Þ• Í 0 ˜ Ç - < $< (< T< U< W< j<
ˆ< –< §< ¾< Ë< æ< õ< = = (= @= ]= " w= ' š= l Â= ¿ /> R ï> ± B? @ ô? 5 5@ / k@ ›@ ³@ & È@ ï@ A 7 (A `A €A 2 ‘A ÄA Z áA F C > C 3 ßC * D >D ! RD tD ”D µD ÒD B ïD ) 2E ) \E * †E ±E # ÄE 3 èE % F 3 BF % vF œF ½F ÕF ìF üF G # 9G % ]G ƒG ¢G + ´G àG ýG # H AH [H xH ”H ³H ÌH # æH
I $I @I ]I pI ! I ²I ÍI 2 èI J 2 +J % ^J „J – K ( «K ÔK óK L & 'L w NL ! ÆL † èL oM ‰M . ¨M ! ×M % ùM N 2N 0 IN J zN ÅN & åN % O 2O P IO $ šO ( ¿O èO P "P 5 :P , pP 4 P . ÒP 2 Q A 4Q , vQ E £Q 3 éQ R ( :R # cR 4 ‡R ¼R + ÙR S $S ES RS " pS 5 “S
ÉS 6 ÔS $ T * 0T , [T ˆT ¦T ' ÀT , èT - U % CU ' iU > ‘U ÐU , ñU & V EV XV ! qV “V J ®V " ùV ) W ! FW - hW ( –W ¿W ØW ! ðW X !X 7X AX
QX # _X ƒX ˜X
¯X ºX ) ÉX óX Y #Y R 7Y U ŠY A àY V "Z A yZ ) »Z < åZ B "[ G e[ F [ . ô[ F #\ 8 j\ ; £\ Z ß\ ] :] E ˜] : Þ] > ^ ; X^ - ”^ 7 Â^ ú^ _ 0_ " G_ j_ ˆ_ % ¢_ È_
Ü_ ç_ F ú_ A` 4 S` 4 ˆ` Û ½` V ™a ; ða ; ,b ! hb 0 Šb »b Üb úb T c ' ic ! ‘c ³c ! Òc ôc 2 d 4 Ed zd - •d 3 Ãd
÷d e e .e Ie ge ˆe že ·e Ïe äe þe f >f Zf yf —f ·f % Òf N øf Gg fg ug ‹g £g * »g : æg % !h * Gh $ rh 5 —h 0 Íh + þh # *i Ni bi B yi > ¼i 4 ûi 9 0j v jj áj # k : %k $ `k …k . —k ' Æk îk ÿk l /l Il
Vl I dl & ®l f Õl 4 w K Cw Q w M áw W /x M ‡x Õx ìx
ýx M y Vy my †y + Ÿy ( Ëy
ôy ÿy z 2z Oz 2 pz * £z Îz äz - { /{ ' C{ 0 k{ * œ{ Ç{ 7 Ý{ | ' 4| \| {| = ™| 5 ×| 1
} ?} - V} " „} §} Æ} ß} ý} * ~ / I~ $ y~ ž~ ¹~ Ë~ ê~ H " 7 k £  ( Ó ü € " +€ N€ e€ 3 r€ ¦€ ¿€ Ø€ ò î€ ( á -
‚ ) 8‚ b‚ €‚
œ‚ ª‚ Á‚ / ׂ $ ƒ ,ƒ 7 Iƒ 7 ƒ ¹ƒ
Ùƒ çƒ úƒ „ '„ % 7„ ]„ E n„ ´„ $ Ë„ ð„ … "… >… 7 V… & Ž… 7 µ… í… . ý… & ,† S† 9 j† $ ¤† Ɇ é† $ ü† : !‡ ^ \‡ c »‡ _ ˆ $ ˆ . ¤ˆ T Óˆ ! (‰ × J‰ # "Š # FŠ jŠ
Š 3 Š 3 ÁŠ ( õŠ + ‹ ! J‹ l‹ ‹ $ Ÿ‹ # Ä‹ 9 è‹ I "Œ lŒ ˆŒ ¡Œ °Œ ÍŒ ëŒ : Y w / À Ù ó
Ž !Ž 8Ž OŽ fŽ ~Ž ) –Ž u ÀŽ 2 6 A i < « P è L 9 = † J Ä < ‘ = L‘ E Š‘ ; Б = ’ N J’ 9 ™’ ^ Ó’ \ 2“ 5 “ ^ Å“ ( $” M” 2 d” < —” P Ô” K %• Š q• a ü• X ^– / ·– 1 ç– — 5— I— . ]— § Œ— ! 4˜ " V˜ = y˜ L ·˜ 3 ™ " 8™ A [™ - ™ C Ë™ B š ' Rš 8 zš ) ³š - Ýš Š › / –› & Æ› m í› ; [œ —œ ! ¸œ Úœ > ùœ „ 8 ½ # Ù # ý ! !ž Cž \ž 5 zž " °ž 2 Óž ! Ÿ
(Ÿ > 6Ÿ 8 uŸ ®Ÿ ½Ÿ ! ÚŸ * üŸ A ' ! i ‹ ¬ É ! ä ¡ " '¡ J¡ d¡ ¡ ¡ ¹¡ q ס 7 I¢ 3 ¢ @ µ¢ ö¢ 2 £ % D£ 3 j£ 1 ž£ 0 У / ¤ 2 1¤ ' d¤ R Œ¤ 5 ߤ 8 ¥ & N¥ # u¥ ™¥ ' ¥ Õ¥ ( è¥ ¦ H "¦ * k¦ D –¦ E Û¦ è !§ 8
¨ " C¨ i f¨ 9 Ш 8
© D C© 8 ˆ© 6 Á© A ø© :ª ; Zª = –ª @ Ôª A « K W« > £« 3 â« T ¬ D k¬ °¬ - ̬ ? ú¬ C : 5 ~ ´ B Ï ' ® * :® e® „® 5 Ž® 2 Ä® 9 ÷® 9 1¯ k¯ …¯ ž¯ ¥¯ ¸¯ ¾¯ Ù¯ ù¯ + ° $ 7° $ \° ° $ ° Å° Õ° è°
ë° ù° ± %± $ 9± ^± r± Š± £± º± α ä± ² ² 0² I² d² x² Œ² ! ¤² 7 Ʋ 8 þ² 2 7³ j³ ƒ³ ›³ ¶³ γ ê³ ´ ´ ! +´ " M´ p´ ¯ t´ $¶ &¶ 6¶
V¶ d¶ v¶ ¶ - ¥¶ Ó¶ ߶ ô¶
· & · ( E· ' n· & –· B ½· j ¸ Î k¸ U :¹  ¹ I Sº : º % غ þº » % 5» 1 [» » 3 ¨» Ü» û» 6 ¼ B¼ g ^¼ a Ƽ < (½ e½ + z½ % ¦½ * ̽ z ÷½ W r¾ < ʾ + ¿ & 3¿ ' Z¿ " ‚¿ - ¥¿ - Ó¿ À C À % dÀ ( ŠÀ ) ³À ÝÀ ïÀ / Á + >Á > jÁ $ ©Á / ÎÁ þÁ  $ " 5 % X ! ~ !  Â à 8 õ .à # Oà # sà —à ²Ã Ïà íà $
Ä 2Ä 2 LÄ Ä ›Ä ( ·Ä àÄ 1 ùÄ 2 +Å ( ^Å ‡Å ; £Å ßÅ 9 ôÅ . .Æ ® ]Æ © Ç . ¶Ç / åÇ È -È ( CÈ ¥ lÈ 3 É ¸ FÉ & ÿÉ + &Ê @ RÊ ) “Ê 7 ½Ê õÊ Ë 1 Ë d LË # ±Ë % ÕË 7 ûË 3Ì l PÌ / ½Ì + íÌ $ Í " >Í aÍ C wÍ 1 »Í H íÍ & 6Î C ]Î M ¡Î > ïÎ g .Ï 8 –Ï ÏÏ 2 îÏ ! !Ð H CÐ ' ŒÐ > ´Ð * óÐ ! Ñ @Ñ OÑ gÑ 2 ‚Ñ µÑ A ÁÑ ' Ò * +Ò H VÒ * ŸÒ / ÊÒ 3 úÒ 8 .Ó C gÓ 0 «Ó & ÜÓ T Ô 5 XÔ 8 ŽÔ 1 ÇÔ ùÔ ) Õ 6 5Õ $ lÕ d ‘Õ öÕ - Ö ' EÖ 4 mÖ ) ¢Ö ÌÖ äÖ # ÿÖ #× 7× J× Q×
^× 4 i× ž× ±×
Æ× Ô× 2 è× Ø 3Ø * JØ p uØ _ æØ R FÙ g ™Ù O Ú 8 QÚ G ŠÚ E ÒÚ K Û A dÛ + ¦Û 3 ÒÛ < Ü 6 CÜ h zÜ p ãÜ R TÝ I §Ý N ñÝ C @Þ 6 „Þ G »Þ ß ß 9ß # Tß xß ™ß & ·ß # Þß
à à b "à …à 9 ’à , Ìà ï ùà t éá R ^â O ±â 0 ã L 2ã ' ã ! §ã ! Éã q ëã H ]ä " ¦ä ! Éä $ ëä $ å 5 5å 6 kå ¢å M »å : æ Dæ Væ qæ æ - ¬æ ) Úæ # ç % (ç & Nç & uç œç ·ç Öç # òç % è & <è cè & ƒè # ªè e Îè 4é Ré bé |é “é , é ? Úé % ê $ @ê eê , €ê ! ê Ïê # ëê
ë - ë : Kë H †ë T Ïë ; $ì j `ì $ Ëì 7 ðì 8 (í aí í ? •í ( Õí þí î 5î Vî
oî
}î H ‹î & Ôî | ûî 2 xï M «ï A ùï G ;ð , ƒð °ð ; Äð C ñ . Dñ sñ 8 ‡ñ Àñ Õñ ! ôñ ò F ò $ dò - ‰ò ·ò Çò Þò öò ž ó ? ¥ó # åó ô ! (ô / Jô zô : –ô & Ñô ) øô 0 "õ ) Sõ % }õ . £õ Òõ " íõ ' ö # 8ö 1 \ö * Žö ' ¹ö áö ô îö ã÷ í÷ ' ø 3 +ø 7 _ø M —ø , åø ù / %ù Uù F pù G ·ù C ÿù Cú : Pú @ ‹ú @ Ìú N
û S \û O °û Y ü P Zü «ü Éü
Þü K éü 5ý " Rý uý E “ý 9 Ùý þ # "þ ( Fþ % oþ # •þ L ¹þ / ÿ 6ÿ # Wÿ / {ÿ ! «ÿ 5 Íÿ 9 = Y 2 k ! ž ! À â - F 0 J w C Â A > b ¡ Â ß û ( ! ? a } • * ¦ ! Ñ ó S ? g # § Ë + Ý ' > f … T ’ ) ç 3 $ E @ j Y « V H \ " ¥ ) È ò 2 . 0 a $ ’ @ · < ø $ 5
Z
h
|
" “
¶
" Ê
í
D E / ] ¥ Ã Û 6 û + 2 6 ^
• ? @ à # !
X E
% ž
Ä
ã
' û
G # d k _ Ð a 0 3 ’ ) Æ X ð % I
o 4 } ! ² $ Ô ù 6 6 K ) ‚ - ¬ " Ú $ ý * " / M ) } I § Y ñ K e ‚ • ± Ì æ 7 T K q ½ Õ í , A V l 9 ‚ { ¼ 4 8 F m H ´ ^ ý W \ ? ´ D ô > 9 B x < » = ø C 6 Q z 5 Ì b d e ; Ê d k Œ 7 ¥ C Ý P ! K r ¾ k @ V ¬ $ I ( r ¤ / ¸ Ë è ´ Ó > ó $ 2! / W! ' ‡! L ¯! 5 ü! ; 2" O n" 6 ¾" 0 õ" 9 &# 8 `# º ™# = T$ . ’$ Á$ + A% ! m% " % # ²% < Ö% & “& 3 ¬& " à& ' ' +' K' ? l' * ¬' P ×' " ((
K( 7 V( 0 Ž( ¿( , Ë( 0 ø( 5 )) _ _) 2 ¿) 5 ò) & (* , O* 2 |* 5 ¯* 4 å* 0 + , K+ - x+ - ¦+ ) Ô+ þ+ = Ž, C Ì, T - e- 8 †- % ¿- = å- I #. ? m. : . > è. 7 '/ ] _/ U ½/ ] 0 ' q0 E ™0 * ß0 $
1 /1 5 G1
}1 U ˆ1 ; Þ1 V 2 8 q2 î ª2 C ™3 ) Ý3 4 J •4 M à4 N .5 H }5 E Æ5 S 6 % `6 = †6 P Ä6 P 7 J f7 R ±7 I 8 ; N8 Y Š8 X ä8 =9 & X9 C 9 A Ã9 B : 0 H: N y: ' È: - ð: ; :; / A; 4 q; ; ¦; ; â; 8 < 7 W< < ™< ©< °< È< å< # ô< = ! 5= W= ! s= •= ´= Ä= Î= â= ÷= > / > L> `> x> ”> «> ¿> . Ø> ? ? -? C? [? l? }? @ ’? K Ó? > @ M ^@ ( ¬@ Õ@ ï@ A &A DA aA yA ( A ¹A ÙA ¬ % ¡ @ ¦ h G ñ l º H ¼ ² \ Î € I É ê Ä Ÿ U ¢ ä Ñ ¦ : y ¤ Y S » M Æ § k 2 ! - Ü 9 | ò _ ! § Ž ƒ } È Ý > R a ž Ù Û ¶ e Ÿ è ¤ D i & Ë + Ð ï I — Ì ‹ Q ~ f Ó ‰ ê € F T K ; î ² u · ® x ‹ % ø “ C d E e ù ¾ ^ M … , / : ü + œ
˜ Q ˆ z f S e ¾ L v 7 3 á C © , Ó ½ u ü ¬ „ õ › D £ ñ œ ¸ J Ç b n ° Á Ñ ¬ Ê Å Ì " ó t À
Ö ˆ ƒ ‚ r o í þ p O ¦ ð l g à ) \ ˆ ` Ö ¯ ) ÿ ® N ] / K 4 µ v ã z é 3 Œ b o ? © E A ` { ‰ ~ < à h 4 – … [ Z ª ² W 1 Ï w ˜ ë • ( ¨ ‘ B A d t 3 Ê Ç Š ^ , k Â Ü 6 Ë µ Ò — ´ • æ É ô { Î û ¼ ÷ $ ™ õ â U ( º ” w q á j _ š ! Í ? Ÿ Å H * @ 2 1 [ § O ¹ V . µ ‘ P ø z – # - ¡
} ˜ R } ß Q ‡ | N 4 Á ³ — Ž + ¶ º : 8 0 9 p * ö å b Š . ‡ Ì ³ ° ³ „ m 2 v · Ø B ” q “ W ~ þ ¥ … Ê ¿ I ƒ = > / ¿ ° ± ¸ ª „ ó š [ Ù s Ú ™ À £ Ž R ¥ g ì ´ Æ ¿ ` « E | < Z B Á "
ò ¹ G d = ¥ A ÷ Ð C a ý â & ö ‘ ] ¨ Õ † À » ÿ j & 5 _ L ' ã c ¯ × ¼ ’ s " w Œ ¯ > $ ô ì N 8 . ( ç × € W ¡ ù ) ‚ œ j
Þ Ø 6 @ g 7 à D ð 5 « h O ± ‡ ™ i Ô › 6 P ’ ¢ ¹ y ‹ J o L £ ® * n 9 Ï ý p î ú l É Õ Û 5 ¢ ¶ í ± « ¸ 0 ß c c S X ¤ Í æ V à – # Ô ©  ½ = • f Í ½ Ç { Y ï u q ä r è Z T y % Ý H ú ª Ë x ‚ Y K T È ; ž ¨ ' Ò M û P X m 7 ?  » š r 8 Œ ; ” U ë ^ Å ' J 1 Ä Þ å ¾ k F é · s $ t Ä i m ž x † † Ú a Æ ’ # Š V - È < à “ F
\ G › 0 ‰ ´ ] ç X n ÝA ,< @< äA ÿÿÿÿB * ÿÿÿÿ
Attribute: %1$s
%s is not present in cache.
- gecos: %s
- group id: %d
- home directory: %s
- no env -
- no mapped users found - - shell: %s
- user id: %d
- user name: %s
%1$-25s %2$#.4x
%1$-25s Unknown domain
%1$-25s Unreachable service
%1$s must be run as root
%s: Unable to read value [%d]: %s
, your cached password will expire at: A comma-separated list of groups, members of which should be excluded from recording, only when scope=all. A comma-separated list of groups, members of which should have session recording enabled. Matches group names as returned by NSS. I.e. after the possible space replacement, case changes, etc. A comma-separated list of users to be excluded from recording, only when scope=all A comma-separated list of users which should have session recording enabled. Matches user names as returned by NSS. I.e. after the possible space replacement, case changes, etc. A list of extra attributes to download along with the user entry A mapping from user names to Kerberos principal names A specific order of the domains to be looked up Access control provider Action not provided
Active Directory backup server address Active Directory client hostname Active Directory domain Active Directory primary group attribute for ID-mapping Active Directory server address Active servers:
Additional timeout to wait for a card if requested Address of backup IPA server After changing the OTP password, you need to log out and back in order to acquire a ticket All spaces in group or user names will be replaced with this character Allow certificate based/Smartcard authentication. Allow core dumps Allow passkey device authentication. Allow to generate ssh-keys from certificates Allowed services for using smartcards Allows to retain local users as members of an LDAP group for servers that use the RFC2307 schema. Always query all the caches before querying the Data Providers An error occurred, but no description can be found. An open file descriptor for the debug logs Analyze logged data Archive SSSD log files in tarball Archiving log files into %s...
Attribute %1$s already indexed.
Attribute %1$s not indexed.
Attribute (-a) not provided
Attribute indicating that server side password policies are active Attribute listing authorized PAM services Attribute listing authorized server hosts Attribute listing authorized server rhosts Attribute to index Attribute with the name of the view Attribute with the reference to the original object Authenticate at %1$s and press ENTER. Authenticate with PIN %1$s at %2$s and press ENTER. Authenticated with cached credentials Authentication is denied until: Authentication provider Authentication timeout Autofs provider Automatic full refresh period Automatic smart refresh period Automounter map entry key attribute Automounter map entry value attribute Automounter map name attribute Backup local data Backup local data and remove cached content Base DN for IP hosts lookups Base DN for IP networks lookups Base DN for automounter map lookups Base DN for group lookups Base DN for netgroup lookups Base DN for service lookups Base DN for sudo rules lookups Base DN for user lookups Become a daemon (default) Cache credentials for offline login Cache entry creation date Cache entry expiration time Cache entry last update time Cached in InfoPipe Cannot get stat of SSSD socket. Certificate does not match rule.
Certificate matches rule.
Certificate related tools: Change or print information about SSSD debug level Check PAC flags Check mapping and matching rule with a certificate Comma separated list of allowed users Comma separated list of groups that are allowed to log in. This applies only to groups within this SSSD domain. Local groups are not evaluated. Comma separated list of groups that are explicitly denied access. This applies only to groups within this SSSD domain. Local groups are not evaluated. Comma separated list of prohibited users Command '%s' failed with [%d]
Command to start service Configuration files tools: Control enumeration of trusted domains Controls if SSSD should monitor the state of resolv.conf to identify when it needs to update its internal DNS resolver. Could not open available domains
Could not open domain %1$s. If the domain is a subdomain (trusted domain), use fully qualified name instead of --domain/-d parameter.
Couldn't invalidate %1$s
Couldn't invalidate %1$s %2$s
Create clean cache files and import local data Creating backup of local data...
Creating cache index for domain %1$s
Current Password: DN for ppolicy queries DNS service name for LDAP password change server Default logon right (or permit/deny) to use for unmapped PAM service names Default subdomain homedir value Delete log files instead of truncating Deleting cache index for domain %1$s
Deleting log files...
Directory on the filesystem where SSSD should store Kerberos replay cache files. Directory to store credential caches Disable Active Directory range retrieval Disable netlink interface Disable the LDAP paging control Discovered %s servers:
Display a warning N days before the password expires. Display users/groups in fully-qualified form Do not filter domain local groups from other domains Domain of the information provider (mandatory) Domain to add to names without a domain component. Don't forget to also update the indexes on the remote providers.
Don't include group members in group lookups ERROR: Tevent chain ID support missing, log analyzer is unsupported.
Enable DNS sites - location based service discovery Enable credential validation Enable debugging in the libfido2 library Enable enumerating all users/groups Enable or disable core dumps for all SSSD processes. Enable or disable the domain Enable or disable the implicit files domain Enable/disable debug backtrace Enabled Active Directory domains Enables FAST Enables enterprise principals Enables principal canonicalization Enables using of subdomains realms for authentication Enter PIN: Entry cache background update timeout length (seconds) Entry cache timeout length (seconds) Enumeration cache timeout length (seconds) Error during certificate matching [%d][%s].
Error looking up public keys
Error setting the locale
Error while executing external command
Error while executing external command '%s'
Error while reading configuration directory.
Error: Unable to get object [%d]: %s
FAST options ('never', 'try', 'demand') Failed to add mapping and matching rules with error [%d][%s].
Failed to decode base64 string.
Failed to generate mapping filter [%d][%s].
Failed to load configuration from %s.
Failed to open %s
Failed to run validators Failed to setup certmap context.
File %1$s does not exist.
File ownership and permissions check failed. Expected root:root and 0600.
File that contains CA certificates File that contains the client certificate File that contains the client key Files negative cache timeout length (seconds) Filter PAM responses sent to the pam_sss Filter for group lookups Filter for user lookups First Factor (Current Password): First Factor: Follow LDAP referrals Full Name GECOS attribute GID attribute Generate access report for a domain Group UUID attribute Group member attribute Group name Group password Groups that SSSD should explicitly ignore Home directory attribute Host identity provider Host not specified
Hostnames and/or fully qualified domain names of this machine to filter sudo rules How long (minutes) to deny login after offline_failed_login_attempts has been reached How long can cached credentials be used for cached authentication How long should SSSD talk to single DNS server before trying next server (miliseconds) How long should keep trying to resolve single DNS query (seconds) How long the PAC data is considered valid How long to allow cached logins between online logins (days) How long to keep cached entries after last successful login (days) How long to retain a connection to the LDAP server before disconnecting How long to wait for replies from DNS when resolving servers (seconds) How long will be in-memory cache records valid How many days before password expiration a warning should be displayed How many failed logins attempts are allowed when offline How many maximum entries to fetch during a wildcard request How many seconds to keep a host in the known_hosts file after its host keys were requested How many seconds to keep a host ssh key after refresh. IE how long to cache the host key for. How many seconds to keep identity information cached for PAM requests How many seconds will pam_sss wait for p11_child to finish How many seconds will pam_sss wait for passkey_child to finish How often should expired entries be refreshed in background How often should subdomains list be refreshed How often to periodically update the client's DNS entry How to dereference aliases IP host entryUSN attribute IP host name attribute IP host number (address) attribute IP network entryUSN attribute IP network name attribute IP network number (address) attribute IPA client hostname IPA domain IPA server address IPv4 or IPv6 addresses or network of this machine to filter sudo rules Identity provider Idle time before automatic disconnection of a client Idle time before automatic shutdown of the responder If 2-Factor-Authentication (2FA) is used and credentials should be saved this value determines the minimal length the first authentication factor (long term password) must have to be saved as SHA512 hash into the cache. If a shell stored in central directory is allowed but not available, use this fallback If set to false, host argument given by PAM will be ignored If true, SSSD will switch back to lower-wins ordering logic Ignore unreadable LDAP references Include microseconds in timestamps in debug logs Include timestamps in debug logs Index operation failed: %1$s
Indexes for domain %1$s:
Indicates what is the syntax of the config file. SSSD 0.6.0 and later use version 2. InfoPipe User lookup with [%s] failed.
Information about cached content: Information about cached group Information about cached netgroup Information about cached user Informs that the responder has been dbus-activated Informs that the responder has been socket-activated Initgroups expiration time Insert your passkey device, then press ENTER. Invalid input, please provide either '%s' or '%s'.
Invalid port
Invalid result. Invalidate all SSH hosts Invalidate all autofs maps Invalidate all cached entries Invalidate all cached sudo rules Invalidate all groups Invalidate all netgroups Invalidate all services Invalidate all users Invalidate cached objects Invalidate particular SSH host Invalidate particular autofs map Invalidate particular group Invalidate particular netgroup Invalidate particular service Invalidate particular sudo rule Invalidate particular user Issues identified by validators: %zu
Kerberos TGT will not be granted upon login, user experience will be affected. Kerberos backup server address Kerberos realm Kerberos realm to use Kerberos server address Kerberos service keytab LDAP filter to determine access privileges Length of time between attempts to reconnect while offline Length of time between cache cleanups Length of time between enumeration updates Length of time to attempt connection Length of time to attempt synchronous LDAP operations Length of time to wait for a enumeration request Length of time to wait for a search request Lifetime of TGT for LDAP connection Lifetime of the TGT List available domains List of PAM services that are allowed to authenticate with GSSAPI. List of UIDs or user names allowed to access the PAC responder List of domains accessible even for untrusted users. List of options that should be inherited into a subdomain List of pairs : that must be enforced for PAM access with GSSAPI authentication List of possible ciphers suites List of trusted uids or user's name List of user attributes the InfoPipe is allowed to publish Local authentication methods policy Local data tools: Location of the keytab to validate credentials Location of the user's credential cache Log files tools: Lower bound for ID-mapping Manage cache indexes Mapping filter:
%s
Mapping rule Matching rule Maximum age in days before the machine account password should be renewed Maximum nesting level SSSD will follow Maximum number of rules that can be refreshed at once. If this is exceeded, full refresh is performed. Maximum period deviation between enumeration updates Maximum period deviation when refreshing expired entries in background Maximum period deviation when refreshing the subdomain list Maximum period deviation when updating the client's DNS entry Maximum time deviation between cache cleanups Maximum user ID Message printed when user account is expired. Message printed when user account is locked. Messages generated during configuration merging: %zu
Minimum user ID Mode used to change user password Modification time attribute Modification time attribute for groups Modification time attribute for netgroups Name Name of attribute that is used as object class for sudo rules Name of the default domain for ID-mapping Negative cache timeout length (seconds) Netgroup name Netgroup triple attribute Netgroups members attribute New Password: No Kerberos TGT granted as the server does not support this method. Your single-sign on(SSO) experience will be affected. No cache object matched the specified search
No servers discovered.
None so far.
Not enough memory
Number of IDs for each slice when ID-mapping Number of secondary slices Number of times to attempt connection to Data Providers Object class for IP hosts Object class for IP networks Object class for automounter map entries Object class for automounter maps Object class for sudo rules Objectclass for group override objects Objectclass for groups Objectclass for netgroups Objectclass for override objects Objectclass for services Objectclass for user override objects Objectclass for users Objectclass for view containers Offline One of the following strings specifying the scope of session recording: none - No users are recorded. some - Users/groups specified by users and groups options are recorded. all - All users are recorded. Online Online status: %s
Only invalidate entries from a particular domain Operation mode for GPO-based access control Option -g is incompatible with -D or -i
Option -i|--interactive is not allowed together with -D|--daemon
Option for tuning the machine account renewal task Out of memory!
Override GID value from the identity provider with this value Override existing backup Override homedir value from the identity provider with this value Override shell value from the identity provider with this value Override the DNS server used to perform the DNS update PAM Environment:
PAM action [auth|acct|setc|chau|open|clos], default: PAM service names for which GPO-based access is always denied PAM service names for which GPO-based access is always granted PAM service names that map to the GPO (Deny)BatchLogonRight policy settings PAM service names that map to the GPO (Deny)InteractiveLogonRight policy settings PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight policy settings PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings PAM service, default: PAM stack to use PIN locked PKCS#11 URI to restrict the selection of devices for Smartcard authentication Passkey related tools: Password change failed. Password change provider Password expired. Change your password now. Password reset by root is not supported. Password: Passwords do not match Path of group file sources. Path of passwd file sources. Path to CA certificate directory Path to certificate database with PKCS#11 modules. Path to storage of trusted CA certificates Perform cache upgrade Perform passkey registration Perform static analysis of SSSD configuration Permission denied. Please (re)insert (different) Smartcard Please select at least one object to invalidate
Policy to evaluate the password expiration Primary GID attribute Print information about a user and check authentication Print information about domain Print information about the certificate Print the host ssh public keys Print version number and exit Printf-compatible format for displaying fully-qualified names Privileged socket has wrong ownership or permissions. Public socket has wrong ownership or permissions. Reenter new Password: Refresh the configuration database, then exit Regex to parse username and domain Remove existing SSSD log files Removing cache files...
Renewable lifetime of the TGT Requested lifetime of the ticket Requested renewable lifetime of the ticket Requests canonicalization of the principal name Require TLS certificate verification Require TLS for ID lookups Resolver provider Restart SSSD after data import Restore local data from backup Restoring local data...
Restrict or prefer a specific address family when performing DNS lookups Run PAC responder automatically for AD and IPA provider Run interactive (not a daemon) SELinux provider SID of the default domain for ID-mapping SSH public key attribute SSSD Domains to start SSSD InfoPipe user lookup result:
SSSD Services to start SSSD Status: SSSD backup of local data already exists, override? SSSD is already running
SSSD is not run by root. SSSD is not running.
SSSD monitors the state of resolv.conf to identify when it needs to update its internal DNS resolver. By default, we will attempt to use inotify for this, and will fall back to polling resolv.conf every five seconds if inotify cannot be used. SSSD must not be running. Stop SSSD now? SSSD needs to be restarted. Restart SSSD now? SSSD needs to be running. Start SSSD now? SSSD nss user lookup result:
SSSD socket does not exist. SUDO provider Scope of group lookups Scope of user lookups Search base for Desktop Profile related objects Search base for HBAC related objects Search base for SUBID ranges Search base for object containing info about IPA domain Search base for objects containing info about ID ranges Search base for view containers Search by SID Search by group ID Search by user ID Second Factor (optional): Second Factor: Selects the principal to use for FAST Server message: Server where the change password service is running if not on the KDC Service name attribute Service name for DNS service lookups Service port attribute Service protocol attribute Session management provider Set libldap debug level Set lower boundary for allowed IDs from the LDAP server Set the verbosity of the debug logging Set upper boundary for allowed IDs from the LDAP server Shell attribute Shell to use if the provider does not list one Should filtered users appear in groups Show debug information Show domain list including primary or trusted domain type Show information about active server Show list of discovered servers Show online status Show users mapped to the certificate Similar to --genconf, but only refreshes the given section Size (in megabytes) of the data table allocated inside fast in-memory cache for group requests Size (in megabytes) of the data table allocated inside fast in-memory cache for initgroups requests Size (in megabytes) of the data table allocated inside fast in-memory cache for passwd requests Smart and full refresh random offset Specifies the server principal to use for FAST Specifies time in seconds for which the list of subdomains will be considered valid. Specify a non-default config file Specify a non-default snippet dir (The default is to look in the same place where the main config file is located. For example if the config is set to "/my/path/sssd.conf", the snippet dir "/my/path/conf.d" is used) Specify base64 encoded certificate. Specify debug level you want to set Specify domain name. Specify name. Specify the maximal SSF for LDAP sasl authorization Specify the minimal SSF for LDAP sasl authorization Specify the sasl authorization id to use Specify the sasl authorization realm to use Specify the sasl mechanism to use Specify user name. Start SSSD if it is not running Start SSSD when the cache is removed Stop SSSD before removing the cache Store password if offline for later online authentication Substitute empty homedir value from the identity provider with this value Sudo rule command attribute Sudo rule host attribute Sudo rule name Sudo rule notafter attribute Sudo rule notbefore attribute Sudo rule option attribute Sudo rule order attribute Sudo rule runas attribute Sudo rule runasgroup attribute Sudo rule runasuser attribute Sudo rule user attribute System is offline, password change not possible Target a specific domain Target the AUTOFS service Target the IFP service Target the NSS service Target the PAC service Target the PAM service Target the SSH service Target the SSSD service Target the SUDO service Tevent chain ID used for logging purposes The LDAP attribute that contains DN of HBAC rule which can be used for matching instead of memberUser and memberHost. The LDAP attribute that contains FQDN of the host. The LDAP attribute that contains NIS domain name of the netgroup. The LDAP attribute that contains SELinux user string itself. The LDAP attribute that contains all hosts / hostgroups this rule match against. The LDAP attribute that contains all users / groups this rule match against. The LDAP attribute that contains host category such as 'all'. The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object. The LDAP attribute that contains the host's SSH public keys. The LDAP attribute that contains the name of SELinux usermap. The LDAP attribute that contains the names of the netgroup's members. The LDAP attribute that contains unique ID of the user map. The LDAP attribute that contains user category such as 'all'. The LDAP attribute that contains whether or not is user map enabled for usage. The LDAP attribute that corresponds to the netgroup name. The LDAP attribute that lists FQDNs of hosts and host groups that are members of the netgroup. The LDAP attribute that lists hosts and host groups that are direct members of the netgroup. The LDAP attribute that lists netgroup's memberships. The LDAP attribute that lists system users and groups that are direct members of the netgroup. The LDAP group external member attribute The SSSD domain to use The Schema Type in use on the LDAP server, rfc2307 The TTL to apply to the client's DNS entry after updating it The amount of time between lookups of the GPO policy files against the AD server The amount of time between lookups of the HBAC rules against the IPA server The amount of time in minutes between lookups of Desktop Profiles rules against the IPA server when the last request did not find any rule The amount of time in seconds between lookups of the Desktop Profile rules against the IPA server The amount of time in seconds between lookups of the SELinux maps against the IPA server The authentication token of the default bind DN The automounter location this IPA client is using The debug level to run with The default base DN The default bind DN The domain part of service discovery DNS query The entry cache can be set to automatically update entries in the background if they are requested beyond a percentage of the entry_cache_timeout value for the domain. The group ID to run the server as The group to create FAST ccache as The interface whose IP should be used for dynamic DNS updates The list of shells that will be vetoed, and replaced with the fallback shell The list of shells users are allowed to log in with The name of the NSS library to use The name of the NSS library to use for hosts and networks lookups The name of the automount master map in LDAP. The number of file descriptors that may be opened by this responder The number of members that must be missing to trigger a full deref The number of preforked proxy children. The number of records to retrieve in a single LDAP query The object class of a host entry in LDAP. The object class of a netgroup entry in LDAP. The option denotes that the SSSD is running on IPA server and should perform lookups of users and groups from trusted domains differently. The path to the proxy command must be absolute
The port to use to connect to the host The provider which should handle fetching of subdomains. This value should be always the same as id_provider. The type of the authentication token of the default bind DN The user ID to run the server as The user to create FAST ccache as The user to drop privileges to The value of the password field the NSS provider should return The value of this option will be used in the expansion of the override_homedir option if the template contains the format string %H. There is no configuration.
This domain has no active servers.
Time between two checks for renewal Treat usernames as case sensitive Truncating log files...
Tune certificate verification Tune certificate verification for PAM authentication. Tune passkey verification behavior Tune sssd to honor or ignore netlink state changes Type of the group and other flags UID attribute URI of a backup LDAP server where password changes are allowed URI of an LDAP server where password changes are allowed UUID attribute Unable to archive log files
Unable to connect to system bus!
Unable to create backup directory [%d]: %s Unable to create backup of local data, can not remove the cache.
Unable to export group overrides
Unable to export user overrides
Unable to get online status
Unable to get server list
Unable to import group overrides
Unable to import user overrides
Unable to parse command arguments
Unable to parse name %s.
Unable to read user input
Unable to remove cache files
Unable to remove log files
Unable to truncate log files
Unexpected argument(s) provided, options that invalidate a single object only accept a single provided argument.
Unexpected error while looking for an error description Unexpected format of the server credential message. Unknown action: %1$s
Valid actions are "%2$s", "%3$s and "%4$s"
Upper bound for ID-mapping Use ID-mapping of objectSID instead of pre-set IDs Use Kerberos auth for LDAP connection Use LDAPS port for LDAP and Global Catalog requests Use anonymous PKINIT to request FAST armor ticket Use anonymous PKINIT to request FAST credentials Use autorid-compatible algorithm for ID-mapping Use custom version of krb5_get_init_creds_password Use only the upper case for realm names Use the following matching rules to filter the certificates for ssh-key generation Use the given string as search base for host objects. Use the given string as search base for trusted domains. Used configuration snippet files: %zu
User name lookup with [%s] failed.
User not specified
User principal attribute (for Kerberos) Username attribute Users that SSSD should explicitly ignore Validate the PAC Various tags stored by the realmd configuration service for this domain. Watchdog timeout before restarting service What kind of authentication should be used to perform the DNS update What kind of messages are displayed to the user during authentication When SSSD switches to offline mode the amount of time before it tries to go back online will increase based upon the time spent disconnected. This value is in seconds and calculated by the following: offline_timeout + random_offset. When shall the PAM responder force an initgroups request Where to drop krb5 config snippets Whether the LDAP library should perform a reverse lookup to canonicalize the host name during a SASL bind Whether the domain is usable by the OS or by applications Whether the nsupdate utility should default to using TCP Whether the provider should explicitly update the PTR record as well Whether to automatically create private groups for users Whether to automatically update the client's DNS entry Whether to automatically update the client's DNS entry in FreeIPA Whether to create kdcinfo files Whether to evaluate the time-based attributes in sudo rules Whether to filter rules by hostname, IP addresses and network Whether to hash host names and addresses in the known_hosts file Whether to include rules that contains netgroup in host attribute Whether to include rules that contains regular expression in host attribute Whether to look up canonical group name from cache if possible Whether to match authenticated UPN with target user Whether to update the ldap_user_shadow_last_change attribute after a password change Whether to update the machine account password in the Samba database Whether to use Token-Groups Whether to use the Global Catalog for lookups Which PAM services are permitted to contact application domains Which attributes shall be used to evaluate if an account is expired Which rules should be used to evaluate access control Your password has expired. Your password has expired. You have %1$d grace login(s) remaining. Your password will expire in %1$d %2$s. a particular site to be used by the client accountExpires attribute of AD attribute attribute containing the X509 certificate of the user attribute containing the email address of the user attribute containing the passkey mapping data of the user attribute listing allowed authentication types for a user dlopen failed with [%s].
dlsym failed with [%s].
domain entryUSN attribute error krbLastPwdChange attribute krbPasswordExpiration attribute lastUSN attribute ldap_backup_uri, The URI of the LDAP server ldap_uri, The URI of the LDAP server loginAllowedTimeMap attribute of NDS loginDisabled attribute of NDS loginExpirationTime attribute of NDS malloc failed.
memberOf attribute no not connected nsAccountLock attribute objectSID attribute pam_acct_mgmt: %s
pam_authenticate for user [%s]: %s
pam_chauthtok: %s
pam_close_session: %s
pam_get_item failed: %s
pam_open_session: %s
pam_setcred: [%s]
pam_start failed: %s
set_debug_file_from_fd failed.
shadowExpire attribute shadowFlag attribute shadowInactive attribute shadowLastChange attribute shadowMax attribute shadowMin attribute shadowWarning attribute sss_getpwnam_r failed with [%d].
sss_ssh_knownhostsproxy: Could not resolve hostname %s
sss_ssh_knownhostsproxy: connect to host %s port %d: %s
sss_ssh_knownhostsproxy: unable to proxy data: %s
talloc_asprintf failed.
testing pam_acct_mgmt
testing pam_authenticate
testing pam_chauthtok
testing pam_close_session
testing pam_open_session
testing pam_setcred
unknown action
user: %s
action: %s
service: %s
userAccountControl attribute of AD yes Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org
PO-Revision-Date: 2023-09-18 03:54+0000
Last-Translator: ê¹€ì¸ìˆ˜
Language-Team: Korean
Language: ko
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Plural-Forms: nplurals=1; plural=0;
X-Generator: Weblate 5.0.2
ì†ì„±: %1$s
%sê°€ ìºì‰¬ì— 없습니다.
- gecos: %s
- 그룹 id: %d
- 홈 ë””ë ‰í† ë¦¬: %s
-í™˜ê²½ì´ ì—†ìŒ -
- ë§¤í•‘ëœ ì‚¬ìš©ìžë¥¼ ì°¾ì„ ìˆ˜ ì—†ìŒ - -쉘: %s
- ì‚¬ìš©ìž ID: %d
- ì‚¬ìš©ìž ì´ë¦„: %s
%1$-25s %2$#.4x
%1$-25s ì•Œë ¤ì§€ì§€ ì•Šì€ ë„ë©”ì¸
%1$-25s ì ‘ê·¼ í• ìˆ˜ 없는 서비스
%1$s는 root로 실행해야 합니다
%s: [%d] ê°’ì„ ì½ì„ 수 ì—†ìŒ: %s
, ë‹¹ì‹ ì˜ ìºì‰¬ëœ 비밀번호는 다ìŒì— 만료ë©ë‹ˆë‹¤.: scope=allì¸ ê²½ìš°ì—만 기ë¡ì—ì„œ ì œì™¸ë˜ì–´ì•¼ 하는 쉼표로 êµ¬ë¶„ëœ ê·¸ë£¹ 목ë¡ìž…니다. 쉼표로 êµ¬ë¶„ëœ ê·¸ë£¹ 목ë¡ìœ¼ë¡œ, ê·¸ 구성ì›ì€ 세션 기ë¡ì„ 활성화해야 합니다. NSSì—ì„œ ë°˜í™˜ëœ ê·¸ë£¹ ì´ë¦„ê³¼ ì¼ì¹˜í•©ë‹ˆë‹¤. 가능한 공간 êµì²´ 후, ì¼€ì´ìŠ¤ 변경 등. scope=allì¸ ê²½ìš°ì—만 기ë¡ì—ì„œ ì œì™¸í• ì‰¼í‘œë¡œ êµ¬ë¶„ëœ ì‚¬ìš©ìž ëª©ë¡ ì„¸ì…˜ 기ë¡ì„ 활성화해야 하는 쉼표로 êµ¬ë¶„ëœ ì‚¬ìš©ìž ëª©ë¡ìž…니다. NSSì—ì„œ ë°˜í™˜ëœ ì‚¬ìš©ìž ì´ë¦„ê³¼ ì¼ì¹˜í•©ë‹ˆë‹¤. 가능한 공간 êµì²´ 후, ì¼€ì´ìŠ¤ 변경 등. ì‚¬ìš©ìž í•ëª©ê³¼ 함께 ë‚´ë ¤ë°›ê¸° í•˜ë ¤ëŠ” 추가 ì†ì„±ì˜ ëª©ë¡ ì‚¬ìš©ìž ì´ë¦„ì—ì„œ Kerberos 주체 ì´ë¦„으로 매핑 조회 í• ë„ë©”ì¸ì˜ íŠ¹ì • 순서 ì ‘ê·¼ ì œì–´ ê³µê¸‰ìž ë™ìž‘ì´ ì œê³µë˜ì§€ ì•ŠìŒ
Active Directory 백업 서버 주소 Active Directory í´ë¼ì´ì–¸íŠ¸ 호스트 ì´ë¦„ Active Directory ë„ë©”ì¸ ID-mappingì˜ Active Directory 기본 그룹 ì†ì„± Active Directory 서버 주소 활성 서버:
ìš”ì² ì‹œ 카드를 기다리는 추가 시간 초과 백업 IPA ì„œë²„ì˜ ì£¼ì†Œ OTP 암호를 변경한 후 í‹°ì¼“ì„ ë°›ìœ¼ë ¤ë©´ 로그아웃한 후 다시 로그ì¸í•´ì•¼ 합니다 그룹과 ì‚¬ìš©ìž ì´ë¦„ì—ì„œ ëª¨ë“ ê³µê°„ì€ ì´ì™€ ê°™ì€ ë¬¸ìžë¡œ 대체 ë 것입니다 ì¸ì¦ì„œ 기반/스마트 ì¹´ë“œ ì¸ì¦ì„ 허용합니다. 코어 ë¤í”„ 허용 패스키 장치 ì¸ì¦ì„ 허용합니다. ì¸ì¦ì„œì—ì„œ ssh 키 ìƒì„± 허용 스마트카드 ì‚¬ìš©ì„ í—ˆìš© 서비스 로컬 사용ìžë¥¼ RFC2307 스키마를 사용하는 ì„œë²„ì˜ LDAP ê·¸ë£¹ì˜ êµ¬ì„±ì›ìœ¼ë¡œ ìœ ì§€í• ìˆ˜ 있습니다. ìžë£Œ 공급ìžë¥¼ 질ì˜(쿼리)하기 ì „ì— í•ìƒ ëª¨ë“ ìºì‰¬ë¥¼ 질ì˜í•©ë‹ˆë‹¤ 오류가 ë°œìƒí–ˆì§€ë§Œ ì„¤ëª…ì„ ì°¾ì„ ìˆ˜ 없습니다. 디버그 ë¡œê·¸ì˜ ì˜¤í”ˆ íŒŒì¼ ì„¤ëª…ìž ë¡œê·¸ì¸ëœ ìžë£Œë¥¼ 분ì„합니다 tarballì—ì„œ SSSD ê¸°ë¡ íŒŒì¼ ë³´ê´€ %sì— ë¡œê·¸ íŒŒì¼ ë³´ê´€ 중...
ì†ì„± %1$sê°€ ì´ë¯¸ 색ì¸ë˜ì—ˆìŠµë‹ˆë‹¤.
ì†ì„± %1$sê°€ 색ì¸ë˜ì§€ 않았습니다.
ì†ì„±ì´ ì œê³µë˜ì§€ ì•ŠìŒ
서버 측 암호 ì •ì±…ì´ í™œì„± ìƒíƒœìž„ì„ ë‚˜íƒ€ë‚´ëŠ” ì†ì„± 승ì¸ëœ PAM 서비스 나열 ì†ì„± 승ì¸ëœ 서버 호스트 나열 ì†ì„± 권한 있는 서버 rhosts 나열 ì†ì„± ìƒ‰ì¸ í• ì†ì„± 보기 ì´ë¦„ì´ ìžˆëŠ” ì†ì„± ì›ë³¸ ê°ì²´ì— 대한 참조가 있는 ì†ì„± %1$sì— ì¸ì¦í•˜ê³ ENTER를 누릅니다. PIN %1$s(%2$sì—ì„œ)으로 ì¸ì¦í•˜ê³ ENTER를 누릅니다. ìºì‰¬ëœ ì¸ì¦ ì •ë³´ë¡œ ì¸ì¦ë¨ ì¸ì¦ì€ ë‹¤ìŒ ê¸°ê°„ê¹Œì§€ 거부ë©ë‹ˆë‹¤. ì¸ì¦ ê³µê¸‰ìž ì¸ì¦ 시간 ì œí•œ autofs ê³µê¸‰ìž ìžë™ ì „ì²´ 새로 ê³ ì¹¨ 기간 ìžë™ 스마트 새로 ê³ ì¹¨ 기간 automounter 맵 í•ëª© 키 ì†ì„± automounter 맵 í•ëª© ê°’ ì†ì„± automounter 맵 ì´ë¦„ ì†ì„± 로컬 ìžë£Œ 백업 로컬 ìžë£Œë¥¼ ë°±ì—…í•˜ê³ ìºì‰¬ëœ ë‚´ìš©ì„ ì œê±° IP 호스트 ê²€ìƒ‰ì˜ ê¸°ë³¸ DN IP ë„¤íŠ¸ì›Œí¬ ê²€ìƒ‰ì˜ ê¸°ë³¸ DN automounter 맵 ê²€ìƒ‰ì˜ ê¸°ë³¸ DN 그룹 ê²€ìƒ‰ì˜ ê¸°ë³¸ DN netgroup ê²€ìƒ‰ì˜ ê¸°ë³¸ DN 서비스 ê²€ìƒ‰ì˜ ê¸°ë³¸ DN sudo 규칙 ê²€ìƒ‰ì˜ ê¸°ë³¸ DN ì‚¬ìš©ìž ê²€ìƒ‰ì„ ìœ„í•œ 기본 DN ë°ëª¬ì´ ë¨ (기본값) 오프ë¼ì¸ ì ‘ì†ì„ 위한 ìºì‰¬ ìžê²© ì¦ëª… ìºì‰¬ í•ëª© ìƒì„± ë‚ ì§œ ìºì‰¬ í•ëª© 만료 시간 ìºì‰¬ í•ëª© 마지막 ìµœì‹ í™” 시간 InfoPipeì—ì„œ ìºì‰¬ë¨ SSSD 소켓 통계를 ê°€ì ¸ì˜¬ 수 없습니다. ì¸ì¦ì„œê°€ 규칙과 ì¼ì¹˜í•˜ì§€ 않습니다.
ì¸ì¦ì„œê°€ 규칙과 ì¼ì¹˜í•©ë‹ˆë‹¤.
ì¸ì¦ì„œ ê´€ë ¨ëœ ë„구: SSSD 디버그 ìˆ˜ì¤€ì— ëŒ€í•œ ì •ë³´ 변경 ë˜ëŠ” ì¶œë ¥ PAC 플래그 ì ê²€ ì¸ì¦ì„œë¥¼ 사용하여 매핑 ë° ì¼ì¹˜ 규칙 í™•ì¸ ì‰¼í‘œë¡œ êµ¬ë¶„ëœ í—ˆìš©ëœ ì‚¬ìš©ìž ëª©ë¡ ë¡œê·¸ì¸í• 수 있는 쉼표로 êµ¬ë¶„ëœ ê·¸ë£¹ 목ë¡ìž…니다. ì´ëŠ” ì´ SSSD ë„ë©”ì¸ ë‚´ì˜ ê·¸ë£¹ì—만 ì ìš©ë©ë‹ˆë‹¤. 로컬 ê·¸ë£¹ì€ í‰ê°€ë˜ì§€ 않습니다. 명시ì 으로 액세스가 ê±°ë¶€ëœ ê·¸ë£¹ 목ë¡ìž…니다. ì´ëŠ” ì´ SSSD ë„ë©”ì¸ ë‚´ì˜ ê·¸ë£¹ì—만 ì ìš©ë©ë‹ˆë‹¤. 로컬 ê·¸ë£¹ì€ í‰ê°€ë˜ì§€ 않습니다. 쉼표로 êµ¬ë¶„ëœ ê¸ˆì§€ëœ ì‚¬ìš©ìž ëª©ë¡ ëª…ë ¹ '%s'ì´(ê°€) [%d]ì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤
서비스 시작 ëª…ë ¹ 구성 íŒŒì¼ ë„구: ì‹ ë¢°í• ìˆ˜ 있는 ë„ë©”ì¸ì˜ ì œì–´ SSSDê°€ 내부 DNS resolver를 ìµœì‹ í™”í•´ì•¼ 하는 시기를 ì‹ë³„하기 위해 resolv.confì˜ ìƒíƒœë¥¼ ëª¨ë‹ˆí„°ë§ í•´ì•¼ 하는지 여부를 ì œì–´í•©ë‹ˆë‹¤. 사용 가능한 ë„ë©”ì¸ì„ ì—´ 수 없습니다
%1$s ë„ë©”ì¸ì„ ì—´ 수 없습니다. ë„ë©”ì¸ì´ 하위 ë„ë©”ì¸(ì‹ ë¢°í• ìˆ˜ 있는 ë„ë©”ì¸)ì¸ ê²½ìš° --domain/-d 매개변수 ëŒ€ì‹ ì •ê·œí™”ëœ ì´ë¦„ì„ ì‚¬ìš©í•©ë‹ˆë‹¤.
ë¹„í™œì„±í™”í• ìˆ˜ 없습니다 %1$s
ë¹„í™œì„±í™”í• ìˆ˜ 없습니다 %1$s %2$s
ì •ë¦¬ëœ ìºì‰¬ 파ì¼ì„ ë§Œë“¤ê³ ë¡œì»¬ ìžë£Œ ê°€ì ¸ 오기 로컬 ë°ì´í„°ì˜ 백업 ìƒì„± 중...
ë„ë©”ì¸ %1$s를 위해 ìºì‰¬ 색ì¸ì„ ìƒì„±í•˜ê¸°
현재 암호: ppolicy ì¿¼ë¦¬ì˜ DN LDAP 암호 변경 ì„œë²„ì˜ DNS 서비스 ì´ë¦„ 매핑ë˜ì§€ ì•Šì€ PAM 서비스 ì´ë¦„ì— ì‚¬ìš©í• ê¸°ë³¸ 로그온 권한 (ë˜ëŠ” 허용/거부) 기본 하위 ë„ë©”ì¸ homedir ê°’ ìžë¥´ëŠ” ëŒ€ì‹ ë¡œê·¸ íŒŒì¼ ì‚ì œ ë„ë©”ì¸ %1$s를 위해 ìºì‰¬ 색ì¸ì„ ì‚ì œí•˜ê¸°
로그 íŒŒì¼ ì‚ì œ 중...
SSSDê°€ 커버러스(Kerberos) ìž¬ìƒ ìºì‰¬ 파ì¼ì„ ì €ìž¥í•´ì•¼ 하는 íŒŒì¼ ì‹œìŠ¤í…œì˜ ë””ë ‰í† ë¦¬. ì¸ì¦ ì •ë³´ ìºì‰¬ë¥¼ ì €ìž¥ í• ë””ë ‰í† ë¦¬ Active Directory 범위 검색 비활성화 netlink ì¸í„°íŽ˜ì´ìŠ¤ 비활성화 LDAP 페ì´ì§• ì œì–´ 비활성화 ê²€ìƒ‰ëœ %s 서버:
비밀번호가 만료ë˜ê¸° Nì¼ ì „ì— ê²½ê³ ë¥¼ 표시합니다. ì •ê·œí™”ëœ í˜•ì‹ìœ¼ë¡œ 사용ìž/그룹 표시 다른 ë„ë©”ì¸ì—ì„œ ë„ë©”ì¸ ë¡œì»¬ ê·¸ë£¹ì„ í•„í„°ë§í•˜ì§€ ì•ŠìŒ ì •ë³´ 공급ìžì˜ ë„ë©”ì¸ (필수) ë„ë©”ì¸ êµ¬ì„± 요소가 없는 명ì¹ì´ 추가ë˜ëŠ” ë„ë©”ì¸. ì›ê²© 공급ìžì—ì„œë„ ìƒ‰ì¸ì„ ìµœì‹ í™”í•˜ëŠ” ê²ƒì„ ìžŠì§€ 마세요.
그룹 ê²€ìƒ‰ì— ê·¸ë£¹ 구성ì›ì„ í¬í•¨í•˜ì§€ 마ì‹ì‹œì˜¤ 오류: Tì´ë²¤íŠ¸ ì²´ì¸ ID 지ì›ì´ 누ë½ë˜ì—ˆìœ¼ë©°, 로그 분ì„ì´ ì§€ì›ë˜ì§€ 않습니다.
DNS 사ì´íŠ¸ 활성화 - 위치 기반 서비스 검색 ì¸ì¦ ì •ë³´ ê²€ì¦ í™œì„±í™” libfido2 ë¼ì´ë¸ŒëŸ¬ë¦¬ì—ì„œ 디버깅 활성화 ëª¨ë“ ì‚¬ìš©ìž/그룹 활성화 SSSD 프로세서를 위한 코어 ë¤í”„ 활성화 ë˜ëŠ” 비활성화. ë„ë©”ì¸ í™œì„±í™” ë˜ëŠ” 비활성화 ì ˆëŒ€ì ì¸ íŒŒì¼ ë„ë©”ì¸ì„ 활성화 ë˜ëŠ” 비활성화 디버그 ì—추ì 활성화/비활성화 Active Directory ë„ë©”ì¸ ì‚¬ìš© FAST 활성화 기업 주체 활성화 주체 표준화 활성화 ì¸ì¦ì— 하위 ë„ë©”ì¸ ì˜ì— 사용 활성화 PIN ìž…ë ¥: í•ëª© ìºì‰¬ 백그ë¼ìš´ë“œ ìµœì‹ í™” 시간 초과 길ì´(ì´ˆ) í•ëª© ìºì‰¬ 시간 초과 길ì´(ì´ˆ) ì—´ê±°ëœ ìºì‰¬ 시간 초과 길ì´(ì´ˆ) ì¸ì¦ì„œë¥¼ ì¼ì¹˜í•˜ëŠ” ë™ì•ˆ [%d][%s] 오류가 ë°œìƒí–ˆìŠµë‹ˆë‹¤.
공개 키를 찾는 ë„중 오류 ë°œìƒ
로케ì¼ì„ ì„¤ì •í•˜ëŠ” ë„중 오류 ë°œìƒ
외부 ëª…ë ¹ì„ ì‹¤í–‰í•˜ëŠ” ë„중 오류 ë°œìƒ
외부 ëª…ë ¹ '%s'ì„ ì‹¤í–‰í•˜ëŠ” ë„중 오류 ë°œìƒ
ì„¤ì • ë””ë ‰í† ë¦¬ë¥¼ ì½ëŠ” ë„중 오류가 ë°œìƒí–ˆìŠµë‹ˆë‹¤.
오류: [%d] 개체를 ê°€ì ¸ì˜¬ 수 ì—†ìŒ: %s
FAST 옵션 ('never', 'try', 'demand') 오류 [%d][%s]와 함께 매핑 ë° ì¼ì¹˜ ê·œì¹™ì„ ì¶”ê°€í•˜ì§€ 못했습니다.
base64 문ìžì—´ì„ 디코딩하지 못했습니다.
매핑 필터를 ìƒì„±í•˜ì§€ 못했습니다 [%d][%s].
%sì—ì„œ êµ¬ì„±ì„ ë¡œë“œí•˜ì§€ 못했습니다.
%s 열기 실패
ê²€ì¦ê¸°ë¥¼ 실행하지 못했습니다 certmap 컨í…스트를 ì„¤ì •í•˜ì§€ 못했습니다.
íŒŒì¼ %1$sì´ ì¡´ìž¬í•˜ì§€ ì•ŠìŒ.
íŒŒì¼ ì†Œìœ ê¶Œ ë° ê¶Œí•œì„ í™•ì¸í•˜ì§€ 못했습니다. root:root ë° 0600ì´ ì˜ˆìƒë©ë‹ˆë‹¤.
CA ì¸ì¦ì„œê°€ í¬í•¨ëœ íŒŒì¼ í´ë¼ì´ì–¸íŠ¸ ì¸ì¦ì„œê°€ í¬í•¨ëœ íŒŒì¼ í´ë¼ì´ì–¸íŠ¸ 키가 í¬í•¨ëœ íŒŒì¼ íŒŒì¼ ë„¤ê±°í‹°ë¸Œ ìºì‰¬ 시간 초과 길ì´(ì´ˆ) pam_sssë¡œ ì „ì†¡ëœ PAM ì‘답 í•„í„°ë§ ê·¸ë£¹ 검색 í•„í„°ë§ ì‚¬ìš©ìž ê²€ìƒ‰ í•„í„°ë§ ì²« 번째 ìš”ì¸ (현재 암호): 첫 번째 ìš”ì¸: LDAP 참조 준수 성명 GECOS ì†ì„± GID ì†ì„± ë„ë©”ì¸ì„ 위한 ì ‘ê·¼ ë³´ê³ ë¥¼ ë°œìƒí•©ë‹ˆë‹¤ 그룹 UUID ì†ì„± 그룹 멤버 ì†ì„± 그룹 ì´ë¦„ 그룹 비밀번호 SSSDê°€ 명시ì 으로 무시해야 하는 그룹 홈 ë””ë ‰í† ë¦¬ ì†ì„± 호스트 ID ê³µê¸‰ìž í˜¸ìŠ¤íŠ¸ê°€ ì§€ì •ë˜ì§€ 않았습니다
sudo ê·œì¹™ì„ í•„í„°ë§í•˜ê¸° 위한 ì´ ì‹œìŠ¤í…œì˜ í˜¸ìŠ¤íŠ¸ ì´ë¦„ ë°/ë˜ëŠ” ì •ê·œí™”ëœ ë„ë©”ì¸ ì´ë¦„ offline_failed_login_attemptsì— ë„달한 후 ì ‘ì†ì„ 거부하는 ë° ê±¸ë¦¬ëŠ” 시간(분) ìºì‰¬ëœ ìžê²© ì¦ëª…ì€ ìºì‰¬ëœ ì¸ì¦ì„ 위해 사용 ë 수 있는 기간 ë‹¤ìŒ ì„œë²„ë¥¼ ì‹œë„하기 ì „ì— SSSDê°€ ë‹¨ì¼ DNS 서버와 í†µì‹ í•´ì•¼ 하는 시간(밀리초) ë‹¨ì¼ DNS 쿼리를 해결하기 위해 ê³„ì† ì‹œë„해야 하는 시간(ì´ˆ) PAC ë°ì´í„°ê°€ ìœ íš¨í•œ 것으로 간주ë˜ëŠ” 기간 온ë¼ì¸ ì ‘ì†ê³¼ ìºì‰¬ 사ì´ì˜ ì ‘ì†ì„ 허용하는 기간(ì¼) 마지막 ì ‘ì† ì„±ê³µ 후 ìºì‰¬ëœ í•ëª©ì„ ë³´ê´€í• ê¸°ê°„(ì¼) ì—°ê²°ì„ ëŠê¸° ì „ì— LDAP ì„œë²„ì— ëŒ€í•œ ì—°ê²°ì„ ìœ ì§€í•˜ëŠ” 시간 서버를 확ì¸í• ë•Œ DNSì˜ ì‘ë‹µì„ ê¸°ë‹¤ë¦¬ëŠ” 시간(ì´ˆ) ìºì‰¬ ë©”ëª¨ë¦¬ì— ê¸°ë¡ì˜ ìœ íš¨ 기간 암호 만료 ê²½ê³ ë¥¼ 표시해야 하는 ì¼ ìˆ˜ 오프ë¼ì¸ì¼ ë•Œ 허용ë˜ëŠ” ì ‘ì† ì‹œë„ ì‹¤íŒ¨ 횟수 와ì¼ë“œì¹´ë“œ ìš”ì² ì¤‘ ê°€ì ¸ì˜¬ 최대 í•ëª© 수 호스트 키가 ìš”ì²ëœ 후 호스트를 known_hosts 파ì¼ì— ìœ ì§€í•˜ëŠ” ë° ê±¸ë¦¬ëŠ” 시간(ì´ˆ) 새ë¡ê²Œ í•œ í›„ì— í˜¸ìŠ¤íŠ¸ ssh 키를 ìœ ì§€í•´ì•¼ í• ì‹œê°„(ì´ˆ). IE 호스트 키를 ìºì‰¬í•˜ëŠ” 기간. PAM ìš”ì²ì— 대해 ìºì‰¬ëœ ID ì •ë³´ë¥¼ ìœ ì§€í•˜ëŠ” ë° ê±¸ë¦¬ëŠ” 시간(ì´ˆ) p11_childê°€ 완료ë 때까지 pam_ssê°€ 몇 ì´ˆ ë™ì•ˆ 대기합니까 passkey_childê°€ 완료ë 때까지 pam_sssê°€ 몇 ì´ˆ ë™ì•ˆ 대기합니까 ë§Œë£Œëœ í•ëª©ì„ 백그ë¼ìš´ë“œì—ì„œ ìƒˆë¡œê³ ì¹¨í•˜ëŠ” ë¹ˆë„ í•˜ìœ„ ë„ë©”ì¸ ëª©ë¡ì„ 새로 ê³ ì¹¨ 하는 ë¹ˆë„ í´ë¼ì´ì–¸íŠ¸ì˜ DNS í•ëª©ì„ 주기ì 으로 ìµœì‹ í™”í•˜ëŠ” ë¹ˆë„ ë³„ì¹ ì—참조 방법 IP 호스트 í•ëª©USN ì†ì„± IP 호스트 ì´ë¦„ ì†ì„± IP 호스트 번호(address) ì†ì„± IP ë„¤íŠ¸ì›Œí¬ í•ëª©USN ì†ì„± IP ë„¤íŠ¸ì›Œí¬ ì´ë¦„ ì†ì„± IP ë„¤íŠ¸ì›Œí¬ ë²ˆí˜¸(address) ì†ì„± IPA í´ë¼ì´ì–¸íŠ¸ 호스트네임 IPA ë„ë©”ì¸ IPA 서버 주소 sudo ê·œì¹™ì„ í•„í„°ë§í•˜ê¸° 위한 ì´ ì‹œìŠ¤í…œì˜ IPv4 ë˜ëŠ” IPv6 주소 ë˜ëŠ” ë„¤íŠ¸ì›Œí¬ ID ê³µê¸‰ìž í´ë¼ì´ì–¸íŠ¸ì˜ ìžë™ ì—°ê²° í•´ì œ ì „ ìœ íœ´ 시간 ì‘답ìžì˜ ìžë™ 종료 ì „ ìœ íœ´ 시간 만약 2-Factor-Authentication(2FA)ê°€ 사용ë˜ê³ ìžê²© ì¦ëª…ì„ ì €ìž¥í•´ì•¼ 하는 경우 ì´ ê°’ì€ ì²« 번째 ì¸ì¦ 요소(장기 비밀번호)ê°€ SHA512 해쉬로 ìºì‰¬ì— ì €ìž¥ë˜ì–´ì•¼ 하는 최소 길ì´ë¥¼ ê²°ì •í•©ë‹ˆë‹¤. 중앙 ë””ë ‰í† ë¦¬ì— ì €ìž¥ëœ ì‰˜ì´ í—ˆìš©ë˜ì§€ë§Œ ì‚¬ìš©í• ìˆ˜ 없는 경우 ì´ ëŒ€ì²´ë¥¼ 사용하ì‹ì‹œì˜¤ 거짓으로 ì„¤ì •í•˜ë©´, PAMì—ì„œ ì œê³µí•œ 호스트 ì¸ìˆ˜ê°€ 무시ë©ë‹ˆë‹¤ trueì¸ ê²½ìš° SSSD는 ë‚®ì€ ìŠ¹ë¥ ì˜ ì£¼ë¬¸ 논리로 다시 ì „í™˜í•©ë‹ˆë‹¤ ì½ì„ 수 없는 LDAP 참조를 무시합니다 디버그 기ë¡ì—ì„œ 시간표기ì—는 마ì´í¬ë¡œì´ˆë¥¼ 표시합니다 디버그 기ë¡ì— 시간표시 í¬í•¨ ìƒ‰ì¸ ë™ìž‘ì´ ì‹¤íŒ¨í•¨: %1$s
ë„ë©”ì¸ %1$sì„ ìœ„í•œ 색ì¸:
config 파ì¼ì˜ êµ¬ë¬¸ì´ ë¬´ì—‡ì¸ì§€ 나타냅니다. SSSD 0.6.0ê³¼ ê·¸ ì´ìƒì€ ë²„ì „ 2를 사용합니다. [%s]ì„(를) 사용한 InfoPipe ì‚¬ìš©ìž ê²€ìƒ‰ì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
ìºì‰¬ëœ ë‚´ìš©ì— ëŒ€í•œ ì •ë³´: ìºì‰¬ëœ ê·¸ë£¹ì— ëŒ€í•œ ì •ë³´ ìºì‰¬ëœ ë„·ê·¸ë£¹ì— ëŒ€í•œ ì •ë³´ ìºì‰¬ëœ 사용ìžì— 대한 ì •ë³´ ì‘답ìžê°€ dbus-활성화 ë˜ì—ˆìŒì„ 알립니다 ì‘답ìžê°€ 소켓-활성화ë˜ì—ˆìŒì„ 알립니다 Initgroups 만료 시간 ìžì‹ ì˜ íŒ¨ìŠ¤í‚¤ 장치를 ë„£ê³ , 그런 í›„ì— Enter를 눌러주세요. ìž˜ëª»ëœ ìž…ë ¥, '%s' ë˜ëŠ” '%s'를 ìž…ë ¥í•˜ì‹ì‹œì˜¤.
ìž˜ëª»ëœ í¬íŠ¸
ìž˜ëª»ëœ ê²°ê³¼ìž…ë‹ˆë‹¤. ëª¨ë“ SSH 호스트 무효화 ëª¨ë“ autofs 맵 무효화 ìºì‰¬ëœ ëª¨ë“ í•ëª©ì„ 무효화합니다 ìºì‰¬ëœ ëª¨ë“ sudo ê·œì¹™ì„ ë¬´íš¨í™” ëª¨ë“ ê·¸ë£¹ì„ ë¬´íš¨í™”í•©ë‹ˆë‹¤ ëª¨ë“ netgroupì„ ë¬´íš¨í™”í•©ë‹ˆë‹¤ ëª¨ë“ ì„œë¹„ìŠ¤ë¥¼ 무효화합니다 ëª¨ë“ ì‚¬ìš©ìžë¥¼ 무효화합니다 ìºì‰¬ëœ ê°ì²´ 무효화 íŠ¹ì • SSH 호스트 무효화 íŠ¹ì • autofs 맵 무효화 íŠ¹ì • ê·¸ë£¹ì„ ë¬´íš¨í™”í•©ë‹ˆë‹¤ íŠ¹ì • netgroupì„ ë¬´íš¨í™”í•©ë‹ˆë‹¤ íŠ¹ì • 서비스를 무효화합니다 íŠ¹ì • sudo ê·œì¹™ì„ ë¬´íš¨í™” íŠ¹ì • 사용ìžë¥¼ 무효화합니다 ê²€ì¦ê¸°ë¡œ ì‹ë³„ëœ ë¬¸ì œ: %zu
커버러스 TGT는 ë¡œê·¸ì¸ ì‹œ 허용ë˜ì§€ 않으며, ì‚¬ìš©ìž í™˜ê²½ì— ì˜í–¥ì„ 미칩니다. Kerberos 백업 서버 주소 Kerberos ì˜ì— ì‚¬ìš©í• Kerberos ì˜ì— Kerberos 서버 주소 Kerberos 서비스 í‚¤íƒ ì•¡ì„¸ìŠ¤ ê¶Œí•œì„ ê²°ì •í•˜ëŠ” LDAP í•„í„° 오프ë¼ì¸ ìƒíƒœì¼ ë•Œ 다시 ì—°ê²°ì„ ì‹œë„하는 간격 ìºì‰¬ ì •ë¦¬ 사ì´ì˜ 대기 시간 ì—´ê±°ëœ ìµœì‹ í™” 사ì´ì˜ 시간 ì—°ê²°ì„ ì‹œë„í• ì‹œê°„ ë™ê¸°ì‹ LDAP ìž‘ì—…ì„ ì‹œë„하는 시간 ì—´ê±° ìš”ì²ì„ ëŒ€ê¸°í• ì‹œê°„ 검색 ìš”ì² ëŒ€ê¸° 시간 LDAP ì—°ê²°ì„ ìœ„í•œ TGTì˜ ìˆ˜ëª… TGTì˜ ìˆ˜ëª… 사용 가능한 ë„ë©”ì¸ì„ 나열합니다 GSSAPI ì¸ì¦í• 수 있는 PAM 서비스 목ë¡ìž…니다. PAC ì‘답ìžì— ì ‘ê·¼í• ìˆ˜ 있는 UID ë˜ëŠ” ì‚¬ìš©ìž ì´ë¦„ ëª©ë¡ ì‹ ë¢°í• ìˆ˜ 없는 사용ìžë„ ì•¡ì„¸ìŠ¤í• ìˆ˜ 있는 ë„ë©”ì¸ ëª©ë¡ìž…니다. 하위 ë„ë©”ì¸ìœ¼ë¡œ ìƒì†ë˜ì–´ì•¼ 하는 옵션 ëª©ë¡ GSSAPI ì¸ì¦ì„ 사용하여 PAM ì ‘ê·¼ 허용해야 하는 :<ì¸ì¦ 표시기> ìŒ ëª©ë¡ ê°€ëŠ¥í•œ 암호화 ì œí’ˆêµ° ëª©ë¡ ì‹ ë¢°í• ìˆ˜ 있는 uid ë˜ëŠ” ì‚¬ìš©ìž ì´ë¦„ ëª©ë¡ InfoPipeê°€ ê²Œì‹œí• ìˆ˜ 있는 ì‚¬ìš©ìž ì†ì„± ëª©ë¡ ë¡œì»¬ ì¸ì¦ 방법 ì •ì±…. 로컬 ìžë£Œ ë„구: ì¸ì¦ ì •ë³´ ìœ íš¨ì„±ì„ ê²€ì‚¬í•˜ê¸° 위한 keytabì˜ ìœ„ì¹˜ ì‚¬ìš©ìž ì¸ì¦ ì •ë³´ ìºì‰¬ì˜ 위치 ê¸°ë¡ íŒŒì¼ ë„구: ID ë§¤í•‘ì˜ ë°”ì¸ë”© 하한값 ìºì‰¬ 색ì¸ì„ 관리합니다 매핑 í•„í„°:
%s
맵핑 규칙 ì¼ì¹˜ 규칙 시스템 ê³„ì • 암호를 ê°±ì‹ í•˜ê¸° ì „ì˜ ìµœëŒ€ 사용 기간(ì¼) SSSDê°€ 따르는 최대 중첩 수준 í•œ ë²ˆì— ìƒˆë¡œ ê³ ì¹ ìˆ˜ 있는 최대 규칙 수입니다. ì´ë¥¼ 초과하면 ì „ì²´ 새로 ê³ ì¹¨ì´ ìˆ˜í–‰ë©ë‹ˆë‹¤. ì—´ê±°ëœ ìµœì‹ í™” 사ì´ì˜ 최대 기간 편차 백그ë¼ìš´ë“œì—ì„œ ë§Œë£Œëœ í•ëª©ì„ ê°±ì‹ í• ë•Œ 최대 기간 편차 하위 ë„ë©”ì¸ ëª©ë¡ì„ ê°±ì‹ í• ë•Œì— ìµœëŒ€ 기간 편차 í´ë¼ì´ì–¸íŠ¸ì˜ DNS í•ëª©ì„ ìµœì‹ í™” í• ë•Œ 최대 주기 편차 ìºì‰¬ ì •ë¦¬ 사ì´ì˜ 최대 시간 편차 최대 ì‚¬ìš©ìž ID ì‚¬ìš©ìž ê³„ì •ì´ ë§Œë£Œë˜ë©´ ì •ë³´ê°€ ì¶œë ¥ë©ë‹ˆë‹¤. ì‚¬ìš©ìž ê³„ì •ì´ ìž ê²¨ ìžˆì„ ë•Œ ì¶œë ¥ë˜ëŠ” ì •ë³´ìž…ë‹ˆë‹¤. 구성 병합 ì¤‘ì— ìƒì„±ëœ 메시지: %zu
최소 ì‚¬ìš©ìž ID ì‚¬ìš©ìž ì•”í˜¸ë¥¼ 변경하는 ë° ì‚¬ìš©ë˜ëŠ” 모드 ìˆ˜ì • 시간 ì†ì„± ê·¸ë£¹ì˜ ìˆ˜ì • 시간 ì†ì„± netgroupsì˜ ìˆ˜ì • 시간 ì†ì„± ì´ë¦„ sudo ê·œì¹™ì˜ ì˜¤ë¸Œì 트 í´ëž˜ìŠ¤ë¡œ 사용ë˜ëŠ” ì†ì„±ì˜ ì´ë¦„ ID ë§¤í•‘ì˜ ê¸°ë³¸ ë„ë©”ì¸ ì´ë¦„ 네거티브 ìºì‰¬ 시간 초과 길ì´(ì´ˆ) Netgroup ì´ë¦„ Netgroup Triple ì†ì„± netgroups 멤버 ì†ì„± ì‹ ê·œ 암호: 서버가 ì´ì™€ ê°™ì€ ë°©ì‹ì„ 지ì›í•˜ì§€ 않으므로 커버러스 TGTê°€ 허용ë˜ì§€ 않습니다. 통합ì¸ì¦(SSO) í™˜ê²½ì´ ì˜í–¥ì„ 받습니다. ì§€ì •í•œ 검색과 ì¼ì¹˜í•˜ëŠ” ìºì‰¬ 대ìƒì´ 없습니다
서버를 ì°¾ì„ ìˆ˜ 없습니다.
지금까지는 없습니다.
메모리가 충분하지 ì•ŠìŒ
ID 매핑 ì‹œ ê° ìŠ¬ë¼ì´ìŠ¤ì— 대한 ID 수 ë‘ ë²ˆì§¸ 슬ë¼ì´ìŠ¤ 수 ìžë£Œ(ë°ì´íƒ€) 공급ìžì— 대한 ì—°ê²° ì‹œë„ íšŸìˆ˜ IP 호스트용 오브ì 트 í´ëž˜ìŠ¤ IP 네트워í¬ì˜ 오브ì 트 í´ëž˜ìŠ¤ automounter 맵 í•ëª©ì˜ 오브ì 트 í´ëž˜ìŠ¤ automounter ë§µì˜ ì˜¤ë¸Œì 트 í´ëž˜ìŠ¤ sudo ê·œì¹™ì˜ ì˜¤ë¸Œì 트 í´ëž˜ìŠ¤ 그룹 ë®ì–´ì“°ê¸° ê°ì²´ì˜ ê°ì²´ í´ëž˜ìŠ¤ 그룹용 개체 í´ëž˜ìŠ¤ netgroupì˜ ì˜¤ë¸Œì 트 í´ëž˜ìŠ¤ ë®ì–´ì“°ê¸° ê°ì²´ì˜ ê°ì²´ í´ëž˜ìŠ¤ 서비스용 오브ì 트 í´ëž˜ìŠ¤ ì‚¬ìš©ìž ë®ì–´ì“°ê¸° ê°ì²´ì˜ ê°ì²´ í´ëž˜ìŠ¤ 사용ìžë¥¼ 위한 오브ì 트 í´ëž˜ìŠ¤ 보기 컨테ì´ë„ˆì˜ ê°ì²´ í´ëž˜ìŠ¤ 오프ë¼ì¸ 세션 ê¸°ë¡ ë²”ìœ„ë¥¼ ì§€ì •í•˜ëŠ” ë‹¤ìŒ ë¬¸ìžì—´ 중 하나: ì—†ìŒ - 기ë¡ëœ 사용ìžê°€ 없습니다. ì¼ë¶€ - ì‚¬ìš©ìž ë° ê·¸ë£¹ 옵션ì—ì„œ ì§€ì •í•œ 사용ìž/ê·¸ë£¹ì´ ê¸°ë¡ë©ë‹ˆë‹¤. all - ëª¨ë“ ì‚¬ìš©ìžê°€ 기ë¡ë©ë‹ˆë‹¤. 온ë¼ì¸ 온ë¼ì¸ ìƒíƒœ: %s
íŠ¹ì • ë„ë©”ì¸ì˜ í•ëª©ë§Œ 무효화 GPO 기반 액세스 ì œì–´ë¥¼ 위한 ìž‘ë™ ëª¨ë“œ 옵션 -g는 -D ë˜ëŠ” -i와 호환ë˜ì§€ 않습니다
옵션 -i|--interactive는 -D|--daemonê³¼ 함께 ì‚¬ìš©í• ìˆ˜ 없습니다.
시스템 ê³„ì • ê°±ì‹ ìž‘ì—… ì¡°ì • 옵션 메모리 부족!
ì´ ê°’ìœ¼ë¡œ ID 공급ìžì˜ GID ê°’ ìž¬ì •ì˜ ê¸°ì¡´ 백업 ë®ì–´ì“°ê¸° ì´ ê°’ìœ¼ë¡œ ì‹ë³„ 공급ìžì—ì„œ homedir ê°’ì„ ìž¬ì •ì˜í•©ë‹ˆë‹¤ ì´ ê°’ê³¼ 함께 ì‹ë³„ 공급ìžì—ì„œ 쉘 ê°’ì„ ìž¬ì •ì˜ í•©ë‹ˆë‹¤ DNS ìµœì‹ í™”ë¥¼ 수행하는 ë° ì‚¬ìš©ë˜ëŠ” DNS 서버 ìž¬ì •ì˜ PAM 환경:
PAM ë™ìž‘ [auth|acct|setc|chau|open|clos], ê¸°ë³¸ì„¤ì •: GPO 기반 액세스가 í•ìƒ 거부ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO 기반 액세스가 í•ìƒ 부여ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO (거부)BatchLogonRight ì •ì±… ì„¤ì •ì— ë§¤í•‘ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO(거부)InteractiveLogonRight ì •ì±… ì„¤ì •ì— ë§¤í•‘ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO(거부)NetworkLogonRight ì •ì±… ì„¤ì •ì— ë§¤í•‘ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO(거부)RemoteInteractiveLogonRight ì •ì±… ì„¤ì •ì— ë§¤í•‘ë˜ëŠ” PAM 서비스 ì´ë¦„ GPO (거부)ServiceLogonRight ì •ì±… ì„¤ì •ì— ë§¤í•‘ë˜ëŠ” PAM 서비스 ì´ë¦„ PAM 서버스, ê¸°ë³¸ì„¤ì •: ì‚¬ìš©í• PAM ìŠ¤íƒ PIN ìž ê¸ˆ 스마트 ì¹´ë“œ ì¸ì¦ì„ 위한 장치 ì„ íƒì„ ì œí•œí•˜ëŠ” PKCS#11 URI Passkey와 ì—°ê´€ëœ ë„구: 비밀번호 ë³€ê²½ì— ì‹¤íŒ¨í•¨. 비밀번호 변경 ê³µê¸‰ìž ì•”í˜¸ê°€ 만료ë˜ì—ˆìŠµë‹ˆë‹¤. 지금 암호를 변경하ì‹ì‹œì˜¤. rootë¡œ ìž¬ì„¤ì •í•œ 암호는 지ì›ë˜ì§€ 않습니다. 비밀번호: 암호가 ì¼ì¹˜í•˜ì§€ 않습니다 그룹 íŒŒì¼ ì†ŒìŠ¤ì˜ ê²½ë¡œìž…ë‹ˆë‹¤. passwd íŒŒì¼ ì†ŒìŠ¤ 경로입니다. CA ì¸ì¦ì„œ ë””ë ‰í† ë¦¬ì˜ ê²½ë¡œ PKCS#11 ëª¨ë“ˆì€ ì¸ì¦ì„œê°€ 있는 ë°ì´í„°ë² ì´ìŠ¤ì˜ 경로입니다. ì‹ ë¢°í• ìˆ˜ 있는 CA ì¸ì¦ì„œ ì €ìž¥ 경로 ìºì‰¬ í–¥ìƒì„ 수행합니다 패스키 등ë¡ì„ 수행합니다 SSSD êµ¬ì„±ì˜ í†µê³„ 분ì„ì„ ìˆ˜í–‰í•©ë‹ˆë‹¤ ê¶Œí•œì´ ê±°ë¶€ë˜ì—ˆìŠµë‹ˆë‹¤. 다른 스마트카드를 (다시)ìž…ë ¥í•´ 주세요 ë¬´íš¨í™”í• ê°œì²´ë¥¼ 하나 ì´ìƒ ì„ íƒí•˜ì‹ì‹œì˜¤.
암호 만료 í‰ê°€ ì •ì±… 기본 GID ì†ì„± 사용ìžì— 대한 ì •ë³´ ì¶œë ¥ê³¼ ì¸ì¦ ì ê²€ ë„ë©”ì¸ì— 대한 ì •ë³´ ì¶œë ¥ ì¸ì¦ì„œì— 대한 ì •ë³´ ì¶œë ¥ 호스트 ssh 공개 키 ì¸ì‡„ ë²„ì „ 번호를 ì¸ì‡„í•˜ê³ ì¢…ë£Œí•©ë‹ˆë‹¤ ì™„ì „ížˆ-ì¸ì¦ëœ ì´ë¦„ì„ í‘œì‹œí•˜ê¸° 위한 ì¶œë ¥-호환 í˜•ì‹ ê¶Œí•œ 있는 ì†Œì¼“ì— ìž˜ëª»ëœ ì†Œìœ ê¶Œ ë˜ëŠ” ê¶Œí•œì´ ìžˆìŠµë‹ˆë‹¤. 공용 ì†Œì¼“ì— ìž˜ëª»ëœ ì†Œìœ ê¶Œ ë˜ëŠ” ê¶Œí•œì´ ìžˆìŠµë‹ˆë‹¤. ì‹ ê·œ 암호 ìž¬ìž…ë ¥: ì„¤ì • ë°ì´í„°ë² ì´ìŠ¤ë¥¼ 새로 ê³ ì¹œ ë‹¤ìŒ ì¢…ë£Œí•©ë‹ˆë‹¤ ì‚¬ìš©ìž ì´ë¦„ê³¼ ë„ë©”ì¸ì„ 구문 분ì„하는 ì •ê·œì‹ ê¸°ì¡´ SSSD ê¸°ë¡ íŒŒì¼ ì œê±° ìºì‰¬ íŒŒì¼ ì œê±° 중...
TGTì˜ ìž¬ìƒ ê°€ëŠ¥ 수명 í‹°ì¼“ì˜ ìš”ì²ëœ 수명 í‹°ì¼“ì˜ ìš”ì²ëœ ìž¬ìƒ ê°€ëŠ¥ 수명 주체 ì´ë¦„ì˜ ì •ê·œí™” ìš”ì² TLS ì¸ì¦ì„œ í™•ì¸ í•„ìš” ID ê²€ìƒ‰ì— TLS í•„ìš” í•´ê²° ê³µê¸‰ìž ë°ì´í„° ê°€ì ¸ 오기 후 SSSD 재시작 백업ì—ì„œ 로컬 ìžë£Œ ë³µì› ë¡œì»¬ ë°ì´í„° ë³µì› ì¤‘...
DNS ê²€ìƒ‰ì„ ìˆ˜í–‰í• ë•Œ íŠ¹ì • 주소 ê³„ì—´ì„ ì œí•œí•˜ê±°ë‚˜ ì„ í˜¸í•©ë‹ˆë‹¤ AD와 IPA 공급ìžë¥¼ 위해 ìžë™ìœ¼ë¡œ PAC ì‘ë‹µìž ì‹¤í–‰ ëŒ€í™”ì‹ ì‹¤í–‰ (ë°ëª¬ì´ 아님) SELinux ê³µê¸‰ìž ID ë§¤í•‘ì„ ìœ„í•œ 기본 ë„ë©”ì¸ì˜ SID SSH 공개 키 ì†ì„± ì‹œìž‘í•˜ë ¤ëŠ” SSSD ë„ë©”ì¸ SSSD InfoPipe ì‚¬ìš©ìž ê²€ìƒ‰ ê²°ê³¼:
시작 í•˜ë ¤ëŠ” SSD 서비스 SSSD ìƒíƒœ: 로컬 ë°ì´í„°ì˜ SSSD ë°±ì—…ì´ ì´ë¯¸ 존재합니다. ë®ì–´ì“°ì‹œê² 습니까? SSSDê°€ ì´ë¯¸ 실행ë˜ê³ 있습니다
SSSD는 ë£¨íŠ¸ì— ì˜í•´ 실행ë˜ì§€ 않습니다. SSSDê°€ 실행 ì¤‘ì´ ì•„ë‹™ë‹ˆë‹¤.
SSSD는 내부 DNS resolver를 ìµœì‹ í™”ê°€ í•„ìš” í• ë•Œë¥¼ ì‹ë³„하기 위해 resolv.confì˜ ìƒíƒœë¥¼ 관리합니다. 기본ì 으로, 우리는 ì´ë¥¼ 위해 inotify를 ì‚¬ìš©í•˜ë ¤ê³ ì‹œë„í•˜ê³ , 만약 inotify를 사용 í• ìˆ˜ 없는 ê²½ìš°ì— ë§¤ 5초마다 resolv.conf 투표로 ë˜ëŒì•„ ê°ˆ 것입니다. SSSDê°€ 실행ë˜ê³ 있지 않아야 합니다. 지금 SSSD를 ì¤‘ì§€í•˜ì‹œê² ìŠµë‹ˆê¹Œ? SSSD를 다시 시작해야 합니다. 지금 SSSD를 다시 ì‹œìž‘í•˜ì‹œê² ìŠµë‹ˆê¹Œ? SSSD를 실행해야 합니다. 지금 SSSD를 ì‹œìž‘í•˜ì‹œê² ìŠµë‹ˆê¹Œ? SSSD nss ì‚¬ìš©ìž ê²€ìƒ‰ ê²°ê³¼:
SSSD ì†Œì¼“ì´ ì¡´ìž¬í•˜ì§€ 않습니다. SUDO ê³µê¸‰ìž ê·¸ë£¹ 검색 범위 ì‚¬ìš©ìž ê²€ìƒ‰ 범위 ë°ìŠ¤í¬íƒ‘ 프로필 ê´€ë ¨ 개체 검색 기준 HBAC와 ì—°ê´€ëœ ê°ì²´ë¥¼ 위한 검색 기반 SUBID 범위를 위한 기반 검색 IPA ë„ë©”ì¸ì— 대한 ì •ë³´ê°€ í¬í•¨ëœ ê°ì²´ 검색 기반 ID ë²”ìœ„ì— ëŒ€í•œ ì •ë³´ê°€ í¬í•¨ëœ ê°ì²´ 검색 기반 보기 컨테ì´ë„ˆì˜ 검색 기준 SIDë¡œ 검색 그룹 IDë¡œ 검색 ì‚¬ìš©ìž IDë¡œ 검색 ë‘ ë²ˆì§¸ ìš”ì¸(ì„ íƒ ì‚¬í•): ë‘ ë²ˆì§¸ ìš”ì¸: FASTì— ì‚¬ìš©í• ì£¼ì²´ë¥¼ ì„ íƒ ì„œë²„ 메시지: KDCê°€ ì•„ë‹Œ 경우 변경 암호 서비스가 실행 ì¤‘ì¸ ì„œë²„ 서비스 ì´ë¦„ ì†ì„± DNS 서비스 ê²€ìƒ‰ì„ ìœ„í•œ 서비스 ì´ë¦„ 서비스 í¬íŠ¸ ì†ì„± 서비스 í”„ë¡œí† ì½œ ì†ì„± 세션 관리 ê³µê¸‰ìž libldap 디버그 수준 ì„¤ì • LDAP 서버ì—ì„œ í—ˆìš©ëœ IDì˜ í•˜í•œ 경계 ì„¤ì • 디버그 ë¡œê¹…ì˜ ìžì„¸í•œ ì •ë³´ ì„¤ì • LDAP 서버ì—ì„œ í—ˆìš©ëœ IDì˜ ìƒí•œ 경계 ì„¤ì • 쉘 ì†ì„± 공급ìžê°€ 목ë¡ì„ 나열하지 않는 경우 ì‚¬ìš©í• ì‰˜ 그룹ì—ì„œ í•„í„°ë§ëœ 사용ìžê°€ 표시ë˜ì–´ì•¼ 합니다 디버그 ì •ë³´ë¥¼ 표시합니다 ë©”ì¸ ë˜ëŠ” ì‹ ë¢°í• ìˆ˜ 있는 ë„ë©”ì¸ ìœ í˜•ì„ í¬í•¨í•œ ë„ë©”ì¸ ëª©ë¡ í‘œì‹œ 활성 ì„œë²„ì— ëŒ€í•œ ì •ë³´ 표시 ê²€ìƒ‰ëœ ì„œë²„ ëª©ë¡ í‘œì‹œ 온ë¼ì¸ ìƒíƒœ 표시 ì¸ì¦ì„œì— 대ì‘ëœ ì‚¬ìš©ìž í‘œì‹œ --genconf와 ìœ ì‚¬í•˜ì§€ë§Œ ì§€ì •ëœ ì„¹ì…˜ë§Œ 새로 ê³ ì¹¨í•©ë‹ˆë‹¤ 그룹 ìš”ì²ì„ 위한 ê³ ì† ìºì‰¬ ë©”ëª¨ë¦¬ì— ë‚´ë¶€ì— í• ë‹¹ëœìžë£Œ í…Œì´ë¸”ì˜ í¬ê¸°(MB) initgroups ìš”ì²ì„ 위해 ë¹ ë¥¸ ìºì‰¬ ë©”ëª¨ë¦¬ì— í• ë‹¹ëœ ìžë£Œ í…Œì´ë¸”ì˜ í¬ê¸°(MB) 비밀번호 ìš”ì²ì„ 위해 ë¹ ë¥¸ ìºì‰¬ ë©”ëª¨ë¦¬ì— í• ë‹¹ëœ ìžë£Œ í…Œì´ë¸”ì˜ í¬ê¸°(MB) 스마트 ë° ì „ì²´ 새로 ê³ ì¹¨ ìž„ì˜ ì˜¤í”„ì…‹ FASTì— ì‚¬ìš©í• ì„œë²„ 주체를 ì§€ì • 하위 ë„ë©”ì¸ ëª©ë¡ì´ ìœ íš¨í•œ 것으로 간주ë˜ëŠ” 시간(ì´ˆ) ì§€ì •í•©ë‹ˆë‹¤. ê¸°ë³¸ì´ ì•„ë‹Œ config íŒŒì¼ ì§€ì • ê¸°ë³¸ì´ ì•„ë‹Œ 스니펫 ë””ë ‰í† ë¦¬ë¥¼ ì§€ì •í•©ë‹ˆë‹¤(ê¸°ë³¸ê°’ì€ ê¸°ë³¸ ì„¤ì • 파ì¼ì´ 있는 ë™ì¼í•œ 위치를 검색하는 것입니다. 예를 들어 êµ¬ì„±ì´ "/my/path/sssd.conf"ë¡œ ì„¤ì •ëœ ê²½ìš° 스니펫 ë””ë ‰í† ë¦¬ "/my/path/conf.d"ê°€ 사용ë¨) base64ë¡œ ì¸ì½”ë”©ëœ ì¸ì¦ì„œë¥¼ ì§€ì •í•©ë‹ˆë‹¤. ì„¤ì •í• ë””ë²„ê·¸ 수준 ì§€ì • ë„ë©”ì¸ ì´ë¦„ì„ ì§€ì •í•©ë‹ˆë‹¤. ì´ë¦„ì„ ì§€ì •í•©ë‹ˆë‹¤. LDAP sasl 권한 ë¶€ì—¬ì— ëŒ€í•œ 최대 SSF를 ì§€ì • LDAP sasl 권한 ë¶€ì—¬ì— ëŒ€í•œ 최소 SSF를 ì§€ì • ì‚¬ìš©í• sasl 권한 부여 ID를 ì§€ì • ì‚¬ìš©í• sasl 권한 부여 ì˜ì—ì„ ì§€ì • ì‚¬ìš©í• sasl 메커니즘 ì§€ì • ì‚¬ìš©ìž ì´ë¦„ì„ ì§€ì •í•©ë‹ˆë‹¤. SSSDê°€ 실행 ì¤‘ì´ ì•„ë‹Œ 경우 시작 ìºì‰¬ê°€ ì œê±°ë ë•Œ SSSD를 시작합니다 ìºì‰¬ë¥¼ ì œê±°í•˜ê¸° ì „ì— SSSD 중지 ë‚˜ì¤‘ì— ì˜¨ë¼ì¸ ì¸ì¦ì„ 위해 오프ë¼ì¸ì¼ 경우 암호 ì €ìž¥ ì´ ê°’ê³¼ 함께 ì‹ë³„ 공급ìžì—ì„œ 빈 homedir ê°’ì„ ì´ ê°’ìœ¼ë¡œ 대체합니다 sudo 규칙 ëª…ë ¹ ì†ì„± sudo 규칙 호스트 ì†ì„± sudo 규칙 ì´ë¦„ sudo 규칙 notafter ì†ì„± sudo 규칙 notfore ì†ì„± sudo 규칙 옵션 ì†ì„± sudo 규칙 순서 ì†ì„± sudo 규칙 runas ì†ì„± sudo 규칙 runasgroup ì†ì„± sudo 규칙 runasuser ì†ì„± sudo 규칙 ì‚¬ìš©ìž ì†ì„± ì‹œìŠ¤í…œì´ ì˜¤í”„ë¼ì¸ ìƒíƒœì´ë©° 암호가 변경ë 수 없습니다 ëŒ€ìƒ ì§€ì • ë„ë©”ì¸ ëŒ€ìƒ AUTOFS 서비스 ëŒ€ìƒ IFP 서비스 ëŒ€ìƒ NSS 서비스 ëŒ€ìƒ PAC 서비스 ëŒ€ìƒ PAM 서비스 ëŒ€ìƒ SSH 서비스 ëŒ€ìƒ SSSD 서비스 ëŒ€ìƒ SUDO 서비스 로깅 목ì ì„ ìœ„í•´ 사용ë˜ëŠ” Tì´ë²¤íŠ¸ ì²´ì¸ ID memberUser ë° memberHost ëŒ€ì‹ ì¼ì¹˜í•˜ëŠ” ë° ì‚¬ìš©í• ìˆ˜ 있는 HBAC ê·œì¹™ì˜ DNì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. í˜¸ìŠ¤íŠ¸ì˜ FQDNì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. netgroupì˜ NIS ë„ë©”ì¸ ì´ë¦„ì„ í¬í•¨í•˜ëŠ” LDAP ì†ì„±ìž…니다. SELinux ì‚¬ìš©ìž ë¬¸ìžì—´ ìžì²´ë¥¼ í¬í•¨í•˜ëŠ” LDAP ì†ì„±ìž…니다. ì´ ê·œì¹™ì´ ì¼ì¹˜í•˜ëŠ” ëª¨ë“ í˜¸ìŠ¤íŠ¸/í˜¸ìŠ¤íŠ¸ê·¸ë£¹ì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. ì´ ê·œì¹™ì´ ì¼ì¹˜í•˜ëŠ” ëª¨ë“ ì‚¬ìš©ìž / ê·¸ë£¹ì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. 호스트 범주(예: 'all')ê°€ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. LDAP netgroup ê°œì²´ì˜ UUID/GUIDê°€ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. í˜¸ìŠ¤íŠ¸ì˜ SSH 공개 키가 í¬í•¨ëœ LDAP ì†ì„±ìž…니다. SELinux ì‚¬ìš©ìž ë§µì˜ ì´ë¦„ì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. netgroup ë©¤ë²„ì˜ ì´ë¦„ì´ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. ì‚¬ìš©ìž ë§µì˜ ê³ ìœ IDê°€ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. 'all'ê³¼ ê°™ì€ ì‚¬ìš©ìž ë²”ì£¼ê°€ í¬í•¨ëœ LDAP ì†ì„±ìž…니다. ì‚¬ìš©ìž ë§µì´ ì‚¬ìš© 가능한지 여부를 í¬í•¨í•˜ëŠ” LDAP ì†ì„±ìž…니다. netgroup ì´ë¦„ì— í•´ë‹¹í•˜ëŠ” LDAP ì†ì„±ìž…니다. netgroupì˜ ë©¤ë²„ì¸ í˜¸ìŠ¤íŠ¸ ë° í˜¸ìŠ¤íŠ¸ ê·¸ë£¹ì˜ FQDNì„ ë‚˜ì—´í•˜ëŠ” LDAP ì†ì„±ìž…니다. netgroupì˜ ì§ì ‘ 구성ì›ì¸ 호스트 ë° í˜¸ìŠ¤íŠ¸ ê·¸ë£¹ì„ ë‚˜ì—´í•˜ëŠ” LDAP ì†ì„±ìž…니다. netgroupì˜ ë©¤ë²„ì‹ì„ 나열하는 LDAP ì†ì„±ìž…니다. netgroupì˜ ì§ì ‘ 구성ì›ì¸ 시스템 ì‚¬ìš©ìž ë° ê·¸ë£¹ì„ ë‚˜ì—´í•˜ëŠ” LDAP ì†ì„±ìž…니다. LDAP 그룹 외부 멤버 ì†ì„± ì‚¬ìš©í• SSSD ë„ë©”ì¸ LDAP 서버ì—ì„œ 사용ë˜ëŠ” 스키마 ìœ í˜• rfc2307 ìµœì‹ í™” 후 í´ë¼ì´ì–¸íŠ¸ì˜ DNS í•ëª©ì— ì ìš© í•˜ë ¤ëŠ” TTL AD ì„œë²„ì— ëŒ€ì‘하는 GPO ì •ì±… 파ì¼ì˜ 검색 사ì´ì—ì„œ ì‹œê°„ì˜ ì–‘ IPA ì„œë²„ì— ëŒ€ì‘하는 HBAC ê·œì¹™ì˜ ê²€ìƒ‰ 사ì´ì—ì„œ ì‹œê°„ì˜ ì–‘ 마지막 ìš”ì²ì´ ê·œì¹™ì„ ì°¾ì§€ 못한 경우 IPA ì„œë²„ì— ëŒ€í•œ ë°ìŠ¤í¬íƒ‘ 프로필 규칙 검색 간격(분)입니다 IPA ì„œë²„ì— ëŒ€ì‘하는 ë°ìŠ¤í¬íƒ‘ í”„ë¡œíŒŒì¼ ê·œì¹™ì˜ ê²€ìƒ‰ 사ì´ì—ì„œ ì´ˆ 단위 ì‹œê°„ì˜ ì–‘ IPA ì„œë²„ì— ëŒ€ì‘하는 SELinux ë§µì˜ ê²€ìƒ‰ 사ì´ì—ì„œ ì´ˆ 단위 ì‹œê°„ì˜ ì–‘ 기본 ë°”ì¸ë“œ DNì˜ ì¸ì¦ í† í° ì´ì™€ ê°™ì€ IPA í´ë¼ì´ì–¸íŠ¸ê°€ 사용 ì¤‘ì¸ ì˜¤í† ë§ˆìš´í„° 위치 ì‹¤í–‰í• ë””ë²„ê·¸ 수준 기본 DNì˜ ê¸°ë³¸ê°’ 기본 ë°”ì¸ë”© DN 서비스 검색 DNS ì¿¼ë¦¬ì˜ ë„ë©”ì¸ ë¶€ë¶„ í•ëª© ìºì‰¬ëŠ” ë„ë©”ì¸ì— 대한 entry_cache_timeout ê°’ì˜ ë°±ë¶„ìœ¨ì„ ì´ˆê³¼í•˜ì—¬ ìš”ì²ë˜ëŠ” 경우 백그ë¼ìš´ë“œì—ì„œ í•ëª©ì„ ìžë™ìœ¼ë¡œ ìµœì‹ í™” 하ë„ë¡ ì„¤ì • í• ìˆ˜ 있습니다. 서버를 실행 í• ê·¸ë£¹ ID FAST ccache를 ìƒì„±í• 그룹 ë™ì DNS ìµœì‹ í™”ì— IP를 사용해야 하는 연결장치 거부ë˜ì–´ì„œ 대체ë 쉘 ëª©ë¡ ì‚¬ìš©ìžê°€ ì ‘ì†í• 수 있는 shells ëª©ë¡ ì‚¬ìš©í• NSS ë¼ì´ë¸ŒëŸ¬ë¦¬ì˜ ì´ë¦„ 호스트 ë° ë„¤íŠ¸ì›Œí¬ ê²€ìƒ‰ì— ì‚¬ìš©í• NSS ë¼ì´ë¸ŒëŸ¬ë¦¬ì˜ ì´ë¦„ LDAPì˜ automounter 마스터 ë§µì˜ ì´ë¦„입니다. ì´ ì‘답ìžì— ì˜í•´ ì—´ 수 있는 íŒŒì¼ ì„¤ëª…ìž ìˆ˜ ì „ì²´ 참조 í•´ì œë¥¼ íŠ¸ë¦¬ê±°í•˜ë ¤ë©´ 누ë½ë˜ì–´ì•¼ 하는 êµ¬ì„±ì› ìˆ˜ 미리 ì •ë ¬ëœ í”„ë½ì‹œ 하위 í•ëª© 수입니다. ë‹¨ì¼ LDAP 쿼리ì—ì„œ ê²€ìƒ‰í• ë ˆì½”ë“œ 수 LDAPì—ì„œ 호스트 í•ëª©ì˜ 개체 í´ëž˜ìŠ¤ìž…니다. LDAPì—ì„œ netgroup í•ëª©ì˜ 개체 í´ëž˜ìŠ¤ìž…니다. ì´ ì˜µì…˜ì€ SSSDê°€ IPA 서버ì—ì„œ 실행 ì¤‘ìž„ì„ ë‚˜íƒ€ë‚´ë©° ì‹ ë¢°í• ìˆ˜ 있는 ë„ë©”ì¸ì—ì„œ ì‚¬ìš©ìž ë° ê·¸ë£¹ì˜ ê²€ìƒ‰ì„ ë‹¤ë¥´ê²Œ 수행해야 í•¨ì„ ë‚˜íƒ€ëƒ…ë‹ˆë‹¤. 프ë½ì‹œ ëª…ë ¹ì˜ ê²½ë¡œëŠ” ì ˆëŒ€ 경로여야 합니다.
í˜¸ìŠ¤íŠ¸ì— ì—°ê²°í•˜ëŠ” ë° ì‚¬ìš©í• í¬íŠ¸ 하위 ë„ë©”ì¸ ê°€ì ¸ì˜¤ê¸°ë¥¼ 처리해야 하는 공급ìž. ì´ì™€ ê°™ì€ ê°’ì€ í•ìƒ id_provider와 같아야 합니다. 기본 ë°”ì¸ë“œ DNì˜ ì¸ì¦ í† í° ìœ í˜• 서버를 실행 í• ì‚¬ìš©ìž ID FAST ccache를 ìƒì„±í• ì‚¬ìš©ìž ì‚¬ìš©ìžì˜ ê¶Œí•œì„ ì œê±°í•˜ëŠ” NSS 공급ìžê°€ 반환해야 하는 비밀번호 ìž…ë ¥ ê°’ í…œí”Œë¦¿ì— í˜•ì‹ ë¬¸ìžì—´ %Hê°€ í¬í•¨ëœ 경우 ì´ ì˜µì…˜ì˜ ê°’ì€ override_homedir ì˜µì…˜ì˜ í™•ìž¥ì— ì‚¬ìš©ë©ë‹ˆë‹¤. êµ¬ì„±ì´ ì—†ìŠµë‹ˆë‹¤.
ì´ ë„ë©”ì¸ì—는 활성 서버가 없습니다.
ë‘ ê²€ì‚¬ 사ì´ì˜ ê°±ì‹ ê¸°ê°„ ì‚¬ìš©ìž ì´ë¦„ì„ ëŒ€ì†Œë¬¸ìž êµ¬ë¶„ 로그 íŒŒì¼ ìžë¥´ëŠ” 중...
ì¸ì¦ 확ì¸ì„ ì¡°ì •í•©ë‹ˆë‹¤ PAM ì¸ì¦í•˜ê¸° 위해서 ì¸ì¦ì„œë¥¼ í™•ì¸ ì¡°ì •í•©ë‹ˆë‹¤. 패스키 í™•ì¸ ë™ìž‘ì„ ì¡°ì •í•©ë‹ˆë‹¤ sssd를 netlink ìƒíƒœ ë³€ê²½ì„ ì¡´ì¤‘í•˜ê±°ë‚˜ 무시하ë„ë¡ ì¡°ì •í•©ë‹ˆë‹¤ 그룹 ìœ í˜• ë° ê¸°íƒ€ 플래그 UID ì†ì„± 암호 ë³€ê²½ì´ í—ˆìš©ë˜ëŠ” 백업 LDAP ì„œë²„ì˜ URI 암호 ë³€ê²½ì´ í—ˆìš©ë˜ëŠ” LDAP ì„œë²„ì˜ URI UUID ì†ì„± 로그 파ì¼ì„ ë³´ê´€í• ìˆ˜ 없습니다
시스템 ë²„ìŠ¤ì— ì—°ê²°í• ìˆ˜ 없습니다!
백업 ë””ë ‰í† ë¦¬ [%d]를 ìƒì„± í• ìˆ˜ ì—†ìŒ: %s 로컬 ë°ì´í„°ì˜ ë°±ì—…ì„ ìƒì„± í• ìˆ˜ 없으며, ìºì‰¬ë¥¼ ì œê±° í• ìˆ˜ 없습니다.
그룹 ë®ì–´ì“°ê¸°ë¥¼ 내보낼 수 없습니다
ì‚¬ìš©ìž ë®ì–´ì“°ê¸°ë¥¼ 내보낼 수 없습니다
온ë¼ì¸ ìƒíƒœë¥¼ 얻는 ë° ì‹¤íŒ¨
서버 목ë¡ì„ ê°€ì ¸ì˜¬ 수 없습니다
그룹 ë®ì–´ì“°ê¸°ë¥¼ ê°€ì ¸ì˜¬ 수 없습니다
ì‚¬ìš©ìž ë®ì–´ì“°ê¸°ë¥¼ ê°€ì ¸ì˜¬ 수 없습니다
ëª…ë ¹ ì¸ìˆ˜ë¥¼ 구문 ë¶„ì„ í• ìˆ˜ 없습니다
%s ì´ë¦„ì„ êµ¬ë¬¸ 분ì„í• ìˆ˜ 없습니다.
ì‚¬ìš©ìž ìž…ë ¥ì„ ì½ì„ 수 없습니다
ìºì‰¬ 파ì¼ì„ ì œê±° í• ìˆ˜ 없습니다
로그 파ì¼ì„ ì œê±° í• ìˆ˜ 없습니다
로그 파ì¼ì„ ìžë¥¼ 수 없습니다
예기치 ì•Šì€ ì¸ìˆ˜ê°€ ì œê³µë˜ì—ˆìŠµë‹ˆë‹¤. ë‹¨ì¼ ì˜¤ë¸Œì 트를 무효화하는 ì˜µì…˜ì€ ì œê³µëœ ë‹¨ì¼ ì¸ìˆ˜ë§Œ 허용합니다.
오류 ì„¤ëª…ì„ ì°¾ëŠ” ë™ì•ˆ 예기치 ì•Šì€ ì˜¤ë¥˜ ë°œìƒ ì„œë²„ ì¸ì¦ ì •ë³´ ë©”ì‹œì§€ì˜ ì˜ˆê¸°ì¹˜ ì•Šì€ í˜•ì‹ìž…니다. 알지 못하는 ë™ìž‘: %1$s
ìœ íš¨í•œ ë™ìž‘ì€ "%2$s", "%3$s ë° "%4$s"입니다
ID ë§¤í•‘ì˜ ë°”ì¸ë”© ìƒí•œê°’ ì‚¬ì „ ì„¤ì •ëœ ID ëŒ€ì‹ objectSIDì˜ ID 매핑 사용 LDAP ì—°ê²°ì— Kerberos ì¸ì¦ 사용 LDAP ë° ê¸€ë¡œë²Œ 카탈로그 ìš”ì²ì— LDAPS í¬íŠ¸ 사용 ìµëª…ì˜ PKINIT를 사용하여 FAST ê°•í™”ëœ í‹°ì¼“ì„ ìš”ì²í•©ë‹ˆë‹¤ ìµëª… PKINIT를 사용하여 FAST ì¸ì¦ì„œë¥¼ ìš”ì²í•©ë‹ˆë‹¤ ID ë§¤í•‘ì„ ìœ„í•œ autorid-compatible ì•Œê³ ë¦¬ì¦˜ 사용 krb5_get_init_creds_passwordì˜ ì‚¬ìš©ìž ì§€ì • ë²„ì „ 사용 ì˜ì— ì´ë¦„ì— ëŒ€í•´ 대문ìžë§Œ 사용하ì‹ì‹œì˜¤ ë‹¤ìŒ ì¼ì¹˜ ê·œì¹™ì„ ì‚¬ìš©í•˜ì—¬ ssh 키 ìƒì„±ì„ 위한 ì¸ì¦ì„œë¥¼ í•„í„°ë§í•©ë‹ˆë‹¤ ì§€ì •ëœ ë¬¸ìžì—´ì„ 호스트 오브ì íŠ¸ì˜ ê²€ìƒ‰ 기준으로 사용합니다. 주어진 문ìžì—´ì„ ì‹ ë¢°í• ìˆ˜ 있는 ë„ë©”ì¸ì˜ 검색 기반으로 사용합니다. ì‚¬ìš©ëœ êµ¬ì„± 스니펫 파ì¼: %zu
[%s]ì„/를 사용한 ì‚¬ìš©ìž ì´ë¦„ ê²€ìƒ‰ì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
사용ìžê°€ ì§€ì •ë˜ì§€ 않았습니다
ì‚¬ìš©ìž ì£¼ì²´ ì†ì„±(Kerberosìš©) ì‚¬ìš©ìž ì´ë¦„ ì†ì„± SSSDê°€ 명시ì 으로 무시해야 하는 ì‚¬ìš©ìž PAC ê²€ì¦ ì´ ë„ë©”ì¸ì„ 위한 realmd 구성 ì„œë¹„ìŠ¤ì— ì˜í•´ ì €ìž¥ëœ ë‹¤ì–‘í•œ 태그. 서비스를 재시작 하기 ì „ì— ì™€ì¹˜ë… ì‹œê°„ì´ˆê³¼ DNS ìµœì‹ í™”ë¥¼ 수행하기 위해 ì–´ë–¤ ì¢…ë¥˜ì˜ ì¸ì¦ì„ 사용해야 하는지 ì¸ì¦ ì‹œ 사용ìžì—게 표시ë˜ëŠ” ì •ë³´ì˜ ì¢…ë¥˜ SSSDê°€ 오프ë¼ì¸ ë°©ì‹ìœ¼ë¡œ ì „í™˜ë˜ë©´ ì—°ê²°ì´ ëŠê¸´ ì‹œê°„ì— ë”°ë¼ ì˜¨ë¼ì¸ìœ¼ë¡œ ëŒì•„가기 ì „ì— ì‹œê°„ì´ ëŠ˜ì–´ë‚©ë‹ˆë‹¤. ì´ ê°’ì€ ì´ˆ 단위ì´ë©° 다ìŒì— ì˜í•´ 계산ë©ë‹ˆë‹¤: offline_timeout + random_offset. PAM ì‘답ìžëŠ” ì–¸ì œ initgroups ìš”ì²ì„ ê°•ì œ 실행합니까 krb5 구성 ìŠ¤ë‹ˆíŽ«ì„ ë“œë¡í• 위치 LDAP ë¼ì´ë¸ŒëŸ¬ë¦¬ì—ì„œ SASL ë°”ì¸ë“œ ì¤‘ì— í˜¸ìŠ¤íŠ¸ ì´ë¦„ì„ ì •ì‹í™”하기 위해 ì—ë°©í–¥ ê²€ìƒ‰ì„ ìˆ˜í–‰í•´ì•¼ 하는지 여부 ë„ë©”ì¸ì´ OS ë˜ëŠ” ì‘용프로그램ì—ì„œ 사용 가능한지 여부 nsupdate ìœ í‹¸ë¦¬í‹°ê°€ 기본ì 으로 TCP를 사용하ë„ë¡ í• ì§€ 여부 공급ìžê°€ PTR ë ˆì½”ë“œë„ ëª…ì‹œì 으로 ìµœì‹ í™”í•´ì•¼ 하는지 여부 사용ìžë¥¼ 위한 비공개 ê·¸ë£¹ì„ ìžë™ìœ¼ë¡œ ìƒì„±í• 지 여부 í´ë¼ì´ì–¸íŠ¸ì˜ DNS í•ëª©ì„ ìžë™ìœ¼ë¡œ ìµœì‹ í™” í• ì§€ 여부 FreeIPAì—ì„œ í´ë¼ì´ì–¸íŠ¸ì˜ DNS í•ëª©ì„ ìžë™ìœ¼ë¡œ ìµœì‹ í™” í• ì§€ 여부 kdcinfo 파ì¼ì„ ìƒì„±í• 지 여부 sudo 규칙ì—ì„œ 시간 기반 ì†ì„±ì„ í‰ê°€í• 지 여부 호스트 ì´ë¦„, IP 주소 ë° ë„¤íŠ¸ì›Œí¬ë¡œ ê·œì¹™ì„ í•„í„°ë§í• 지 여부 known_hosts 파ì¼ì—ì„œ 호스트 ì´ë¦„ê³¼ 주소를 í•´ì‹œ(hash)í• ì§€ 여부 호스트 ì†ì„±ì— netgroupì„ í¬í•¨í•˜ëŠ” ê·œì¹™ì„ í¬í•¨í• 지 여부 호스트 ì†ì„±ì— ì •ê·œ 표현ì‹ì„ í¬í•¨í•˜ëŠ” ê·œì¹™ì„ í¬í•¨í• 지 여부 가능한 경우 ìºì‰¬ì—ì„œ ì •ì‹ ê·¸ë£¹ ì´ë¦„ì„ ê²€ìƒ‰í• ì§€ 여부 ì¸ì¦ëœ UPNê³¼ ëŒ€ìƒ ì‚¬ìš©ìžì™€ ì¼ì¹˜ì‹œí‚¬ì§€ 여부 비밀번호 변경 í›„ì— ldap_user_shadow_last_change ì†ì„±ì„ ìµœì‹ í™” í• ì§€ 여부 삼바 ë°ì´í„°ë² ì´ìŠ¤ì—ì„œ 시스템 ê³„ì • 비밀번호를 ìµœì‹ í™” í• ì§€ 여부 Token-Groups 사용 여부 ê²€ìƒ‰ì— Global Catalog 사용 여부 ì‘용프로그램 ë„ë©”ì¸ì— ì ‘ì† í• ìˆ˜ 있는 PAM 서비스 ê³„ì •ì´ ë§Œë£Œë˜ì—ˆëŠ”지 í‰ê°€í•˜ê¸° 위해 ì‚¬ìš©í• ì†ì„± 액세스 ì œì–´ë¥¼ í‰ê°€í•˜ê¸° 위해 사용해야 하는 규칙 ë‹¹ì‹ ì˜ ë¹„ë°€ë²ˆí˜¸ê°€ 만료ë˜ì—ˆìŠµë‹ˆë‹¤. 암호가 만료ë˜ì—ˆìŠµë‹ˆë‹¤. %1$d ìœ ì˜ˆ 로그ì¸ì´ 남아 있습니다. 암호는 %1$d %2$sì— ë§Œë£Œë©ë‹ˆë‹¤. í´ë¼ì´ì–¸íŠ¸ê°€ ì‚¬ìš©í• íŠ¹ì • 사ì´íŠ¸ ADì˜ accountExpires ì†ì„± ì†ì„± 사용ìžì˜ X509 ì¸ì¦ì„œê°€ í¬í•¨ëœ ì†ì„± 사용ìžì˜ ì´ë©”ì¼ ì£¼ì†Œë¥¼ í¬í•¨í•˜ëŠ” ì†ì„± 사용ìžì˜ 패스키 ëŒ€ì‘ ìžë£Œë¥¼ í¬í•¨í•˜ëŠ” ì†ì„± 사용ìžì— í—ˆìš©ëœ ì¸ì¦ ìœ í˜•ì„ ë‚˜ì—´í•˜ëŠ” ì†ì„± [%s]ì„(를) 사용하여 dlopenì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
[%s]ì„(를) 사용하여 dlsymì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
ë„ë©”ì¸ entryUSN ì†ì„± 오류 krbLastPwdChange ì†ì„± krbPasswordExpiration ì†ì„± lastUSN ì†ì„± ldap_backup_uri, LDAP ì„œë²„ì˜ URI ldap_uri, LDAP ì„œë²„ì˜ URI NDSì˜ loginAllowedTimeMap ì†ì„± NDSì˜ loginDisabled ì†ì„± NDSì˜ loginExpirationTime ì†ì„± mallocì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
memberOf ì†ì„± 아니요 ì—°ê²°ë˜ì§€ ì•ŠìŒ nsAccountLock ì†ì„± objectSID ì†ì„± pam_acct_mgmt: %s
[%s] 사용ìžì— 대한 pam_authenticate: %s
pam_chauthtok: %s
pam_close_session: %s
pam_get_itemì— ì‹¤íŒ¨: %s
pam_open_session: %s
pam_setcred: [%s]
pam_startì— ì‹¤íŒ¨: %s
set_debug_file_from_fd가 실패했습니다.
shadowExpire ì†ì„± shadowFlag ì†ì„± shadowInactive ì†ì„± shadowLastChange ì†ì„± ShadowMax ì†ì„± shadowMin ì†ì„± shadowWarning ì†ì„± [%d]ì„(를) 사용하여 sss_getpwnam_rì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
sss_ssh_knownhostsproxy: 호스트 ì´ë¦„ì„ í™•ì¸í• 수 없습니다 %s
sss_ssh_knownhostsproxy: 호스트 %s í¬íŠ¸ %dì— ì—°ê²°: %s
sss_ssh_knownhostsproxy: 프ë½ì‹œ ìžë£Œì— ì—°ê²° í• ìˆ˜ 없습니다: %s
blockoc_asprintfì— ì‹¤íŒ¨í–ˆìŠµë‹ˆë‹¤.
pam_acct_mgmt 테스트
pam_authenticate 테스트
pam_chauthtok 테스트
pam_close_session 테스트
pam_open_session 테스트
pam_setcred 테스트
ì•Œ 수 없는 ë™ìž‘
사용ìž: %s
ë™ìž‘: %s
서비스: %s
ADì˜ UserAccountControl ì†ì„± 예 PRIu64 Running under %, must be root
% ì—ì„œ 실행 중, root여야 합니다