Units
Translation components API.
See the Weblate's Web API documentation for detailed description of the API.
GET /api/translations/freeipa/ipa-4-8/en/units/?format=api&page=93
{ "count": 4657, "next": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/units/?format=api&page=94", "previous": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/units/?format=api&page=92", "results": [ { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Add groups as member managers for user group '${primary_key}'" ], "previous_source": "", "target": [ "Add groups as member managers for user group '${primary_key}'" ], "id_hash": -4556656272376480055, "content_hash": -4556656272376480055, "location": "ipaserver/plugins/internal.py:823", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3401, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534183/?format=api", "priority": 100, "id": 4534183, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=40c381433171bec9", "url": "https://translate.fedoraproject.org/api/units/4534183/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:53.454424Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Remove groups from member managers for user group '${primary_key}'" ], "previous_source": "", "target": [ "Remove groups from member managers for user group '${primary_key}'" ], "id_hash": 1158907474545450279, "content_hash": 1158907474545450279, "location": "ipaserver/plugins/internal.py:827", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3402, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534187/?format=api", "priority": 100, "id": 4534187, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=901544353bd39d27", "url": "https://translate.fedoraproject.org/api/units/4534187/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:53.506157Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Add users as member managers for user group '${primary_key}'" ], "previous_source": "", "target": [ "Add users as member managers for user group '${primary_key}'" ], "id_hash": -3216841027952105944, "content_hash": -3216841027952105944, "location": "ipaserver/plugins/internal.py:831", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3403, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534189/?format=api", "priority": 100, "id": 4534189, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=535b7c20ee032628", "url": "https://translate.fedoraproject.org/api/units/4534189/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:53.542329Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Remove users from member managers for user group '${primary_key}'" ], "previous_source": "", "target": [ "Remove users from member managers for user group '${primary_key}'" ], "id_hash": -4417185386331369375, "content_hash": -4417185386331369375, "location": "ipaserver/plugins/internal.py:835", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3404, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534193/?format=api", "priority": 100, "id": 4534193, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=42b3014b5cac1061", "url": "https://translate.fedoraproject.org/api/units/4534193/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:53.597426Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Add groups as member managers for host group '${primary_key}'" ], "previous_source": "", "target": [ "Add groups as member managers for host group '${primary_key}'" ], "id_hash": 2771595579643191096, "content_hash": 2771595579643191096, "location": "ipaserver/plugins/internal.py:1057", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3507, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534407/?format=api", "priority": 100, "id": 4534407, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=a676af7ec1acdf38", "url": "https://translate.fedoraproject.org/api/units/4534407/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:57.998800Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Remove groups from member managers for host group '${primary_key}'" ], "previous_source": "", "target": [ "Remove groups from member managers for host group '${primary_key}'" ], "id_hash": -4533735807311216191, "content_hash": -4533735807311216191, "location": "ipaserver/plugins/internal.py:1061", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3508, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534411/?format=api", "priority": 100, "id": 4534411, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=4114ef4dd3bf01c1", "url": "https://translate.fedoraproject.org/api/units/4534411/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:58.052252Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Add users as member managers for host group '${primary_key}'" ], "previous_source": "", "target": [ "Add users as member managers for host group '${primary_key}'" ], "id_hash": -4634068002982109234, "content_hash": -4634068002982109234, "location": "ipaserver/plugins/internal.py:1065", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3509, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534414/?format=api", "priority": 100, "id": 4534414, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=3fb07bb4213f5fce", "url": "https://translate.fedoraproject.org/api/units/4534414/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:58.102541Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Remove users from member managers for host group '${primary_key}'" ], "previous_source": "", "target": [ "Remove users from member managers for host group '${primary_key}'" ], "id_hash": 477891373188824260, "content_hash": 477891373188824260, "location": "ipaserver/plugins/internal.py:1069", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3510, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4534417/?format=api", "priority": 100, "id": 4534417, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=86a1cfac0424bcc4", "url": "https://translate.fedoraproject.org/api/units/4534417/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T04:59:58.149693Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "<ol>\n<li>\n<p>\n<a href=\"ca.crt\" id=\"ca-link\" class=\"btn btn-default\">Import Certificate Authority certificate</a>\n</p>\n<p>\n Make sure you select <b>all three</b> checkboxes.\n</p>\n</li>\n<li>\n In the address bar of Firefox, type <code>about:config</code> to display the list of current configuration options.\n</li>\n<li>\n In the Filter field, type <code>negotiate</code> to restrict the list of options.\n</li>\n<li>\n Double-click the <code>network.negotiate-auth.trusted-uris</code> entry to display the Enter string value dialog box.\n</li>\n<li>\n Enter the name of the domain against which you want to authenticate, for example, <code class=\"example-domain\">.example.com</code>.\n</li>\n<li><a href=\"../ui/index.html\" id=\"return-link\" class=\"btn btn-default\">Return to Web UI</a></li>\n</ol>\n\n" ], "previous_source": "", "target": [ "<ol>\n<li>\n<p>\n<a href=\"ca.crt\" id=\"ca-link\" class=\"btn btn-default\">Import Certificate Authority certificate</a>\n</p>\n<p>\n Make sure you select <b>all three</b> checkboxes.\n</p>\n</li>\n<li>\n In the address bar of Firefox, type <code>about:config</code> to display the list of current configuration options.\n</li>\n<li>\n In the Filter field, type <code>negotiate</code> to restrict the list of options.\n</li>\n<li>\n Double-click the <code>network.negotiate-auth.trusted-uris</code> entry to display the Enter string value dialog box.\n</li>\n<li>\n Enter the name of the domain against which you want to authenticate, for example, <code class=\"example-domain\">.example.com</code>.\n</li>\n<li><a href=\"../ui/index.html\" id=\"return-link\" class=\"btn btn-default\">Return to Web UI</a></li>\n</ol>\n\n" ], "id_hash": -6895733228121365049, "content_hash": -6895733228121365049, "location": "ipaserver/plugins/internal.py:1747", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3816, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 95, "source_unit": "https://translate.fedoraproject.org/api/units/4535049/?format=api", "priority": 100, "id": 4535049, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=204d6f2a07f7e5c7", "url": "https://translate.fedoraproject.org/api/units/4535049/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:10.992587Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "<h3>\n Enable SPNEGO (Simple and Protected GSSAPI Negotiation Mechanism) to Use Kerberos Authentication\n in Chrome\n</h3>\n<ol>\n<li>\n Make sure you have the necessary directory created by running:\n<div><code>\n [root@client]# mkdir -p /etc/opt/chrome/policies/managed/\n</code></div>\n</li>\n<li>\n Create a new <code>/etc/opt/chrome/policies/managed/mydomain.json</code> file with write privileges limited to the system administrator or root, and include the following line:\n<div><code>\n { \"AuthServerWhitelist\": \"*<span class=\"example-domain\">.example.com</span>\" }\n</code></div>\n<div>\n You can do this by running:\n</div>\n<div><code>\n [root@server]# echo '{ \"AuthServerWhitelist\": \"*<span class=\"example-domain\">.example.com</span>\" }' > /etc/opt/chrome/policies/managed/mydomain.json\n</code></div>\n</li>\n</ol>\n<ol>\n<p>\n<strong>Note:</strong> If using Chromium, use <code>/etc/chromium/policies/managed/</code> instead of <code>/etc/opt/chrome/policies/managed/</code> for the two SPNEGO Chrome configuration steps above.\n</p>\n</ol>\n\n" ], "previous_source": "", "target": [ "<h3>\n Enable SPNEGO (Simple and Protected GSSAPI Negotiation Mechanism) to Use Kerberos Authentication\n in Chrome\n</h3>\n<ol>\n<li>\n Make sure you have the necessary directory created by running:\n<div><code>\n [root@client]# mkdir -p /etc/opt/chrome/policies/managed/\n</code></div>\n</li>\n<li>\n Create a new <code>/etc/opt/chrome/policies/managed/mydomain.json</code> file with write privileges limited to the system administrator or root, and include the following line:\n<div><code>\n { \"AuthServerWhitelist\": \"*<span class=\"example-domain\">.example.com</span>\" }\n</code></div>\n<div>\n You can do this by running:\n</div>\n<div><code>\n [root@server]# echo '{ \"AuthServerWhitelist\": \"*<span class=\"example-domain\">.example.com</span>\" }' > /etc/opt/chrome/policies/managed/mydomain.json\n</code></div>\n</li>\n</ol>\n<ol>\n<p>\n<strong>Note:</strong> If using Chromium, use <code>/etc/chromium/policies/managed/</code> instead of <code>/etc/opt/chrome/policies/managed/</code> for the two SPNEGO Chrome configuration steps above.\n</p>\n</ol>\n\n" ], "id_hash": -8838861041918540403, "content_hash": -8838861041918540403, "location": "ipaserver/plugins/internal.py:1824", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3819, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 105, "source_unit": "https://translate.fedoraproject.org/api/units/4535056/?format=api", "priority": 100, "id": 4535056, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=05560eb67168058d", "url": "https://translate.fedoraproject.org/api/units/4535056/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:11.121897Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Configure this server as a trust agent." ], "previous_source": "", "target": [ "Configure this server as a trust agent." ], "id_hash": 104478710516355521, "content_hash": 104478710516355521, "location": "ipaserver/plugins/trust.py:1836", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4072, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/4536821/?format=api", "priority": 100, "id": 4536821, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=81732ed56aeb11c1", "url": "https://translate.fedoraproject.org/api/units/4536821/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:47.589898Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Enable support for trusted domains for old clients" ], "previous_source": "", "target": [ "Enable support for trusted domains for old clients" ], "id_hash": -5440424043847228957, "content_hash": -5440424043847228957, "location": "ipaserver/plugins/trust.py:1852", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4073, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/4536825/?format=api", "priority": 100, "id": 4536825, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=347fbb281efde1e3", "url": "https://translate.fedoraproject.org/api/units/4536825/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:47.654660Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "not allowed to remotely add agent" ], "previous_source": "", "target": [ "not allowed to remotely add agent" ], "id_hash": 5177995408904983404, "content_hash": 5177995408904983404, "location": "ipaserver/plugins/trust.py:1868", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4074, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4536828/?format=api", "priority": 100, "id": 4536828, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=c7dbef63e462936c", "url": "https://translate.fedoraproject.org/api/units/4536828/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:47.718102Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "ID View cannot be applied to IPA master" ], "previous_source": "", "target": [ "ID View cannot be applied to IPA master" ], "id_hash": -4316101054013146247, "content_hash": -4316101054013146247, "location": "ipaserver/plugins/idviews.py:394", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2579, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/4537369/?format=api", "priority": 100, "id": 4537369, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=441a20f584db7b79", "url": "https://translate.fedoraproject.org/api/units/4537369/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:00:58.940517Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "OTP max life" ], "previous_source": "", "target": [ "OTP max life" ], "id_hash": 1192746607501724414, "content_hash": 1192746607501724414, "location": "ipaserver/plugins/krbtpolicy.py:152", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2782, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537818/?format=api", "priority": 100, "id": 4537818, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=908d7cb857314afe", "url": "https://translate.fedoraproject.org/api/units/4537818/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.222492Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "OTP token maximum ticket life (seconds)" ], "previous_source": "", "target": [ "OTP token maximum ticket life (seconds)" ], "id_hash": -4190685273861551284, "content_hash": -4190685273861551284, "location": "ipaserver/plugins/krbtpolicy.py:153", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2783, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4537823/?format=api", "priority": 100, "id": 4537823, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=45d7b1f256058b4c", "url": "https://translate.fedoraproject.org/api/units/4537823/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.320466Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "OTP max renew" ], "previous_source": "", "target": [ "OTP max renew" ], "id_hash": -783691698478798746, "content_hash": -783691698478798746, "location": "ipaserver/plugins/krbtpolicy.py:157", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2784, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537828/?format=api", "priority": 100, "id": 4537828, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=751fc48d6abfa866", "url": "https://translate.fedoraproject.org/api/units/4537828/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.374712Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "OTP token ticket maximum renewable age (seconds)" ], "previous_source": "", "target": [ "OTP token ticket maximum renewable age (seconds)" ], "id_hash": -5313096492874637922, "content_hash": -5313096492874637922, "location": "ipaserver/plugins/krbtpolicy.py:158", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2785, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/4537834/?format=api", "priority": 100, "id": 4537834, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=364416e3c4d55d9e", "url": "https://translate.fedoraproject.org/api/units/4537834/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.445186Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "RADIUS max life" ], "previous_source": "", "target": [ "RADIUS max life" ], "id_hash": -3572321391083173083, "content_hash": -3572321391083173083, "location": "ipaserver/plugins/krbtpolicy.py:162", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2786, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537839/?format=api", "priority": 100, "id": 4537839, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=4e6c909f2cf54b25", "url": "https://translate.fedoraproject.org/api/units/4537839/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.522038Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "RADIUS maximum ticket life (seconds)" ], "previous_source": "", "target": [ "RADIUS maximum ticket life (seconds)" ], "id_hash": 6279336821049612455, "content_hash": 6279336821049612455, "location": "ipaserver/plugins/krbtpolicy.py:163", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2787, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/4537845/?format=api", "priority": 100, "id": 4537845, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=d724af91c3b158a7", "url": "https://translate.fedoraproject.org/api/units/4537845/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.599276Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "RADIUS max renew" ], "previous_source": "", "target": [ "RADIUS max renew" ], "id_hash": 1045911954253004312, "content_hash": 1045911954253004312, "location": "ipaserver/plugins/krbtpolicy.py:167", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2788, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537851/?format=api", "priority": 100, "id": 4537851, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=8e83d3618395be18", "url": "https://translate.fedoraproject.org/api/units/4537851/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.669137Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "RADIUS ticket maximum renewable age (seconds)" ], "previous_source": "", "target": [ "RADIUS ticket maximum renewable age (seconds)" ], "id_hash": -3885034390000714569, "content_hash": -3885034390000714569, "location": "ipaserver/plugins/krbtpolicy.py:168", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2789, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4537856/?format=api", "priority": 100, "id": 4537856, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=4a1595ce5bd4bcb7", "url": "https://translate.fedoraproject.org/api/units/4537856/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.738171Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "PKINIT max life" ], "previous_source": "", "target": [ "PKINIT max life" ], "id_hash": 4182456299633533799, "content_hash": 4182456299633533799, "location": "ipaserver/plugins/krbtpolicy.py:172", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2790, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537860/?format=api", "priority": 100, "id": 4537860, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=ba0b11d84c406367", "url": "https://translate.fedoraproject.org/api/units/4537860/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.797678Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "PKINIT maximum ticket life (seconds)" ], "previous_source": "", "target": [ "PKINIT maximum ticket life (seconds)" ], "id_hash": 6537831907586775605, "content_hash": 6537831907586775605, "location": "ipaserver/plugins/krbtpolicy.py:173", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2791, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/4537865/?format=api", "priority": 100, "id": 4537865, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=dabb0b7b24ec9a35", "url": "https://translate.fedoraproject.org/api/units/4537865/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.877264Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "PKINIT max renew" ], "previous_source": "", "target": [ "PKINIT max renew" ], "id_hash": 6891275383822927343, "content_hash": 6891275383822927343, "location": "ipaserver/plugins/krbtpolicy.py:177", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2792, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537871/?format=api", "priority": 100, "id": 4537871, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=dfa2ba733628c5ef", "url": "https://translate.fedoraproject.org/api/units/4537871/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:08.964806Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "PKINIT ticket maximum renewable age (seconds)" ], "previous_source": "", "target": [ "PKINIT ticket maximum renewable age (seconds)" ], "id_hash": -7634298597051346933, "content_hash": -7634298597051346933, "location": "ipaserver/plugins/krbtpolicy.py:178", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2793, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4537875/?format=api", "priority": 100, "id": 4537875, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=160d85dfcd7dd00b", "url": "https://translate.fedoraproject.org/api/units/4537875/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:09.032538Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Hardened max life" ], "previous_source": "", "target": [ "Hardened max life" ], "id_hash": 3464572822564908835, "content_hash": 3464572822564908835, "location": "ipaserver/plugins/krbtpolicy.py:182", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2794, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537880/?format=api", "priority": 100, "id": 4537880, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=b014a2a043742f23", "url": "https://translate.fedoraproject.org/api/units/4537880/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:09.119313Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Hardened ticket maximum ticket life (seconds)" ], "previous_source": "", "target": [ "Hardened ticket maximum ticket life (seconds)" ], "id_hash": 8637668020817728070, "content_hash": 8637668020817728070, "location": "ipaserver/plugins/krbtpolicy.py:183", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2795, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4537885/?format=api", "priority": 100, "id": 4537885, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=f7df294cf4979246", "url": "https://translate.fedoraproject.org/api/units/4537885/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:09.199506Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Hardened max renew" ], "previous_source": "", "target": [ "Hardened max renew" ], "id_hash": -1662185023652641178, "content_hash": -1662185023652641178, "location": "ipaserver/plugins/krbtpolicy.py:187", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2796, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4537889/?format=api", "priority": 100, "id": 4537889, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=68eebb871235c666", "url": "https://translate.fedoraproject.org/api/units/4537889/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:09.258001Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Hardened ticket maximum renewable age (seconds)" ], "previous_source": "", "target": [ "Hardened ticket maximum renewable age (seconds)" ], "id_hash": -411574003875699523, "content_hash": -411574003875699523, "location": "ipaserver/plugins/krbtpolicy.py:188", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2797, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4537894/?format=api", "priority": 100, "id": 4537894, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=7a49cb9fc43424bd", "url": "https://translate.fedoraproject.org/api/units/4537894/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:09.327693Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Object does not belong to a trusted domain" ], "previous_source": "", "target": [ "Object does not belong to a trusted domain" ], "id_hash": -2504752589213449486, "content_hash": -2504752589213449486, "location": "ipaserver/dcerpc.py:415", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4599, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/4538063/?format=api", "priority": 100, "id": 4538063, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=5d3d54ca75b142f2", "url": "https://translate.fedoraproject.org/api/units/4538063/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:12.260448Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Unable to create new TLS context (OpenSSL failed to initialize or to load certificates)\n" ], "previous_source": "", "target": [ "Unable to create new TLS context (OpenSSL failed to initialize or to load certificates)\n" ], "id_hash": -5313416544898860269, "content_hash": -5313416544898860269, "location": "util/ipa_ldap.c:147", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4656, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 14, "source_unit": "https://translate.fedoraproject.org/api/units/4538212/?format=api", "priority": 100, "id": 4538212, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=3642f3cdd99ebb13", "url": "https://translate.fedoraproject.org/api/units/4538212/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:14.915108Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "SASL Bind failed\n" ], "previous_source": "", "target": [ "SASL Bind failed\n" ], "id_hash": -4593765379452291843, "content_hash": -4593765379452291843, "location": "client/ipa-join.c:243, client/ipa-getkeytab.c:221", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 6, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4538309/?format=api", "priority": 100, "id": 4538309, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=403faab9e84234fd", "url": "https://translate.fedoraproject.org/api/units/4538309/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T05:01:16.719015Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "{} is required by the IPA master" ], "previous_source": "", "target": [ "{} is required by the IPA master" ], "id_hash": -7689192590702584006, "content_hash": -7689192590702584006, "location": "ipaserver/plugins/service.py:294", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2472, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 7, "source_unit": "https://translate.fedoraproject.org/api/units/4668295/?format=api", "priority": 100, "id": 4668295, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=154a8013ed9b5f3a", "url": "https://translate.fedoraproject.org/api/units/4668295/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:04:07.902964Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Record Settings" ], "previous_source": "", "target": [ "Record Settings" ], "id_hash": -2720545464297677560, "content_hash": -2720545464297677560, "location": "ipaserver/plugins/internal.py:254", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3084, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 2, "source_unit": "https://translate.fedoraproject.org/api/units/4668758/?format=api", "priority": 100, "id": 4668758, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=5a3eae50753c9d08", "url": "https://translate.fedoraproject.org/api/units/4668758/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:04:26.650117Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Are you sure you want to change default group?" ], "previous_source": "", "target": [ "Are you sure you want to change default group?" ], "id_hash": 9209864572561197647, "content_hash": 9209864572561197647, "location": "ipaserver/plugins/internal.py:527", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3216, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 9, "source_unit": "https://translate.fedoraproject.org/api/units/4668893/?format=api", "priority": 100, "id": 4668893, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=ffd0030864f70a4f", "url": "https://translate.fedoraproject.org/api/units/4668893/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:04:32.074161Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "\nService Constrained Delegation\n\nManage rules to allow constrained delegation of credentials so\nthat a service can impersonate a user when communicating with another\nservice without requiring the user to actually forward their TGT.\nThis makes for a much better method of delegating credentials as it\nprevents exposure of the short term secret of the user.\n\nThe naming convention is to append the word \"target\" or \"targets\" to\na matching rule name. This is not mandatory but helps conceptually\nto associate rules and targets.\n\nA rule consists of two things:\n - A list of targets the rule applies to\n - A list of memberPrincipals that are allowed to delegate for\n those targets\n\nA target consists of a list of principals that can be delegated.\n\nIn English, a rule says that this principal can delegate as this\nlist of principals, as defined by these targets.\n\nIn both a rule and a target Kerberos principals may be specified\nby their name or an alias and the realm can be omitted. Additionally,\nhosts can be specified by their names. If Kerberos principal specified\nhas a single component and does not end with '$' sign, it will be treated\nas a host name. Kerberos principal names ending with '$' are typically\nused as aliases for Active Directory-related services.\n\nEXAMPLES:\n\n Add a new constrained delegation rule:\n ipa servicedelegationrule-add ftp-delegation\n\n Add a new constrained delegation target:\n ipa servicedelegationtarget-add ftp-delegation-target\n\n Add a principal to the rule:\n ipa servicedelegationrule-add-member --principals=ftp/ipa.example.com ftp-delegation\n\n Add a host principal of the host 'ipa.example.com' to the rule:\n ipa servicedelegationrule-add-member --principals=ipa.example.com ftp-delegation\n\n Add our target to the rule:\n ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-delegation-target ftp-delegation\n\n Add a principal to the target:\n ipa servicedelegationtarget-add-member --principals=ldap/ipa.example.com ftp-delegation-target\n\n Display information about a named delegation rule and target:\n ipa servicedelegationrule_show ftp-delegation\n ipa servicedelegationtarget_show ftp-delegation-target\n\n Remove a constrained delegation:\n ipa servicedelegationrule-del ftp-delegation-target\n ipa servicedelegationtarget-del ftp-delegation\n\nIn this example the ftp service can get a TGT for the ldap service on\nthe bound user's behalf.\n\nIt is strongly discouraged to modify the delegations that ship with\nIPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\nipa-ldap-delegation-targets. Incorrect changes can remove the ability\nto delegate, causing the framework to stop functioning.\n" ], "previous_source": "", "target": [ "\nService Constrained Delegation\n\nManage rules to allow constrained delegation of credentials so\nthat a service can impersonate a user when communicating with another\nservice without requiring the user to actually forward their TGT.\nThis makes for a much better method of delegating credentials as it\nprevents exposure of the short term secret of the user.\n\nThe naming convention is to append the word \"target\" or \"targets\" to\na matching rule name. This is not mandatory but helps conceptually\nto associate rules and targets.\n\nA rule consists of two things:\n - A list of targets the rule applies to\n - A list of memberPrincipals that are allowed to delegate for\n those targets\n\nA target consists of a list of principals that can be delegated.\n\nIn English, a rule says that this principal can delegate as this\nlist of principals, as defined by these targets.\n\nIn both a rule and a target Kerberos principals may be specified\nby their name or an alias and the realm can be omitted. Additionally,\nhosts can be specified by their names. If Kerberos principal specified\nhas a single component and does not end with '$' sign, it will be treated\nas a host name. Kerberos principal names ending with '$' are typically\nused as aliases for Active Directory-related services.\n\nEXAMPLES:\n\n Add a new constrained delegation rule:\n ipa servicedelegationrule-add ftp-delegation\n\n Add a new constrained delegation target:\n ipa servicedelegationtarget-add ftp-delegation-target\n\n Add a principal to the rule:\n ipa servicedelegationrule-add-member --principals=ftp/ipa.example.com ftp-delegation\n\n Add a host principal of the host 'ipa.example.com' to the rule:\n ipa servicedelegationrule-add-member --principals=ipa.example.com ftp-delegation\n\n Add our target to the rule:\n ipa servicedelegationrule-add-target --servicedelegationtargets=ftp-delegation-target ftp-delegation\n\n Add a principal to the target:\n ipa servicedelegationtarget-add-member --principals=ldap/ipa.example.com ftp-delegation-target\n\n Display information about a named delegation rule and target:\n ipa servicedelegationrule_show ftp-delegation\n ipa servicedelegationtarget_show ftp-delegation-target\n\n Remove a constrained delegation:\n ipa servicedelegationrule-del ftp-delegation-target\n ipa servicedelegationtarget-del ftp-delegation\n\nIn this example the ftp service can get a TGT for the ldap service on\nthe bound user's behalf.\n\nIt is strongly discouraged to modify the delegations that ship with\nIPA, ipa-http-delegation and its targets ipa-cifs-delegation-targets and\nipa-ldap-delegation-targets. Incorrect changes can remove the ability\nto delegate, causing the framework to stop functioning.\n" ], "id_hash": 2216919177876129767, "content_hash": 2216919177876129767, "location": "ipaserver/plugins/servicedelegation.py:26", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2713, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 354, "source_unit": "https://translate.fedoraproject.org/api/units/4669559/?format=api", "priority": 100, "id": 4669559, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=9ec4143f1d0ec7e7", "url": "https://translate.fedoraproject.org/api/units/4669559/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:04:59.970699Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Malformed principal: %(error)s" ], "previous_source": "", "target": [ "Malformed principal: %(error)s" ], "id_hash": 475788887638077160, "content_hash": 475788887638077160, "location": "ipaserver/plugins/servicedelegation.py:189", "context": "", "note": "", "flags": "python-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2716, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 3, "source_unit": "https://translate.fedoraproject.org/api/units/4669565/?format=api", "priority": 100, "id": 4669565, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=869a5778f3beeee8", "url": "https://translate.fedoraproject.org/api/units/4669565/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:05:00.228363Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\n" ], "previous_source": "", "target": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 \\\n --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 \\\n --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\n" ], "id_hash": 2769494449113747302, "content_hash": 2769494449113747302, "location": "ipaserver/plugins/idrange.py:57", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 2497, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 828, "source_unit": "https://translate.fedoraproject.org/api/units/4670940/?format=api", "priority": 100, "id": 4670940, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=a66f38872ed74f66", "url": "https://translate.fedoraproject.org/api/units/4670940/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:05:57.756910Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Member ID user overrides" ], "previous_source": "", "target": [ "Member ID user overrides" ], "id_hash": -2862352004531518894, "content_hash": -2862352004531518894, "location": "ipaserver/plugins/baseldap.py:124", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4504, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/4671201/?format=api", "priority": 100, "id": 4671201, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=5846e2046bc58252", "url": "https://translate.fedoraproject.org/api/units/4671201/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:08.831862Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Indirect Member ID user overrides" ], "previous_source": "", "target": [ "Indirect Member ID user overrides" ], "id_hash": -4058496683153980417, "content_hash": -4058496683153980417, "location": "ipaserver/plugins/baseldap.py:126", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4505, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 5, "source_unit": "https://translate.fedoraproject.org/api/units/4671203/?format=api", "priority": 100, "id": 4671203, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=47ad52c4fe8183ff", "url": "https://translate.fedoraproject.org/api/units/4671203/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:08.893805Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "these attributes are not allowed: %(attrs)s" ], "previous_source": "", "target": [ "these attributes are not allowed: %(attrs)s" ], "id_hash": -3173101375749796870, "content_hash": -3173101375749796870, "location": "ipaserver/plugins/baseldap.py:884", "context": "", "note": "", "flags": "python-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4518, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 6, "source_unit": "https://translate.fedoraproject.org/api/units/4671231/?format=api", "priority": 100, "id": 4671231, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=53f6e11c4e214bfa", "url": "https://translate.fedoraproject.org/api/units/4671231/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:10.080255Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Password is too long!\n" ], "previous_source": "", "target": [ "Password is too long!\n" ], "id_hash": -2076212357124560164, "content_hash": -2076212357124560164, "location": "util/ipa_krb5.c:988", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 4646, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/4671668/?format=api", "priority": 100, "id": 4671668, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=632fcfdc87506adc", "url": "https://translate.fedoraproject.org/api/units/4671668/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:27.500656Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Passwords do not match!\n" ], "previous_source": "", "target": [ "Passwords do not match!\n" ], "id_hash": -226776870151495329, "content_hash": -226776870151495329, "location": "client/ipa-getkeytab.c:603", "context": "", "note": "", "flags": "c-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 100, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/4671771/?format=api", "priority": 100, "id": 4671771, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=7cda53a35b58615f", "url": "https://translate.fedoraproject.org/api/units/4671771/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:31.697111Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n" ], "previous_source": "", "target": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n" ], "id_hash": 2100861487553895582, "content_hash": 2100861487553895582, "location": "", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 1580, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 898, "source_unit": "https://translate.fedoraproject.org/api/units/4672283/?format=api", "priority": 100, "id": 4672283, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=9d27c2645ff2dc9e", "url": "https://translate.fedoraproject.org/api/units/4672283/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:53.159319Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\n=======\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n=======\n" ], "previous_source": "", "target": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\n=======\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n=======\n" ], "id_hash": 160957291323804816, "content_hash": 160957291323804816, "location": "", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 1799, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 900, "source_unit": "https://translate.fedoraproject.org/api/units/4672324/?format=api", "priority": 100, "id": 4672324, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=823bd5cdbd5d4c90", "url": "https://translate.fedoraproject.org/api/units/4672324/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:06:54.865809Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - dom_sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n" ], "previous_source": "", "target": [ "\nID ranges\n\nManage ID ranges used to map Posix IDs to SIDs and back.\n\nThere are two type of ID ranges which are both handled by this utility:\n\n - the ID ranges of the local domain\n - the ID ranges of trusted remote domains\n\nBoth types have the following attributes in common:\n\n - base-id: the first ID of the Posix ID range\n - range-size: the size of the range\n\nWith those two attributes a range object can reserve the Posix IDs starting\nwith base-id up to but not including base-id+range-size exclusively.\n\nAdditionally an ID range of the local domain may set\n - rid-base: the first RID(*) of the corresponding RID range\n - secondary-rid-base: first RID of the secondary RID range\n\nand an ID range of a trusted domain must set\n - rid-base: the first RID of the corresponding RID range\n - dom_sid: domain SID of the trusted domain\n\n\n\nEXAMPLE: Add a new ID range for a trusted domain\n\nSince there might be more than one trusted domain the domain SID must be given\nwhile creating the ID range.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=0 --dom-sid=S-1-5-21-123-456-789 trusted_dom_range\n\nThis ID range is then used by the IPA server and the SSSD IPA provider to\nassign Posix UIDs to users from the trusted domain.\n\nIf e.g. a range for a trusted domain is configured with the following values:\n base-id = 1200000\n range-size = 200000\n rid-base = 0\nthe RIDs 0 to 199999 are mapped to the Posix ID from 1200000 to 13999999. So\nRID 1000 <-> Posix ID 1201000\n\n\n\nEXAMPLE: Add a new ID range for the local domain\n\nTo create an ID range for the local domain it is not necessary to specify a\ndomain SID. But since it is possible that a user and a group can have the same\nvalue as Posix ID a second RID interval is needed to handle conflicts.\n\n ipa idrange-add --base-id=1200000 --range-size=200000 --rid-base=1000 --secondary-rid-base=1000000 local_range\n\nThe data from the ID ranges of the local domain are used by the IPA server\ninternally to assign SIDs to IPA users and groups. The SID will then be stored\nin the user or group objects.\n\nIf e.g. the ID range for the local domain is configured with the values from\nthe example above then a new user with the UID 1200007 will get the RID 1007.\nIf this RID is already used by a group the RID will be 1000007. This can only\nhappen if a user or a group object was created with a fixed ID because the\nautomatic assignment will not assign the same ID twice. Since there are only\nusers and groups sharing the same ID namespace it is sufficient to have only\none fallback range to handle conflicts.\n\nTo find the Posix ID for a given RID from the local domain it has to be\nchecked first if the RID falls in the primary or secondary RID range and\nthe rid-base or the secondary-rid-base has to be subtracted, respectively,\nand the base-id has to be added to get the Posix ID.\n\nTypically the creation of ID ranges happens behind the scenes and this CLI\nmust not be used at all. The ID range for the local domain will be created\nduring installation or upgrade from an older version. The ID range for a\ntrusted domain will be created together with the trust by 'ipa trust-add ...'.\n\nUSE CASES:\n\n Add an ID range from a transitively trusted domain\n\n If the trusted domain (A) trusts another domain (B) as well and this trust\n is transitive 'ipa trust-add domain-A' will only create a range for\n domain A. The ID range for domain B must be added manually.\n\n Add an additional ID range for the local domain\n\n If the ID range of the local domain is exhausted, i.e. no new IDs can be\n assigned to Posix users or groups by the DNA plugin, a new range has to be\n created to allow new users and groups to be added. (Currently there is no\n connection between this range CLI and the DNA plugin, but a future version\n might be able to modify the configuration of the DNS plugin as well)\n\nIn general it is not necessary to modify or delete ID ranges. If there is no\nother way to achieve a certain configuration than to modify or delete an ID\nrange it should be done with great care. Because UIDs are stored in the file\nsystem and are used for access control it might be possible that users are\nallowed to access files of other users if an ID range got deleted and reused\nfor a different domain.\n\n(*) The RID is typically the last integer of a user or group SID which follows\nthe domain SID. E.g. if the domain SID is S-1-5-21-123-456-789 and a user from\nthis domain has the SID S-1-5-21-123-456-789-1010 then 1010 id the RID of the\nuser. RIDs are unique in a domain, 32bit values and are used for users and\ngroups.\n\nWARNING:\n\nDNA plugin in 389-ds will allocate IDs based on the ranges configured for the\nlocal domain. Currently the DNA plugin *cannot* be reconfigured itself based\non the local ranges set via this family of commands.\n\nManual configuration change has to be done in the DNA plugin configuration for\nthe new local range. Specifically, The dnaNextRange attribute of 'cn=Posix\nIDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be\nmodified to match the new range.\n" ], "id_hash": -7353764572084977758, "content_hash": -7353764572084977758, "location": "", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 1984, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 898, "source_unit": "https://translate.fedoraproject.org/api/units/4672487/?format=api", "priority": 100, "id": 4672487, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=19f22e156705bfa2", "url": "https://translate.fedoraproject.org/api/units/4672487/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-08-04T08:07:01.771999Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Password or Password+One-Time Password" ], "previous_source": "", "target": [ "Password or Password+One-Time Password" ], "id_hash": -4247357508098309899, "content_hash": -4247357508098309899, "location": "ipaserver/plugins/internal.py:409, ipaserver/plugins/internal.py:1695", "context": "", "note": "", "flags": "", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3170, "has_suggestion": false, "has_comment": false, "has_failing_check": false, "num_words": 4, "source_unit": "https://translate.fedoraproject.org/api/units/5861829/?format=api", "priority": 100, "id": 5861829, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=450e5ad98fb640f5", "url": "https://translate.fedoraproject.org/api/units/5861829/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-09-04T16:31:21.140036Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Add user ID override into user group '${primary_key}'" ], "previous_source": "", "target": [ "Add user ID override into user group '${primary_key}'" ], "id_hash": -3843552410020246933, "content_hash": -3843552410020246933, "location": "ipaserver/plugins/internal.py:839", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3405, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/5861860/?format=api", "priority": 100, "id": 5861860, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=4aa8f57275258a6b", "url": "https://translate.fedoraproject.org/api/units/5861860/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-09-04T16:31:27.200025Z" }, { "translation": "https://translate.fedoraproject.org/api/translations/freeipa/ipa-4-8/en/?format=api", "source": [ "Remove user ID overrides from user group '${primary_key}'" ], "previous_source": "", "target": [ "Remove user ID overrides from user group '${primary_key}'" ], "id_hash": 8787234189241139571, "content_hash": 8787234189241139571, "location": "ipaserver/plugins/internal.py:875", "context": "", "note": "", "flags": "python-brace-format", "labels": [], "state": 100, "fuzzy": false, "translated": true, "approved": false, "position": 3423, "has_suggestion": false, "has_comment": false, "has_failing_check": true, "num_words": 8, "source_unit": "https://translate.fedoraproject.org/api/units/5861874/?format=api", "priority": 100, "id": 5861874, "web_url": "https://translate.fedoraproject.org/translate/freeipa/ipa-4-8/en/?checksum=f9f286f037e2c173", "url": "https://translate.fedoraproject.org/api/units/5861874/?format=api", "explanation": "", "extra_flags": "", "pending": false, "timestamp": "2020-09-04T16:31:27.714740Z" } ] }