŠŗтіŠ² Š·Š°ŠæŠøсу ipnetwork у LDAP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipNetwork"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr "ldap_ipnetwork_name (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
@@ -21136,17 +21214,17 @@ msgstr ""
"Š°Ń‚Ń€ŠøŠ±ŃƒŃ‚Ń–Š²."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr "ldap_ipnetwork_number (ряŠ“Š¾Šŗ)"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr "ŠŃ‚Ń€ŠøŠ±ŃƒŃ‚ LDAP, яŠŗŠøŠ¹ Š¼Ń–стŠøть Š°Š“рŠµŃŃƒ Š¼ŠµŃ€ŠµŠ¶Ń– IP."
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr "Š¢ŠøŠæŠ¾Š²Šµ Š·Š½Š°Ń‡ŠµŠ½Š½Ń: ipNetworkNumber"
diff --git a/src/man/po/zh_CN.po b/src/man/po/zh_CN.po
index f2ff320..9bd8e74 100644
--- a/src/man/po/zh_CN.po
+++ b/src/man/po/zh_CN.po
@@ -9,7 +9,7 @@ msgid ""
msgstr ""
"Project-Id-Version: sssd-docs 2.3.0\n"
"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
-"POT-Creation-Date: 2024-01-12 13:00+0100\n"
+"POT-Creation-Date: 2024-05-16 13:37+0200\n"
"PO-Revision-Date: 2020-07-22 07:51-0400\n"
"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/sssd/"
@@ -228,7 +228,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:149 sssd.conf.5.xml:652 sssd.conf.5.xml:949
-#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4193
+#: sssd.conf.5.xml:2101 sssd.conf.5.xml:2168 sssd.conf.5.xml:4244
#: sssd-ldap.5.xml:313 sssd-ldap.5.xml:919 sssd-ldap.5.xml:938
#: sssd-ldap.5.xml:1148 sssd-ldap.5.xml:1601 sssd-ldap.5.xml:1841
#: sssd-ipa.5.xml:152 sssd-ipa.5.xml:254 sssd-ipa.5.xml:662 sssd-ad.5.xml:1106
@@ -269,10 +269,10 @@ msgstr ""
#: sssd-ldap.5.xml:1864 sss-certmap.5.xml:645 sssd-systemtap.5.xml:82
#: sssd-systemtap.5.xml:143 sssd-systemtap.5.xml:236 sssd-systemtap.5.xml:274
#: sssd-systemtap.5.xml:330 sssd-ldap-attributes.5.xml:40
-#: sssd-ldap-attributes.5.xml:659 sssd-ldap-attributes.5.xml:801
-#: sssd-ldap-attributes.5.xml:890 sssd-ldap-attributes.5.xml:987
-#: sssd-ldap-attributes.5.xml:1045 sssd-ldap-attributes.5.xml:1203
-#: sssd-ldap-attributes.5.xml:1248 include/autofs_attributes.xml:1
+#: sssd-ldap-attributes.5.xml:661 sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:892 sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:1047 sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1250 include/autofs_attributes.xml:1
#: include/krb5_options.xml:1
msgid "<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
@@ -297,7 +297,7 @@ msgstr ""
#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:196 sssd.conf.5.xml:1290 sssd.conf.5.xml:1767
-#: sssd.conf.5.xml:4209 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
+#: sssd.conf.5.xml:4260 sssd-ldap.5.xml:766 include/ldap_id_mapping.xml:270
msgid "Default: 10"
msgstr ""
@@ -605,7 +605,7 @@ msgstr ""
#. type: Content of: <variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:468 sssd-ldap.5.xml:877 sssd-ldap.5.xml:889
#: sssd-ldap.5.xml:982 sssd-ad.5.xml:920 sssd-ad.5.xml:995 sssd-krb5.5.xml:468
-#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:976
+#: sssd-ldap-attributes.5.xml:470 sssd-ldap-attributes.5.xml:978
#: include/ldap_id_mapping.xml:211 include/ldap_id_mapping.xml:222
#: include/krb5_options.xml:148
msgid "Default: not set"
@@ -874,7 +874,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4259
+#: sssd.conf.5.xml:700 sssd.conf.5.xml:1791 sssd.conf.5.xml:4310
#: sssd-ad.5.xml:187 sssd-ad.5.xml:327 sssd-ad.5.xml:341
msgid "Default: Not set"
msgstr ""
@@ -1893,7 +1893,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1572 sssd.conf.5.xml:3984 sssd-ldap.5.xml:607 sssd.8.xml:79
+#: sssd.conf.5.xml:1572 sssd.conf.5.xml:4003 sssd-ldap.5.xml:607 sssd.8.xml:79
msgid "Default: 0"
msgstr ""
@@ -1956,7 +1956,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:1632 sssd.conf.5.xml:1657 sssd.conf.5.xml:1676
-#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3913
+#: sssd.conf.5.xml:1913 sssd.conf.5.xml:2733 sssd.conf.5.xml:3932
#: sssd-ldap.5.xml:1209
msgid "Default: none"
msgstr ""
@@ -2018,12 +2018,10 @@ msgstr ""
msgid "Enable passkey device based authentication."
msgstr ""
-#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1698 sssd.conf.5.xml:1712
-#: sssd-ldap.5.xml:672 sssd-ldap.5.xml:693 sssd-ldap.5.xml:789
-#: sssd-ldap.5.xml:1295 sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126
-#: sssd-ad.5.xml:1175 include/ldap_id_mapping.xml:250
-msgid "Default: False"
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1687 sssd.conf.5.xml:1999 sssd-ad.5.xml:1271
+#: sss_rpcidmapd.5.xml:76 sssd-files.5.xml:145
+msgid "Default: True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
@@ -2036,6 +2034,14 @@ msgstr ""
msgid "Enable libfido2 library debug messages."
msgstr ""
+#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:1698 sssd.conf.5.xml:1712 sssd-ldap.5.xml:672
+#: sssd-ldap.5.xml:693 sssd-ldap.5.xml:789 sssd-ldap.5.xml:1295
+#: sssd-ad.5.xml:505 sssd-ad.5.xml:581 sssd-ad.5.xml:1126 sssd-ad.5.xml:1175
+#: include/ldap_id_mapping.xml:250
+msgid "Default: False"
+msgstr ""
+
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1703
msgid "pam_cert_auth (bool)"
@@ -2060,7 +2066,7 @@ msgid "The path to the certificate database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4373
+#: sssd.conf.5.xml:1723 sssd.conf.5.xml:2248 sssd.conf.5.xml:4424
msgid "Default:"
msgstr ""
@@ -2136,7 +2142,7 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:1796
-msgid "pam_p11_allowed_services (integer)"
+msgid "pam_p11_allowed_services (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
@@ -2326,7 +2332,7 @@ msgid "Default: no_session"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4312
+#: sssd.conf.5.xml:1950 sssd.conf.5.xml:4363
msgid "pam_gssapi_services"
msgstr ""
@@ -2360,7 +2366,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3907
+#: sssd.conf.5.xml:1968 sssd.conf.5.xml:3926
msgid "Example: <placeholder type=\"programlisting\" id=\"0\"/>"
msgstr ""
@@ -2370,7 +2376,7 @@ msgid "Default: - (GSSAPI authentication is disabled)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4313
+#: sssd.conf.5.xml:1979 sssd.conf.5.xml:4364
msgid "pam_gssapi_check_upn"
msgstr ""
@@ -2389,12 +2395,6 @@ msgid ""
"be authenticated."
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:1999 sssd-ad.5.xml:1271 sss_rpcidmapd.5.xml:76
-#: sssd-files.5.xml:145
-msgid "Default: True"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
#: sssd.conf.5.xml:2004
msgid "pam_gssapi_indicators_map"
@@ -3027,8 +3027,9 @@ msgstr ""
msgid "DOMAIN SECTIONS"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:2575
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:2575 sssd.conf.5.xml:4054 sssd.conf.5.xml:4055
+#: sssd.conf.5.xml:4058
msgid "enabled"
msgstr ""
@@ -3623,7 +3624,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3829 sssd-ldap.5.xml:327
+#: sssd.conf.5.xml:3122 sssd.conf.5.xml:3848 sssd-ldap.5.xml:327
#: sssd-ldap.5.xml:356 sssd-ldap.5.xml:409 sssd-ldap.5.xml:469
#: sssd-ldap.5.xml:490 sssd-ldap.5.xml:521 sssd-ldap.5.xml:544
#: sssd-ldap.5.xml:583 sssd-ldap.5.xml:602 sssd-ldap.5.xml:626
@@ -4260,46 +4261,71 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
#: sssd.conf.5.xml:3777
-msgid "override_gid (integer)"
+msgid "failover_primary_timeout (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd.conf.5.xml:3780
+msgid ""
+"When no primary server is currently available, SSSD fail overs to a backup "
+"server. This option defines the amount of time (in seconds) to wait before "
+"SSSD tries to reconnect to a primary server again."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3787
+msgid "Note: The minimum value is 31."
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3790
+#, fuzzy
+#| msgid "Default: 3"
+msgid "Default: 31"
+msgstr "默认ļ¼š 3"
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
+#: sssd.conf.5.xml:3796
+msgid "override_gid (integer)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:3799
msgid "Override the primary GID value with the one specified."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3786
+#: sssd.conf.5.xml:3805
msgid "case_sensitive (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3793
+#: sssd.conf.5.xml:3812
msgid "True"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3796
+#: sssd.conf.5.xml:3815
msgid "Case sensitive. This value is invalid for AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3802
+#: sssd.conf.5.xml:3821
msgid "False"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3804
+#: sssd.conf.5.xml:3823
msgid "Case insensitive."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3808
+#: sssd.conf.5.xml:3827
msgid "Preserving"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3811
+#: sssd.conf.5.xml:3830
msgid ""
"Same as False (case insensitive), but does not lowercase names in the result "
"of NSS operations. Note that name aliases (and in case of services also "
@@ -4307,31 +4333,31 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3819
+#: sssd.conf.5.xml:3838
msgid ""
"If you want to set this value for trusted domain with IPA provider, you need "
"to set it on both the client and SSSD on the server."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3789
+#: sssd.conf.5.xml:3808
msgid ""
"Treat user and group names as case sensitive. Possible option values are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3834
+#: sssd.conf.5.xml:3853
msgid "Default: True (False for AD provider)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3840
+#: sssd.conf.5.xml:3859
msgid "subdomain_inherit (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3843
+#: sssd.conf.5.xml:3862
msgid ""
"Specifies a list of configuration parameters that should be inherited by a "
"subdomain. Please note that only selected parameters can be inherited. "
@@ -4339,104 +4365,104 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3849
+#: sssd.conf.5.xml:3868
msgid "ldap_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3852
+#: sssd.conf.5.xml:3871
msgid "ldap_network_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3855
+#: sssd.conf.5.xml:3874
msgid "ldap_opt_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3858
+#: sssd.conf.5.xml:3877
msgid "ldap_offline_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3861
+#: sssd.conf.5.xml:3880
msgid "ldap_enumeration_refresh_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3864
+#: sssd.conf.5.xml:3883
msgid "ldap_enumeration_refresh_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3867
+#: sssd.conf.5.xml:3886
msgid "ldap_purge_cache_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3870
+#: sssd.conf.5.xml:3889
msgid "ldap_purge_cache_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3873
+#: sssd.conf.5.xml:3892
msgid ""
"ldap_krb5_keytab (the value of krb5_keytab will be used if ldap_krb5_keytab "
"is not set explicitly)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3877
+#: sssd.conf.5.xml:3896
msgid "ldap_krb5_ticket_lifetime"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3880
+#: sssd.conf.5.xml:3899
msgid "ldap_enumeration_search_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3883
+#: sssd.conf.5.xml:3902
msgid "ldap_connection_expire_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3886
+#: sssd.conf.5.xml:3905
msgid "ldap_connection_expire_offset"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3889
+#: sssd.conf.5.xml:3908
msgid "ldap_connection_idle_timeout"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3892 sssd-ldap.5.xml:401
+#: sssd.conf.5.xml:3911 sssd-ldap.5.xml:401
msgid "ldap_use_tokengroups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3895
+#: sssd.conf.5.xml:3914
msgid "ldap_user_principal"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3898
+#: sssd.conf.5.xml:3917
msgid "ignore_group_members"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3901
+#: sssd.conf.5.xml:3920
msgid "auto_private_groups"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3904
+#: sssd.conf.5.xml:3923
msgid "case_sensitive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:3909
+#: sssd.conf.5.xml:3928
#, no-wrap
msgid ""
"subdomain_inherit = ldap_purge_cache_timeout\n"
@@ -4444,27 +4470,27 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3916
+#: sssd.conf.5.xml:3935
msgid "Note: This option only works with the IPA and AD provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3923
+#: sssd.conf.5.xml:3942
msgid "subdomain_homedir (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3934
+#: sssd.conf.5.xml:3953
msgid "%F"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3935
+#: sssd.conf.5.xml:3954
msgid "flat (NetBIOS) name of a subdomain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3926
+#: sssd.conf.5.xml:3945
msgid ""
"Use this homedir as default value for all subdomains within this domain in "
"IPA AD trust. See <emphasis>override_homedir</emphasis> for info about "
@@ -4474,34 +4500,34 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3940
+#: sssd.conf.5.xml:3959
msgid ""
"The value can be overridden by <emphasis>override_homedir</emphasis> option."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3944
+#: sssd.conf.5.xml:3963
msgid "Default: <filename>/home/%d/%u</filename>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3949
+#: sssd.conf.5.xml:3968
msgid "realmd_tags (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3952
+#: sssd.conf.5.xml:3971
msgid ""
"Various tags stored by the realmd configuration service for this domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3958
+#: sssd.conf.5.xml:3977
msgid "cached_auth_timeout (int)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3961
+#: sssd.conf.5.xml:3980
msgid ""
"Specifies time in seconds since last successful online authentication for "
"which user will be authenticated using cached credentials while SSSD is in "
@@ -4510,19 +4536,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3969
+#: sssd.conf.5.xml:3988
msgid ""
"This option's value is inherited by all trusted domains. At the moment it is "
"not possible to set a different value per trusted domain."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3974
+#: sssd.conf.5.xml:3993
msgid "Special value 0 implies that this feature is disabled."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3978
+#: sssd.conf.5.xml:3997
msgid ""
"Please note that if <quote>cached_auth_timeout</quote> is longer than "
"<quote>pam_id_timeout</quote> then the back end could be called to handle "
@@ -4530,23 +4556,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:3989
+#: sssd.conf.5.xml:4008
msgid "local_auth_policy (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:3992
+#: sssd.conf.5.xml:4011
msgid ""
"Local authentication methods policy. Some backends (i.e. LDAP, proxy "
"provider) only support a password based authentication, while others can "
"handle PKINIT based Smartcard authentication (AD, IPA), two-factor "
"authentication (IPA), or other methods against a central instance. By "
"default in such cases authentication is only performed with the methods "
-"supported by the backend."
+"supported by the backend. With this option additional methods can be enabled "
+"which are evaluated and checked locally."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4002
+#: sssd.conf.5.xml:4023
msgid ""
"There are three possible values for this option: match, only, enable. "
"<quote>match</quote> is used to match offline and online states for Kerberos "
@@ -4558,7 +4585,50 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4014
+#: sssd.conf.5.xml:4036
+msgid ""
+"The following table shows which authentication methods, if configured "
+"properly, are currently enabled or disabled for each backend, with the "
+"default local_auth_policy: <quote>match</quote>"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4049
+msgid "local_auth_policy = match (default)"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4050
+msgid "Passkey"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><thead><row><entry>
+#: sssd.conf.5.xml:4051
+msgid "Smartcard"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4054 sssd-ldap.5.xml:189
+msgid "IPA"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
+#: sssd.conf.5.xml:4057 sssd-ldap.5.xml:194
+msgid "AD"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry><para>
+#: sssd.conf.5.xml:4057 sssd.conf.5.xml:4060 sssd.conf.5.xml:4061
+msgid "disabled"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><informaltable><tgroup><tbody><row><entry>
+#: sssd.conf.5.xml:4060
+msgid "LDAP"
+msgstr ""
+
+#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
+#: sssd.conf.5.xml:4065
msgid ""
"Please note that if local Smartcard authentication is enabled and a "
"Smartcard is present, Smartcard authentication will be preferred over the "
@@ -4567,7 +4637,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4026
+#: sssd.conf.5.xml:4077
#, no-wrap
msgid ""
"[domain/shadowutils]\n"
@@ -4578,7 +4648,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4022
+#: sssd.conf.5.xml:4073
msgid ""
"The following configuration example allows local users to authenticate "
"locally using any enabled method (i.e. smartcard, passkey). <placeholder "
@@ -4586,38 +4656,38 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4034
+#: sssd.conf.5.xml:4085
msgid ""
"It is expected that the <quote>files</quote> provider ignores the "
"local_auth_policy option and supports Smartcard authentication by default."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4039
+#: sssd.conf.5.xml:4090
#, fuzzy
#| msgid "Default: 3"
msgid "Default: match"
msgstr "默认ļ¼š 3"
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4044
+#: sssd.conf.5.xml:4095
msgid "auto_private_groups (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4050
+#: sssd.conf.5.xml:4101
msgid "true"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4053
+#: sssd.conf.5.xml:4104
msgid ""
"Create user's private group unconditionally from user's UID number. The GID "
"number is ignored in this case."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4057
+#: sssd.conf.5.xml:4108
msgid ""
"NOTE: Because the GID number and the user private group are inferred from "
"the UID number, it is not supported to have multiple entries with the same "
@@ -4626,24 +4696,24 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4066
+#: sssd.conf.5.xml:4117
msgid "false"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4069
+#: sssd.conf.5.xml:4120
msgid ""
"Always use the user's primary GID number. The GID number must refer to a "
"group object in the LDAP database."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4075
+#: sssd.conf.5.xml:4126
msgid "hybrid"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4078
+#: sssd.conf.5.xml:4129
msgid ""
"A primary group is autogenerated for user entries whose UID and GID numbers "
"have the same value and at the same time the GID number does not correspond "
@@ -4653,14 +4723,14 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4091
+#: sssd.conf.5.xml:4142
msgid ""
"If the UID and GID of a user are different, then the GID must correspond to "
"a group entry, otherwise the GID is simply not resolvable."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4098
+#: sssd.conf.5.xml:4149
msgid ""
"This feature is useful for environments that wish to stop maintaining a "
"separate group objects for the user private groups, but also wish to retain "
@@ -4668,21 +4738,21 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4047
+#: sssd.conf.5.xml:4098
msgid ""
"This option takes any of three available values: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4110
+#: sssd.conf.5.xml:4161
msgid ""
"For subdomains, the default value is False for subdomains that use assigned "
"POSIX IDs and True for subdomains that use automatic ID-mapping."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4118
+#: sssd.conf.5.xml:4169
#, no-wrap
msgid ""
"[domain/forest.domain/sub.domain]\n"
@@ -4690,7 +4760,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><programlisting>
-#: sssd.conf.5.xml:4124
+#: sssd.conf.5.xml:4175
#, no-wrap
msgid ""
"[domain/forest.domain]\n"
@@ -4699,7 +4769,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4115
+#: sssd.conf.5.xml:4166
msgid ""
"The value of auto_private_groups can either be set per subdomains in a "
"subsection, for example: <placeholder type=\"programlisting\" id=\"0\"/> or "
@@ -4716,17 +4786,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4139
+#: sssd.conf.5.xml:4190
msgid "proxy_pam_target (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4142
+#: sssd.conf.5.xml:4193
msgid "The proxy target PAM proxies to."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4145
+#: sssd.conf.5.xml:4196
msgid ""
"Default: not set by default, you have to take an existing pam configuration "
"or create a new one and add the service name here. As an alternative you can "
@@ -4734,12 +4804,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4155
+#: sssd.conf.5.xml:4206
msgid "proxy_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4158
+#: sssd.conf.5.xml:4209
msgid ""
"The name of the NSS library to use in proxy domains. The NSS functions "
"searched for in the library are in the form of _nss_$(libName)_$(function), "
@@ -4747,12 +4817,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4168
+#: sssd.conf.5.xml:4219
msgid "proxy_resolver_lib_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4171
+#: sssd.conf.5.xml:4222
msgid ""
"The name of the NSS library to use for hosts and networks lookups in proxy "
"domains. The NSS functions searched for in the library are in the form of "
@@ -4760,12 +4830,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4182
+#: sssd.conf.5.xml:4233
msgid "proxy_fast_alias (boolean)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4185
+#: sssd.conf.5.xml:4236
msgid ""
"When a user or group is looked up by name in the proxy provider, a second "
"lookup by ID is performed to \"canonicalize\" the name in case the requested "
@@ -4774,12 +4844,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4199
+#: sssd.conf.5.xml:4250
msgid "proxy_max_children (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4202
+#: sssd.conf.5.xml:4253
msgid ""
"This option specifies the number of pre-forked proxy children. It is useful "
"for high-load SSSD environments where sssd may run out of available child "
@@ -4787,19 +4857,19 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4135
+#: sssd.conf.5.xml:4186
msgid ""
"Options valid for proxy domains. <placeholder type=\"variablelist\" "
"id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><title>
-#: sssd.conf.5.xml:4218
+#: sssd.conf.5.xml:4269
msgid "Application domains"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4220
+#: sssd.conf.5.xml:4271
msgid ""
"SSSD, with its D-Bus interface (see <citerefentry> <refentrytitle>sssd-ifp</"
"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>) is appealing to "
@@ -4816,7 +4886,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4240
+#: sssd.conf.5.xml:4291
msgid ""
"Please note that the application domain must still be explicitly enabled in "
"the <quote>domains</quote> parameter so that the lookup order between the "
@@ -4824,17 +4894,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
-#: sssd.conf.5.xml:4246
+#: sssd.conf.5.xml:4297
msgid "Application domain parameters"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4248
+#: sssd.conf.5.xml:4299
msgid "inherit_from (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4251
+#: sssd.conf.5.xml:4302
msgid ""
"The SSSD POSIX-type domain the application domain inherits all settings "
"from. The application domain can moreover add its own settings to the "
@@ -4843,7 +4913,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para>
-#: sssd.conf.5.xml:4265
+#: sssd.conf.5.xml:4316
msgid ""
"The following example illustrates the use of an application domain. In this "
"setup, the POSIX domain is connected to an LDAP server and is used by the OS "
@@ -4853,7 +4923,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><programlisting>
-#: sssd.conf.5.xml:4273
+#: sssd.conf.5.xml:4324
#, no-wrap
msgid ""
"[sssd]\n"
@@ -4873,12 +4943,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4293
+#: sssd.conf.5.xml:4344
msgid "TRUSTED DOMAIN SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4295
+#: sssd.conf.5.xml:4346
msgid ""
"Some options used in the domain section can also be used in the trusted "
"domain section, that is, in a section called <quote>[domain/"
@@ -4889,69 +4959,69 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4302
+#: sssd.conf.5.xml:4353
msgid "ldap_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4303
+#: sssd.conf.5.xml:4354
msgid "ldap_user_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4304
+#: sssd.conf.5.xml:4355
msgid "ldap_group_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4305
+#: sssd.conf.5.xml:4356
msgid "ldap_netgroup_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4306
+#: sssd.conf.5.xml:4357
msgid "ldap_service_search_base,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4307
+#: sssd.conf.5.xml:4358
msgid "ldap_sasl_mech,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4308
+#: sssd.conf.5.xml:4359
msgid "ad_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4309
+#: sssd.conf.5.xml:4360
msgid "ad_backup_server,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4310
+#: sssd.conf.5.xml:4361
msgid "ad_site,"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4311 sssd-ipa.5.xml:884
+#: sssd.conf.5.xml:4362 sssd-ipa.5.xml:884
msgid "use_fully_qualified_names"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4315
+#: sssd.conf.5.xml:4366
msgid ""
"For more details about these options see their individual description in the "
"manual page."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4321
+#: sssd.conf.5.xml:4372
msgid "CERTIFICATE MAPPING SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4323
+#: sssd.conf.5.xml:4374
msgid ""
"To allow authentication with Smartcards and certificates SSSD must be able "
"to map certificates to users. This can be done by adding the full "
@@ -4964,7 +5034,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4337
+#: sssd.conf.5.xml:4388
msgid ""
"To make the mapping more flexible mapping and matching rules were added to "
"SSSD (see <citerefentry> <refentrytitle>sss-certmap</refentrytitle> "
@@ -4972,7 +5042,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4346
+#: sssd.conf.5.xml:4397
msgid ""
"A mapping and matching rule can be added to the SSSD configuration in a "
"section on its own with a name like <quote>[certmap/"
@@ -4981,55 +5051,55 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4353
+#: sssd.conf.5.xml:4404
msgid "matchrule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4356
+#: sssd.conf.5.xml:4407
msgid ""
"Only certificates from the Smartcard which matches this rule will be "
"processed, all others are ignored."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4360
+#: sssd.conf.5.xml:4411
msgid ""
"Default: KRB5:&lt;EKU&gt;clientAuth, i.e. only certificates which have the "
"Extended Key Usage <quote>clientAuth</quote>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4367
+#: sssd.conf.5.xml:4418
msgid "maprule (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4370
+#: sssd.conf.5.xml:4421
msgid "Defines how the user is found for a given certificate."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4376
+#: sssd.conf.5.xml:4427
msgid ""
"LDAP:(userCertificate;binary={cert!bin}) for LDAP based providers like "
"<quote>ldap</quote>, <quote>AD</quote> or <quote>ipa</quote>."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4382
+#: sssd.conf.5.xml:4433
msgid ""
"The RULE_NAME for the <quote>files</quote> provider which tries to find a "
"user with the same name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4391
+#: sssd.conf.5.xml:4442
msgid "domains (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4394
+#: sssd.conf.5.xml:4445
msgid ""
"Comma separated list of domain names the rule should be applied. By default "
"a rule is only valid in the domain configured in sssd.conf. If the provider "
@@ -5038,17 +5108,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4401
+#: sssd.conf.5.xml:4452
msgid "Default: the configured domain in sssd.conf"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4406
+#: sssd.conf.5.xml:4457
msgid "priority (integer)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4409
+#: sssd.conf.5.xml:4460
msgid ""
"Unsigned integer value defining the priority of the rule. The higher the "
"number the lower the priority. <quote>0</quote> stands for the highest "
@@ -5056,26 +5126,26 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4415
+#: sssd.conf.5.xml:4466
msgid "Default: the lowest priority"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4421
+#: sssd.conf.5.xml:4472
msgid ""
"To make the configuration simple and reduce the amount of configuration "
"options the <quote>files</quote> provider has some special properties:"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4427
+#: sssd.conf.5.xml:4478
msgid ""
"if maprule is not set the RULE_NAME name is assumed to be the name of the "
"matching user"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4433
+#: sssd.conf.5.xml:4484
msgid ""
"if a maprule is used both a single user name or a template like "
"<quote>{subject_rfc822_name.short_name}</quote> must be in braces like e.g. "
@@ -5084,17 +5154,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4442
+#: sssd.conf.5.xml:4493
msgid "the <quote>domains</quote> option is ignored"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4450
+#: sssd.conf.5.xml:4501
msgid "PROMPTING CONFIGURATION SECTION"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4452
+#: sssd.conf.5.xml:4503
msgid ""
"If a special file (<filename>/var/lib/sss/pubconf/pam_preauth_available</"
"filename>) exists SSSD's PAM module pam_sss will ask SSSD to figure out "
@@ -5104,7 +5174,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4460
+#: sssd.conf.5.xml:4511
msgid ""
"With the growing number of authentication methods and the possibility that "
"there are multiple ones for a single user the heuristic used by pam_sss to "
@@ -5113,59 +5183,59 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4472
+#: sssd.conf.5.xml:4523
msgid "[prompting/password]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4475
+#: sssd.conf.5.xml:4526
msgid "password_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4476
+#: sssd.conf.5.xml:4527
msgid "to change the string of the password prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4474
+#: sssd.conf.5.xml:4525
msgid ""
"to configure password prompting, allowed options are: <placeholder "
"type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4484
+#: sssd.conf.5.xml:4535
msgid "[prompting/2fa]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4488
+#: sssd.conf.5.xml:4539
msgid "first_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4489
+#: sssd.conf.5.xml:4540
msgid "to change the string of the prompt for the first factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4492
+#: sssd.conf.5.xml:4543
msgid "second_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4493
+#: sssd.conf.5.xml:4544
msgid "to change the string of the prompt for the second factor"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4496
+#: sssd.conf.5.xml:4547
msgid "single_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4497
+#: sssd.conf.5.xml:4548
msgid ""
"boolean value, if True there will be only a single prompt using the value of "
"first_prompt where it is expected that both factors are entered as a single "
@@ -5174,7 +5244,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4486
+#: sssd.conf.5.xml:4537
msgid ""
"to configure two-factor authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/> If the second factor is "
@@ -5183,17 +5253,17 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4514
+#: sssd.conf.5.xml:4565
msgid "[prompting/passkey]"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd.conf.5.xml:4520 sssd-ad.5.xml:1021
+#: sssd.conf.5.xml:4571 sssd-ad.5.xml:1021
msgid "interactive"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4522
+#: sssd.conf.5.xml:4573
msgid ""
"boolean value, if True prompt a message and wait before testing the presence "
"of a passkey device. Recommended if your device doesnā€™t have a tactile "
@@ -5201,46 +5271,46 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4530
+#: sssd.conf.5.xml:4581
msgid "interactive_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4532
+#: sssd.conf.5.xml:4583
msgid "to change the message of the interactive prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4537
+#: sssd.conf.5.xml:4588
msgid "touch"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4539
+#: sssd.conf.5.xml:4590
msgid ""
"boolean value, if True prompt a message to remind the user to touch the "
"device."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
-#: sssd.conf.5.xml:4545
+#: sssd.conf.5.xml:4596
msgid "touch_prompt"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4547
+#: sssd.conf.5.xml:4598
msgid "to change the message of the touch prompt."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd.conf.5.xml:4516
+#: sssd.conf.5.xml:4567
msgid ""
"to configure passkey authentication prompting, allowed options are: "
"<placeholder type=\"variablelist\" id=\"0\"/>"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4467
+#: sssd.conf.5.xml:4518
msgid ""
"Each supported authentication method has its own configuration subsection "
"under <quote>[prompting/...]</quote>. Currently there are: <placeholder "
@@ -5249,7 +5319,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4558
+#: sssd.conf.5.xml:4609
msgid ""
"It is possible to add a subsection for specific PAM services, e.g. "
"<quote>[prompting/password/sshd]</quote> to individual change the prompting "
@@ -5257,12 +5327,12 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd.conf.5.xml:4565 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
+#: sssd.conf.5.xml:4616 pam_sss_gss.8.xml:157 idmap_sss.8.xml:43
msgid "EXAMPLES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4571
+#: sssd.conf.5.xml:4622
#, no-wrap
msgid ""
"[sssd]\n"
@@ -5292,7 +5362,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4567
+#: sssd.conf.5.xml:4618
msgid ""
"1. The following example shows a typical SSSD config. It does not describe "
"configuration of the domains themselves - refer to documentation on "
@@ -5301,7 +5371,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4604
+#: sssd.conf.5.xml:4655
#, no-wrap
msgid ""
"[domain/ipa.com/child.ad.com]\n"
@@ -5309,7 +5379,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4598
+#: sssd.conf.5.xml:4649
msgid ""
"2. The following example shows configuration of IPA AD trust where the AD "
"forest consists of two domains in a parent-child structure. Suppose IPA "
@@ -5320,7 +5390,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><programlisting>
-#: sssd.conf.5.xml:4615
+#: sssd.conf.5.xml:4666
#, no-wrap
msgid ""
"[certmap/my.domain/rule_name]\n"
@@ -5331,7 +5401,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para>
-#: sssd.conf.5.xml:4609
+#: sssd.conf.5.xml:4660
msgid ""
"3. The following example shows the configuration of a certificate mapping "
"rule. It is valid for the configured domain <quote>my.domain</quote> and "
@@ -5560,16 +5630,6 @@ msgstr ""
msgid "rfc2307bis"
msgstr ""
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:189
-msgid "IPA"
-msgstr ""
-
-#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
-#: sssd-ldap.5.xml:194
-msgid "AD"
-msgstr ""
-
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ldap.5.xml:200
msgid ""
@@ -10199,9 +10259,9 @@ msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
#: sssd-ipa.5.xml:710 sssd-ldap-attributes.5.xml:496
-#: sssd-ldap-attributes.5.xml:830 sssd-ldap-attributes.5.xml:911
-#: sssd-ldap-attributes.5.xml:1008 sssd-ldap-attributes.5.xml:1066
-#: sssd-ldap-attributes.5.xml:1224 sssd-ldap-attributes.5.xml:1269
+#: sssd-ldap-attributes.5.xml:832 sssd-ldap-attributes.5.xml:913
+#: sssd-ldap-attributes.5.xml:1010 sssd-ldap-attributes.5.xml:1068
+#: sssd-ldap-attributes.5.xml:1226 sssd-ldap-attributes.5.xml:1271
msgid "Default: cn"
msgstr ""
@@ -15409,7 +15469,7 @@ msgid "The LDAP attribute that corresponds to the user's primary group id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:698
+#: sssd-ldap-attributes.5.xml:88 sssd-ldap-attributes.5.xml:700
msgid "Default: gidNumber"
msgstr ""
@@ -15487,7 +15547,7 @@ msgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:724
+#: sssd-ldap-attributes.5.xml:155 sssd-ldap-attributes.5.xml:726
msgid ""
"Default: not set in the general case, objectGUID for AD and ipaUniqueID for "
"IPA"
@@ -15506,7 +15566,7 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:739
+#: sssd-ldap-attributes.5.xml:170 sssd-ldap-attributes.5.xml:741
msgid "Default: objectSid for ActiveDirectory, not set for other servers."
msgstr ""
@@ -15516,16 +15576,16 @@ msgid "ldap_user_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:749
-#: sssd-ldap-attributes.5.xml:872
+#: sssd-ldap-attributes.5.xml:180 sssd-ldap-attributes.5.xml:751
+#: sssd-ldap-attributes.5.xml:874
msgid ""
"The LDAP attribute that contains timestamp of the last modification of the "
"parent object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:753
-#: sssd-ldap-attributes.5.xml:879
+#: sssd-ldap-attributes.5.xml:184 sssd-ldap-attributes.5.xml:755
+#: sssd-ldap-attributes.5.xml:881
msgid "Default: modifyTimestamp"
msgstr ""
@@ -15857,7 +15917,7 @@ msgid "The LDAP attribute that contains the user's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:963
+#: sssd-ldap-attributes.5.xml:483 sssd-ldap-attributes.5.xml:965
msgid "Default: sshPublicKey"
msgstr ""
@@ -15882,7 +15942,7 @@ msgid "The LDAP attribute that lists the user's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:950
+#: sssd-ldap-attributes.5.xml:509 sssd-ldap-attributes.5.xml:952
msgid "Default: memberOf"
msgstr ""
@@ -16024,59 +16084,60 @@ msgstr ""
msgid ""
"Note: If an email address of a user conflicts with an email address or fully "
"qualified name of another user, then SSSD will not be able to serve those "
-"users properly. If for some reason several users need to share the same "
-"email address then set this option to a nonexistent attribute name in order "
-"to disable user lookup/login by email."
+"users properly. This option allows users to login by (1) username, and (2) e-"
+"mail address. If for some reason several users need to share the same email "
+"address then set this option to a nonexistent attribute name in order to "
+"disable user lookup/login by email."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:635
+#: sssd-ldap-attributes.5.xml:637
msgid "Default: mail"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:640
+#: sssd-ldap-attributes.5.xml:642
msgid "ldap_user_passkey (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:643
+#: sssd-ldap-attributes.5.xml:645
msgid ""
"Name of the LDAP attribute containing the passkey mapping data of the user."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:647
+#: sssd-ldap-attributes.5.xml:649
msgid "Default: passkey (LDAP), ipaPassKey (IPA), altSecurityIdentities (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:657
+#: sssd-ldap-attributes.5.xml:659
msgid "GROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:661
+#: sssd-ldap-attributes.5.xml:663
msgid "ldap_group_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:664
+#: sssd-ldap-attributes.5.xml:666
msgid "The object class of a group entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:667
+#: sssd-ldap-attributes.5.xml:669
msgid "Default: posixGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:673
+#: sssd-ldap-attributes.5.xml:675
msgid "ldap_group_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:676
+#: sssd-ldap-attributes.5.xml:678
msgid ""
"The LDAP attribute that corresponds to the group name. In an environment "
"with nested groups, this value must be an LDAP attribute which has a unique "
@@ -16085,76 +16146,76 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:684
+#: sssd-ldap-attributes.5.xml:686
msgid "Default: cn (rfc2307, rfc2307bis and IPA), sAMAccountName (AD)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:691
+#: sssd-ldap-attributes.5.xml:693
msgid "ldap_group_gid_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:694
+#: sssd-ldap-attributes.5.xml:696
msgid "The LDAP attribute that corresponds to the group's id."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:704
+#: sssd-ldap-attributes.5.xml:706
msgid "ldap_group_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:707
+#: sssd-ldap-attributes.5.xml:709
msgid "The LDAP attribute that contains the names of the group's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:711
+#: sssd-ldap-attributes.5.xml:713
msgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:717
+#: sssd-ldap-attributes.5.xml:719
msgid "ldap_group_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:720
+#: sssd-ldap-attributes.5.xml:722
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:731
+#: sssd-ldap-attributes.5.xml:733
msgid "ldap_group_objectsid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:734
+#: sssd-ldap-attributes.5.xml:736
msgid ""
"The LDAP attribute that contains the objectSID of an LDAP group object. This "
"is usually only necessary for ActiveDirectory servers."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:746
+#: sssd-ldap-attributes.5.xml:748
msgid "ldap_group_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:759
+#: sssd-ldap-attributes.5.xml:761
msgid "ldap_group_type (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:762
+#: sssd-ldap-attributes.5.xml:764
msgid ""
"The LDAP attribute that contains an integer value indicating the type of the "
"group and maybe other flags."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:767
+#: sssd-ldap-attributes.5.xml:769
msgid ""
"This attribute is currently only used by the AD provider to determine if a "
"group is a domain local groups and has to be filtered out for trusted "
@@ -16162,531 +16223,531 @@ msgid ""
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:773
+#: sssd-ldap-attributes.5.xml:775
msgid "Default: groupType in the AD provider, otherwise not set"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:780
+#: sssd-ldap-attributes.5.xml:782
msgid "ldap_group_external_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:783
+#: sssd-ldap-attributes.5.xml:785
msgid ""
"The LDAP attribute that references group members that are defined in an "
"external domain. At the moment, only IPA's external members are supported."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:789
+#: sssd-ldap-attributes.5.xml:791
msgid "Default: ipaExternalMember in the IPA provider, otherwise unset."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:799
+#: sssd-ldap-attributes.5.xml:801
msgid "NETGROUP ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:803
+#: sssd-ldap-attributes.5.xml:805
msgid "ldap_netgroup_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:806
+#: sssd-ldap-attributes.5.xml:808
msgid "The object class of a netgroup entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:809
+#: sssd-ldap-attributes.5.xml:811
msgid "In IPA provider, ipa_netgroup_object_class should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:813
+#: sssd-ldap-attributes.5.xml:815
msgid "Default: nisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:819
+#: sssd-ldap-attributes.5.xml:821
msgid "ldap_netgroup_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:822
+#: sssd-ldap-attributes.5.xml:824
msgid "The LDAP attribute that corresponds to the netgroup name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:826
+#: sssd-ldap-attributes.5.xml:828
msgid "In IPA provider, ipa_netgroup_name should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:836
+#: sssd-ldap-attributes.5.xml:838
msgid "ldap_netgroup_member (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:839
+#: sssd-ldap-attributes.5.xml:841
msgid "The LDAP attribute that contains the names of the netgroup's members."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:843
+#: sssd-ldap-attributes.5.xml:845
msgid "In IPA provider, ipa_netgroup_member should be used instead."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:847
+#: sssd-ldap-attributes.5.xml:849
msgid "Default: memberNisNetgroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:853
+#: sssd-ldap-attributes.5.xml:855
msgid "ldap_netgroup_triple (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:856
+#: sssd-ldap-attributes.5.xml:858
msgid ""
"The LDAP attribute that contains the (host, user, domain) netgroup triples."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:860 sssd-ldap-attributes.5.xml:876
+#: sssd-ldap-attributes.5.xml:862 sssd-ldap-attributes.5.xml:878
msgid "This option is not available in IPA provider."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:863
+#: sssd-ldap-attributes.5.xml:865
msgid "Default: nisNetgroupTriple"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:869
+#: sssd-ldap-attributes.5.xml:871
msgid "ldap_netgroup_modify_timestamp (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:888
+#: sssd-ldap-attributes.5.xml:890
msgid "HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:892
+#: sssd-ldap-attributes.5.xml:894
msgid "ldap_host_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:895
+#: sssd-ldap-attributes.5.xml:897
msgid "The object class of a host entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:898 sssd-ldap-attributes.5.xml:995
+#: sssd-ldap-attributes.5.xml:900 sssd-ldap-attributes.5.xml:997
msgid "Default: ipService"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:904
+#: sssd-ldap-attributes.5.xml:906
msgid "ldap_host_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:907 sssd-ldap-attributes.5.xml:933
+#: sssd-ldap-attributes.5.xml:909 sssd-ldap-attributes.5.xml:935
msgid "The LDAP attribute that corresponds to the host's name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:917
+#: sssd-ldap-attributes.5.xml:919
msgid "ldap_host_fqdn (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:920
+#: sssd-ldap-attributes.5.xml:922
msgid ""
"The LDAP attribute that corresponds to the host's fully-qualified domain "
"name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:924
+#: sssd-ldap-attributes.5.xml:926
msgid "Default: fqdn"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:930
+#: sssd-ldap-attributes.5.xml:932
msgid "ldap_host_serverhostname (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:937
+#: sssd-ldap-attributes.5.xml:939
msgid "Default: serverHostname"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:943
+#: sssd-ldap-attributes.5.xml:945
msgid "ldap_host_member_of (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:946
+#: sssd-ldap-attributes.5.xml:948
msgid "The LDAP attribute that lists the host's group memberships."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:956
+#: sssd-ldap-attributes.5.xml:958
msgid "ldap_host_ssh_public_key (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:959
+#: sssd-ldap-attributes.5.xml:961
msgid "The LDAP attribute that contains the host's SSH public keys."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:969
+#: sssd-ldap-attributes.5.xml:971
msgid "ldap_host_uuid (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:972
+#: sssd-ldap-attributes.5.xml:974
msgid "The LDAP attribute that contains the UUID/GUID of an LDAP host object."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:985
+#: sssd-ldap-attributes.5.xml:987
msgid "SERVICE ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:989
+#: sssd-ldap-attributes.5.xml:991
msgid "ldap_service_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:992
+#: sssd-ldap-attributes.5.xml:994
msgid "The object class of a service entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1001
+#: sssd-ldap-attributes.5.xml:1003
msgid "ldap_service_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1004
+#: sssd-ldap-attributes.5.xml:1006
msgid ""
"The LDAP attribute that contains the name of service attributes and their "
"aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1014
+#: sssd-ldap-attributes.5.xml:1016
msgid "ldap_service_port (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1017
+#: sssd-ldap-attributes.5.xml:1019
msgid "The LDAP attribute that contains the port managed by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1021
+#: sssd-ldap-attributes.5.xml:1023
msgid "Default: ipServicePort"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1027
+#: sssd-ldap-attributes.5.xml:1029
msgid "ldap_service_proto (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1030
+#: sssd-ldap-attributes.5.xml:1032
msgid ""
"The LDAP attribute that contains the protocols understood by this service."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1034
+#: sssd-ldap-attributes.5.xml:1036
msgid "Default: ipServiceProtocol"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1043
+#: sssd-ldap-attributes.5.xml:1045
msgid "SUDO ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1047
+#: sssd-ldap-attributes.5.xml:1049
msgid "ldap_sudorule_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1050
+#: sssd-ldap-attributes.5.xml:1052
msgid "The object class of a sudo rule entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1053
+#: sssd-ldap-attributes.5.xml:1055
msgid "Default: sudoRole"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1059
+#: sssd-ldap-attributes.5.xml:1061
msgid "ldap_sudorule_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1062
+#: sssd-ldap-attributes.5.xml:1064
msgid "The LDAP attribute that corresponds to the sudo rule name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1072
+#: sssd-ldap-attributes.5.xml:1074
msgid "ldap_sudorule_command (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1075
+#: sssd-ldap-attributes.5.xml:1077
msgid "The LDAP attribute that corresponds to the command name."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1079
+#: sssd-ldap-attributes.5.xml:1081
msgid "Default: sudoCommand"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1085
+#: sssd-ldap-attributes.5.xml:1087
msgid "ldap_sudorule_host (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1088
+#: sssd-ldap-attributes.5.xml:1090
msgid ""
"The LDAP attribute that corresponds to the host name (or host IP address, "
"host IP network, or host netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1093
+#: sssd-ldap-attributes.5.xml:1095
msgid "Default: sudoHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1099
+#: sssd-ldap-attributes.5.xml:1101
msgid "ldap_sudorule_user (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1102
+#: sssd-ldap-attributes.5.xml:1104
msgid ""
"The LDAP attribute that corresponds to the user name (or UID, group name or "
"user's netgroup)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1106
+#: sssd-ldap-attributes.5.xml:1108
msgid "Default: sudoUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1112
+#: sssd-ldap-attributes.5.xml:1114
msgid "ldap_sudorule_option (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1115
+#: sssd-ldap-attributes.5.xml:1117
msgid "The LDAP attribute that corresponds to the sudo options."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1119
+#: sssd-ldap-attributes.5.xml:1121
msgid "Default: sudoOption"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1125
+#: sssd-ldap-attributes.5.xml:1127
msgid "ldap_sudorule_runasuser (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1128
+#: sssd-ldap-attributes.5.xml:1130
msgid ""
"The LDAP attribute that corresponds to the user name that commands may be "
"run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1132
+#: sssd-ldap-attributes.5.xml:1134
msgid "Default: sudoRunAsUser"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1138
+#: sssd-ldap-attributes.5.xml:1140
msgid "ldap_sudorule_runasgroup (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1141
+#: sssd-ldap-attributes.5.xml:1143
msgid ""
"The LDAP attribute that corresponds to the group name or group GID that "
"commands may be run as."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1145
+#: sssd-ldap-attributes.5.xml:1147
msgid "Default: sudoRunAsGroup"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1151
+#: sssd-ldap-attributes.5.xml:1153
msgid "ldap_sudorule_notbefore (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1154
+#: sssd-ldap-attributes.5.xml:1156
msgid ""
"The LDAP attribute that corresponds to the start date/time for when the sudo "
"rule is valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1158
+#: sssd-ldap-attributes.5.xml:1160
msgid "Default: sudoNotBefore"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1164
+#: sssd-ldap-attributes.5.xml:1166
msgid "ldap_sudorule_notafter (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1167
+#: sssd-ldap-attributes.5.xml:1169
msgid ""
"The LDAP attribute that corresponds to the expiration date/time, after which "
"the sudo rule will no longer be valid."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1172
+#: sssd-ldap-attributes.5.xml:1174
msgid "Default: sudoNotAfter"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1178
+#: sssd-ldap-attributes.5.xml:1180
msgid "ldap_sudorule_order (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1181
+#: sssd-ldap-attributes.5.xml:1183
msgid "The LDAP attribute that corresponds to the ordering index of the rule."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1185
+#: sssd-ldap-attributes.5.xml:1187
msgid "Default: sudoOrder"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1194
+#: sssd-ldap-attributes.5.xml:1196
msgid "AUTOFS ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1201
+#: sssd-ldap-attributes.5.xml:1203
msgid "IP HOST ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1205
+#: sssd-ldap-attributes.5.xml:1207
msgid "ldap_iphost_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1208
+#: sssd-ldap-attributes.5.xml:1210
msgid "The object class of an iphost entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1211
+#: sssd-ldap-attributes.5.xml:1213
msgid "Default: ipHost"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1217
+#: sssd-ldap-attributes.5.xml:1219
msgid "ldap_iphost_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1220
+#: sssd-ldap-attributes.5.xml:1222
msgid ""
"The LDAP attribute that contains the name of the IP host attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1230
+#: sssd-ldap-attributes.5.xml:1232
msgid "ldap_iphost_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1233
+#: sssd-ldap-attributes.5.xml:1235
msgid "The LDAP attribute that contains the IP host address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1237
+#: sssd-ldap-attributes.5.xml:1239
msgid "Default: ipHostNumber"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><title>
-#: sssd-ldap-attributes.5.xml:1246
+#: sssd-ldap-attributes.5.xml:1248
msgid "IP NETWORK ATTRIBUTES"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1250
+#: sssd-ldap-attributes.5.xml:1252
msgid "ldap_ipnetwork_object_class (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1253
+#: sssd-ldap-attributes.5.xml:1255
msgid "The object class of an ipnetwork entry in LDAP."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1256
+#: sssd-ldap-attributes.5.xml:1258
msgid "Default: ipNetwork"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1262
+#: sssd-ldap-attributes.5.xml:1264
msgid "ldap_ipnetwork_name (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1265
+#: sssd-ldap-attributes.5.xml:1267
msgid ""
"The LDAP attribute that contains the name of the IP network attributes and "
"their aliases."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
-#: sssd-ldap-attributes.5.xml:1275
+#: sssd-ldap-attributes.5.xml:1277
msgid "ldap_ipnetwork_number (string)"
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1278
+#: sssd-ldap-attributes.5.xml:1280
msgid "The LDAP attribute that contains the IP network address."
msgstr ""
#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
-#: sssd-ldap-attributes.5.xml:1282
+#: sssd-ldap-attributes.5.xml:1284
msgid "Default: ipNetworkNumber"
msgstr ""