fr.po revision a9228ebcce14888b3123bdf46e610e0900bcd2cc
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher# SOME DESCRIPTIVE TITLE
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher# Copyright (C) YEAR Red Hat
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher# This file is distributed under the same license as the sssd-docs package.
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek# MarbolanGos Fabien <marbolangos@gmail.com>, 2012
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek# Jérôme Fenal <jfenal@gmail.com>, 2012-2013
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek# sgallagh <sgallagh@redhat.com>, 2012
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Project-Id-Version: SSSD\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Report-Msgid-Bugs-To: sssd-devel@redhat.com\n"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"POT-Creation-Date: 2013-08-28 22:36+0300\n"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"PO-Revision-Date: 2013-07-29 13:10+0000\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Last-Translator: Jérôme Fenal <jfenal@gmail.com>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Language-Team: French <trans-fr@lists.fedoraproject.org>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Language: fr\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"MIME-Version: 1.0\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Content-Type: text/plain; charset=UTF-8\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Content-Transfer-Encoding: 8bit\n"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Plural-Forms: nplurals=2; plural=(n > 1);\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd_krb5_locator_plugin.8.xml:5 sssd-simple.5.xml:5 sssd-ipa.5.xml:5
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sssd-ad.5.xml:5 sssd-sudo.5.xml:5 sssd.8.xml:5 sss_obfuscate.8.xml:5
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:5 sssd-krb5.5.xml:5 sss_groupadd.8.xml:5
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_userdel.8.xml:5 sss_groupdel.8.xml:5 sss_groupshow.8.xml:5
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_usermod.8.xml:5 sss_cache.8.xml:5 sss_debuglevel.8.xml:5
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_seed.8.xml:5 sss_ssh_authorizedkeys.1.xml:5
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SSSD Manual pages"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Pages de manuel de SSSD"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:10 sss_groupmod.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_groupmod"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_groupmod"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refmeta><manvolnum>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:11 pam_sss.8.xml:14 sssd_krb5_locator_plugin.8.xml:11
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd.8.xml:11 sss_obfuscate.8.xml:11 sss_useradd.8.xml:11
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupadd.8.xml:11 sss_userdel.8.xml:11 sss_groupdel.8.xml:11
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#: sss_groupshow.8.xml:11 sss_usermod.8.xml:11 sss_cache.8.xml:11
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "modify a group"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "modifier un groupe"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupmod</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:44
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd_krb5_locator_plugin.8.xml:20 sssd-simple.5.xml:22 sssd-ipa.5.xml:21
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sssd-ad.5.xml:21 sssd-sudo.5.xml:21 sssd.8.xml:29 sss_obfuscate.8.xml:30
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:30 sssd-krb5.5.xml:21 sss_groupadd.8.xml:30
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_userdel.8.xml:30 sss_groupdel.8.xml:30 sss_groupshow.8.xml:30
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_usermod.8.xml:30 sss_cache.8.xml:29 sss_debuglevel.8.xml:30
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_seed.8.xml:31 sss_ssh_authorizedkeys.1.xml:30
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "DESCRIPTION"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "DESCRIPTION"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupmod</command> modifies the group to reflect the changes "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"that are specified on the command line."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupmod</command> modifie le groupe pour refléter les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"changements spécifiés sur la ligne de commande."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:39 pam_sss.8.xml:51 sssd.8.xml:42 sss_obfuscate.8.xml:58
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_useradd.8.xml:39 sss_groupadd.8.xml:39 sss_userdel.8.xml:39
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupdel.8.xml:39 sss_groupshow.8.xml:39 sss_usermod.8.xml:39
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_cache.8.xml:38 sss_debuglevel.8.xml:38 sss_seed.8.xml:42
ea929f1b022fc2cb77dec89b0e12accef983ec85Jakub Hrozek#: sss_ssh_authorizedkeys.1.xml:75 sss_ssh_knownhostsproxy.1.xml:62
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "OPTIONS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "OPTIONS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:43 sss_usermod.8.xml:77
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-a</option>,<option>--append-group</option> <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Append this group to groups specified by the <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"a comma separated list of group names."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Ajouter ce groupe aux groupes spécifiés par le paramètre "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>GROUPS</replaceable>. Le paramètre <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> est une liste séparée par des virgules de noms de groupe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupmod.8.xml:57 sss_usermod.8.xml:91
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-r</option>,<option>--remove-group</option> <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Remove this group from groups specified by the <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> parameter."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Supprime ce groupe des groupes spécifiés par le paramètre "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>GROUPS</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refmeta><manvolnum>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd.conf.5.xml:11 sssd-ldap.5.xml:11 sssd-simple.5.xml:11
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sssd-ipa.5.xml:11 sssd-ad.5.xml:11 sssd-sudo.5.xml:11 sssd-krb5.5.xml:11
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refmeta><refmiscinfo>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd.conf.5.xml:12 sssd-ldap.5.xml:12 sssd-simple.5.xml:12
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sssd-ipa.5.xml:12 sssd-ad.5.xml:12 sssd-sudo.5.xml:12 sssd-krb5.5.xml:12
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "File Formats and Conventions"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Formats de fichier et conventions"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd.conf.5.xml:17 sssd-ldap.5.xml:17 sssd_krb5_locator_plugin.8.xml:16
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#: sssd-ipa.5.xml:17 sssd-ad.5.xml:17 sssd-krb5.5.xml:17
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "the configuration file for SSSD"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Le fichier de configuration pour SSSD"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "FILE FORMAT"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "FORMAT DE FICHIER"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" <replaceable>[section]</replaceable>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" <replaceable>[section]</replaceable>\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" <replaceable>key</replaceable> = <replaceable>value</replaceable>\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" <replaceable>key2</replaceable> = <replaceable>value2,value3</replaceable>\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The file has an ini-style syntax and consists of sections and parameters. A "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"section begins with the name of the section in square brackets and continues "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"until the next section begins. An example of section with single and multi-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"valued parameters: <placeholder type=\"programlisting\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ce fichier utilise la syntaxe de style « .ini » et est constituée de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sections et de paramètres. Une section commence par le nom de la section "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"entre crochets et continue jusqu'à la section suivante. Un exemple de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"section avec des paramètres mono et multi-valués : <placeholder type="
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"\"programlisting\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The data types used are string (no quotes needed), integer and bool (with "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"values of <quote>TRUE/FALSE</quote>)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Les types de données utilisées sont des chaînes (pas de guillemets "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"nécessaires), des entiers et des booléens (ayant pour valeur <quote>TRUE/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"FALSE</quote>)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"A line comment starts with a hash sign (<quote>#</quote>) or a semicolon "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"(<quote>;</quote>). Inline comments are not supported."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Un commentaire de ligne commence par un octothorpe (<quote>#</quote>) ou un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"point-virgule (<quote>;</quote>). Les commentaires au sein d'une ligne ne "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sont pas pris en charge."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"All sections can have an optional <replaceable>description</replaceable> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"parameter. Its function is only as a label for the section."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Toutes les sections peuvent avoir un paramètre facultatif de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>description</replaceable>. Sa fonction ne sert qu'à nommer la "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<filename>sssd.conf</filename> must be a regular file, owned by root and "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"only root may read from or write to the file."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<filename>sssd.conf</filename> doit être un fichier normal, appartenant à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"root, et seul root doit pouvoir écrire et lire ce fichier."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SPECIAL SECTIONS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "SECTIONS SPÉCIALES"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The [sssd] section"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "La section [sssd]"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Section parameters"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Paramètres de sections"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "config_file_version (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "config_file_version (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Indique la syntaxe du fichier de configuration. Pour SSSD 0.6.0 ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"supérieure utiliser la version 2."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "services"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "services"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Comma separated list of services that are started when sssd itself starts."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste des services séparés par des virgules qui sont démarrés quand sssd se "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Supported services: nss, pam <phrase condition=\"with_sudo\">, sudo</phrase> "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<phrase condition=\"with_autofs\">, autofs</phrase> <phrase condition="
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder\">, pac</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les services pris en charge : nss, pam <phrase condition=\"with_sudo\">, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sudo</phrase> <phrase condition=\"with_autofs\"> autofs</phrase> <phrase "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"condition=\"with_ssh\">, ssh</phrase> <phrase condition=\"with_pac_responder"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"\">, pac</phrase>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "reconnection_retries (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "reconnection_retries (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Number of times services should attempt to reconnect in the event of a Data "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Provider crash or restart before they give up"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Nombre d'essais de reconnection ou de redémarrage que les services doivent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"effectuer dans le cas d'un plantage du fournisseur de données avant "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'abandonner"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 3"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 3"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "domains"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "domaines"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"A domain is a database containing user information. SSSD can use more "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"domains at the same time, but at least one must be configured or SSSD won't "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"start. This parameter described the list of domains in the order you want "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"them to be queried. A domain name should only consist of alphanumeric ASCII "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"characters, dashes and underscores."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Un domaine est une base de données contenant les informations utilisateurs. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SSSD peut utiliser plusieurs domaines en même temps, au moins un doit être "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuré ou SSSD ne démarrera pas. Ce paramètre décrit la liste des "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"domaines dans l'ordre où ils doivent être requêtés. Un nom de domaine ne "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"doit comprendre que des caractères ASCII alphanumériques, des tirets et "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"caractères soulignés."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "re_expression (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "re_expression (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Default regular expression that describes how to parse the string containing "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"user name and domain into these components."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'expression régulière par défaut qui décrit la manière d'analyser la chaîne "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"contenant le nom d'utilisateur et de domaine dans ces composants."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"Each domain can have an individual regular expression configured. For some "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"ID providers there are also default regular expressions. See DOMAIN "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"SECTIONS for more info on these regular expressions."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Chaque domaine peut avoir une expression régulière individuelle configurée. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour certains fournisseurs ID, il y a aussi des expressions régulières par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"défaut. Voir les SECTIONS DOMAINE pour plus d'informations sur ces "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"expressions régulières."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "full_name_format (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "full_name_format (chaîne)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"A <citerefentry> <refentrytitle>printf</refentrytitle> <manvolnum>3</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"manvolnum> </citerefentry>-compatible format that describes how to compose a "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"fully qualified name from user name and domain name components."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Un format compatible avec<citerefentry> <refentrytitle>printf</"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"refentrytitle> <manvolnum>3</manvolnum> </citerefentry> décrivant comment "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"composer un domaine pleinement qualifé à partir des noms d'utilisateur et de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "%1$s"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "user name"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "nom d'utilisateur"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "%2$s"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "domain name as specified in the SSSD config file."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"nom de domaine tel qu'indiqué dans le fichier de configuration de SSSD."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "%3$s"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"domain flat name. Mostly usable for Active Directory domains, both directly "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"configured or discovered via IPA trusts."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"nom de domaine à plat. Utilisable principalement pour les domaines Active "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Directory, configurés directement ou découverts via les relations "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"d'approbation IPA."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"The following expansions are supported: <placeholder type=\"variablelist\" "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Les expansions suivantes sont prises en charge : <placeholder type="
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Each domain can have an individual format string configured. see DOMAIN "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"SECTIONS for more info on this option."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Chaque domaine peut avoir une chaîne de format individuelle configurée. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Voir les SECTIONS DOMAINE pour plus d'informations sur cette option."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "try_inotify (boolean)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "try_inotify (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"SSSD monitors the state of resolv.conf to identify when it needs to update "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"its internal DNS resolver. By default, we will attempt to use inotify for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"this, and will fall back to polling resolv.conf every five seconds if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"inotify cannot be used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"SSSD gère l'état de resolv.conf pour identifier les besoins de mise à jour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des résolutions DNS internes. Par défaut, l'utilisation de inotify sera "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"tentée, et reviendra à une interrogation de resolv.conf toutes les cinq "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"secondes si inotify échoue."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"There are some limited situations where it is preferred that we should skip "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"even trying to use inotify. In these rare cases, this option should be set "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Il existe quelques cas spécifiques où l'utilisation de inotify n'est pas "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"conseillée. Dans ces rares cas, cette option devrait être définie à « false »"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: true on platforms where inotify is supported. False on other "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : true sur les plates-formes où inotify est pris en charge. False "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sur les autres plates-formes."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Note: this option will have no effect on platforms where inotify is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"unavailable. On these platforms, polling will always be used."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Note : cette option n'aura aucun effet sur les plateformes où inotify n'est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas disponible. Sur celles-ci, l'interrogation régulière sera toujours "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_rcache_dir (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "krb5_rcache_dir (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Directory on the filesystem where SSSD should store Kerberos replay cache "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Répertoire du système de fichiers où SSSD doit stocker les fichiers de cache "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de rejeu Kerberos."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option accepts a special value __LIBKRB5_DEFAULTS__ that will instruct "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"SSSD to let libkrb5 decide the appropriate location for the replay cache."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option accepte une valeur spéciale __LIBKRB5_DEFAULTS__ qui indiquera "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"à SSSD de laisser libkrb5 décider l'emplacement approprié pour le cache de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: Distribution-specific and specified at build-time. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"(__LIBKRB5_DEFAULTS__ if not configured)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : paramètre spécifique à la distribution et spécifié au moment de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la construction du logiciel. (__LIBKRB5_DEFAULTS__ si non configuré)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><term>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "default_domain_suffix (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "default_domain_suffix (string)"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"This string will be used as a default domain name for all names without a "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"domain name component. The main use case is environments where the primary "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"domain is intended for managing host policies and all users are located in a "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"trusted domain. The option allows those users to log in just with their "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"user name without giving a domain name as well."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Cette chaîne servira comme nom de domaine par défaut pour tous les noms sans "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"composant de nom de domaine. Les principaux cas d'utilisation sont les "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"environnements où le domaine principal va permettre de gérer les politiques "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de systèmes ainsi que tous les utilisateur provenant d'un domaine approuvé. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'option permet à ces utilisateurs de se connecter sans fournir un nom de "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Please note that if this option is set all users from the primary domain "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"have to use their fully qualified name, e.g. user@domain.name, to log in."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que, si cette option est définie, tous les utilisateurs du domaine "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"principal doivent utiliser leur nom pleinement qualifié, par exemple "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"user@domain.name, pour se connecter."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd.conf.5.xml:256 sssd-ldap.5.xml:1371 sssd-ldap.5.xml:1383
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1465 sssd-ldap.5.xml:2346 sssd-ldap.5.xml:2373
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:408 include/ldap_id_mapping.xml:145
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "Default: not set"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgstr "Par défaut : non défini"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Individual pieces of SSSD functionality are provided by special SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"services that are started and stopped together with SSSD. The services are "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"managed by a special service frequently called <quote>monitor</quote>. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>[sssd]</quote> section is used to configure the monitor as well as "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"some other important options like the identity domains. <placeholder type="
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"\"variablelist\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les fonctionnalités propres à SSSD sont fournies par des services "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"spécifiques SSSD, qui sont démarrés et arrêtés en même temps que SSSD. Les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"services sont gérés par un service spécifique souvent appelé le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>moniteur</quote>. La section <quote>[sssd]</quote> est utilisée pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configurer le moniteur ainsi que certaines options importantes comme "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'identité des domaines. <placeholder type=\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SERVICES SECTIONS"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "SECTIONS DE SERVICES"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Settings that can be used to configure different services are described in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"this section. They should reside in the [<replaceable>$NAME</replaceable>] "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"section, for example, for NSS service, the section would be <quote>[nss]</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Les options utilisables pour configurer les différents services sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"décrites dans cette section. Ils doivent être situés dans la section "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"[<replaceable>$NAME</replaceable>], par exemple pour le service NSS, la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"section doit être <quote>[nss]</quote>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "General service configuration options"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Options générales de configuration de service"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "These options can be used to configure any service."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Ces options peuvent être utilisées pour configurer les services."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "debug_level (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "debug_level (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "debug_timestamps (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "debug_timestamps (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Add a timestamp to the debug messages"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Ajoute un horodatage aux messages de débogage"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd.conf.5.xml:292 sssd.conf.5.xml:472 sssd.conf.5.xml:819
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1538 sssd-ldap.5.xml:1635 sssd-ldap.5.xml:1692
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:2134 sssd-ldap.5.xml:2199 sssd-ldap.5.xml:2217
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ipa.5.xml:361 sssd-ipa.5.xml:396 sssd-ad.5.xml:161 sssd-ad.5.xml:186
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: true"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : true"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "debug_microseconds (bool)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "debug_microseconds (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Add microseconds to the timestamp in debug messages"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Ajouter les microsecondes à l'horodatage dans les messages de débogage"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:303 sssd.conf.5.xml:773 sssd.conf.5.xml:1750
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:640 sssd-ldap.5.xml:1412 sssd-ldap.5.xml:1431
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1607 sssd-ldap.5.xml:1930 sssd-ipa.5.xml:139
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ipa.5.xml:205 sssd-ipa.5.xml:474 sssd-ipa.5.xml:492
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:264 sssd-krb5.5.xml:298 sssd-krb5.5.xml:469
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: false"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : false"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "timeout (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgstr "timeout (entier)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Timeout in seconds between heartbeats for this service. This is used to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"ensure that the process is alive and capable of answering requests."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Délai d'attente entre deux requêtes pour ce domaine. Ceci est utilisé pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"s'assurer que le processus est toujours actif et capable de répondre."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: 10"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgstr "Par défaut : 10"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "fd_limit"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "fd_limit"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"This option specifies the maximum number of file descriptors that may be "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"opened at one time by this SSSD process. On systems where SSSD is granted "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"the CAP_SYS_RESOURCE capability, this will be an absolute setting. On "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"systems without this capability, the resulting value will be the lower value "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"of this or the limits.conf \"hard\" limit."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option spécifie le nombre maximal de descripteurs de fichiers qui "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"peuvent être ouverts en même temps par ce processus SSSD. Sur les systèmes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"où SSSD se voit accorder la capacité CAP_SYS_RESOURCE, ce sera une limite "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"absolue. Sur les systèmes sans cette capacité, la valeur résultante sera la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"valeur inférieure ou la limite « hard » de limits.conf."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Default: 8192 (or limits.conf \"hard\" limit)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défault : 8192 (ou la limite « hard » de limits.conf)"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "client_idle_timeout"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "client_idle_timeout"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"This option specifies the number of seconds that a client of an SSSD process "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"can hold onto a file descriptor without communicating on it. This value is "
7797e361155f7ce937085fd98e360469d7baf1b6Jakub Hrozek"limited in order to avoid resource exhaustion on the system."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option spécifie la durée en secondes pendant laquelle un client d'un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"processus SSSD peut maintenir un descripteur de fichier ouvert sans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"communiquer avec. Cette valeur est limitée afin d'éviter l'épuisement des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ressources sur le système."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd.conf.5.xml:361 sssd.conf.5.xml:377 sssd.conf.5.xml:591
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:751 sssd.conf.5.xml:1014 sssd-ldap.5.xml:1113
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Default: 60"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : 60"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "force_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "force_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"If a service is not responding to ping checks (see the <quote>timeout</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"quote> option), it is first sent the SIGTERM signal that instructs it to "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"quit gracefully. If the service does not terminate after "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>force_timeout</quote> seconds, the monitor will forcibly shut it down "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"by sending a SIGKILL signal."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si un service ne répond pas aux vérifications par ping (Cf. l'option "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>timeout</quote>), le signal SIGTERM est d'abord envoyé de façon à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'arrêter proprement. Si le service ne se termine pas après "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>force_timeout</quote> secondes, le moniteur sera arrêté violemment à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'aide d'un signal SIGKILL."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "NSS configuration options"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Options de configuration NSS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"These options can be used to configure the Name Service Switch (NSS) service."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Ces options peuvent être utilisées pour configurer le service Name Service "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Switch (NSS)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "enum_cache_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "enum_cache_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"How many seconds should nss_sss cache enumerations (requests for info about "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit mettre en cache les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"énumérations (requêtes sur les informations de tous les utilisateurs)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 120"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 120"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "entry_cache_nowait_percentage (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "entry_cache_nowait_percentage (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The entry cache can be set to automatically update entries in the background "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"if they are requested beyond a percentage of the entry_cache_timeout value "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"for the domain."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"La valeur du cache peut être définie pour mettre à jour automatiquement les "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"entrées en arrière plan si la requête ne dépasse pas un pourcentage de la "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"valeur de entry_cache_timeout pour le domaine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For example, if the domain's entry_cache_timeout is set to 30s and "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"entry_cache_nowait_percentage is set to 50 (percent), entries that come in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"after 15 seconds past the last cache update will be returned immediately, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"but the SSSD will go and update the cache on its own, so that future "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"requests will not need to block waiting for a cache update."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par exemple, si la valeur entry_cache_timeout du domaine est à 30 secondes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"et que entry_cache_nowait_percentage est à 50 (%), les entrées qui veulent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mettre à jour le cache après 15 secondes seront renvoyées immédiatement, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mais SSSD continuera et mettra à jour le cache de lui-même. Ainsi, les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"prochaines requêtes ne seront pas bloquées en attendant une mise à jour du "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Valid values for this option are 0-99 and represent a percentage of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"entry_cache_timeout for each domain. For performance reasons, this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"percentage will never reduce the nowait timeout to less than 10 seconds. (0 "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"disables this feature)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les valeurs autorisées pour cette option vont de 0 à 99 et représentent un "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"pourcentage de la valeur entry_cache_timeout pour chaque domaine. Pour des "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"raisons de performance, ce pourcentage ne réduira jamais le délai d'attente "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"de non réponse à moins de 10 secondes (0 pour désactiver l'option)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 50"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 50"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "entry_negative_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "entry_negative_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies for how many seconds nss_sss should cache negative cache hits "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"(that is, queries for invalid database entries, like nonexistent ones) "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"before asking the back end again."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Spécifie le temps, en secondes, pendant lequel nss_sss doit mettre en cache "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"les résultats négatifs du cache (c'est-à-dire les requêtes pour les bases de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"données invalides, comme celles qui n'existent pas) avant de faire à nouveau "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"appel au moteur."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 15"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 15"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "filter_users, filter_groups (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "filter_users, filter_groups (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Exclude certain users from being fetched from the sss NSS database. This is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"particularly useful for system accounts. This option can also be set per-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"domain or include fully-qualified names to filter only users from the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"particular domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Exclue certains utilisateurs de la recherche à partir de la base de données "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sss NSS. Ceci est particulièrement utile pour les comptes système. Cette "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"option peut aussi être définie pour chaque domaine ou inclure des noms de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaines pleinement qualifiés pour filtrer seulement les utilisateurs d'un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certain domaine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: root"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : root"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "filter_users_in_groups (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "filter_users_in_groups (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If you want filtered user still be group members set this option to false."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Mettre cette option à « false » si les utilisateurs filtrés doivent rester "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"membres de groupes."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "fallback_homedir (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "fallback_homedir (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Set a default template for a user's home directory if one is not specified "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"explicitly by the domain's data provider."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Définir un modèle par défaut pour un répertoire utilisateur si aucun n'est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"explicitement spécifié par le fournisseur de données du domaine."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"The available values for this option are the same as for override_homedir."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Les valeurs disponibles pour cette option sont les mêmes que pour "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"override_homedir."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para><programlisting>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"override_homedir = /home/%u\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"override_homedir = /home/%u\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd.conf.5.xml:490 include/override_homedir.xml:44
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "example: <placeholder type=\"programlisting\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "exemple : <placeholder type=\"programlisting\" id=\"0\"/>"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: not set (no substitution for unset home directories)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Par défaut : non défini (aucune substitution pour les répertoires d'accueil "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"non définis)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "override_shell (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "override_shell (string)"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Override the login shell for all users. This option can be specified "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"globally in the [nss] section or per-domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Substitue l'interpréteur de commandes pour tous les utilisateurs. Cette "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"option peut être spécifiée à l'échelle globale dans la section [nss] ou par "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Default: not set (SSSD will use the value retrieved from LDAP)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : indéfini (SSSD utilisera la valeur récupérée de LDAP)"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "allowed_shells (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "allowed_shells (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Restrict user shell to one of the listed values. The order of evaluation is:"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Restreindre l'interpréteur de commandes de l'utilisateur à l'une des valeurs "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"indiquées. L'ordre d'évaluation est :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "1. If the shell is present in <quote>/etc/shells</quote>, it is used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"1. Si l'interpréteur de commandes est présent dans <quote>/etc/shells</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"quote>, il est utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"2. If the shell is in the allowed_shells list but not in <quote>/etc/shells</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"quote>, use the value of the shell_fallback parameter."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"2. Si l'interpréteur de commandes est dans la liste « allowed_shells » mais "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"n'est pas dans <quote>/etc/shells</quote>, la valeur de repli de « "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"shell_fallback » sera utilisée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"3. If the shell is not in the allowed_shells list and not in <quote>/etc/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"shells</quote>, a nologin shell is used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"3. Si l'interpréteur de commandes n'est ni dans la liste « allowed_shells » "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ni dans <quote>/etc/shells</quote>, une connexion sans shell est utilisée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "An empty string for shell is passed as-is to libc."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Une chaîne vide pour l'interpréteur de commandes est passée telle quelle est "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The <quote>/etc/shells</quote> is only read on SSSD start up, which means "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"that a restart of the SSSD is required in case a new shell is installed."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le fichier <quote>/etc/shells</quote> n'est lu qu'au démarrage de SSSD. Un "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"redémarrage de SSSD est nécessaire si un nouvel interpréteur de commandes "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"est installé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: Not set. The user shell is automatically used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Par défaut : non défini. L'interpréteur de commandes de l'utilisateur est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"utilisé automatiquement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "vetoed_shells (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "vetoed_shells (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Replace any instance of these shells with the shell_fallback"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Remplace toutes les occurences de ces interpréteurs de commandes par "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'interpréteur de commandes par défaut"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "shell_fallback (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "shell_fallback (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The default shell to use if an allowed shell is not installed on the machine."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'interpréteur de commandes par défaut à utiliser si un interpréteur de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"commandes autorisé n'est pas installé sur la machine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: /bin/sh"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : /bin/sh"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "default_shell"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "default_shell"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The default shell to use if the provider does not return one during lookup. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"This option supersedes any other shell options if it takes effect and can be "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"set either in the [nss] section or per-domain."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"L'interpréteur de commande par défaut à utiliser si le fournisseur n'en "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"donne pas un lors de la recherche. Cette option prend le pas sur toutes les "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"autres options de shell si elle prend effet, et peut être positionnée soit "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"dans la section [nss], soit par domaine."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Default: not set (Return NULL if no shell is specified and rely on libc to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"substitute something sensible when necessary, usually /bin/sh)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Par défaut : non défini (retourne NULL si aucun shell n'est spécifié et "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"s'appuyer sur la libc pour remplacer par quelque chose de sensé lorsque "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"nécessaire, habituellement /bin/sh)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "get_domains_timeout (int)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "get_domains_timeout (int)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specifies time in seconds for which the list of subdomains will be "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"considered valid."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la durée en secondes pendant laquelle la liste de sous-domaines est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"jugée valide."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "memcache_timeout (int)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "memcache_timeout (int)"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Specifies time in seconds for which records in the in-memory cache will be "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la durée en secondes, pour laquelle les enregistrements du cache en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mémoire seront valides"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Default: 300"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgstr "Par défaut : 300"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "PAM configuration options"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Options de configuration de PAM"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"These options can be used to configure the Pluggable Authentication Module "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"(PAM) service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ces options permettent de configurer le service Pluggable Authentication "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Module (PAM)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "offline_credentials_expiration (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "offline_credentials_expiration (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If the authentication provider is offline, how long should we allow cached "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"logins (in days since the last successful online login)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si le fournisseur d'authentification est déconnecté, combien de temps "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"autoriser les connexions à partir du cache (en jours depuis la dernière "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"connexion réussie)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 0 (No limit)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 0 (pas de limite)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "offline_failed_login_attempts (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "offline_failed_login_attempts (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If the authentication provider is offline, how many failed login attempts "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Si le fournisseur d'authentification est déconnecté, combien de connexions "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"échouées sont autorisées."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "offline_failed_login_delay (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "offline_failed_login_delay (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The time in minutes which has to pass after offline_failed_login_attempts "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"has been reached before a new login attempt is possible."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le temps en minutes à attendre après avoir atteint "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"offline_failed_login_attempts avant qu'une nouvelle tentative de connexion "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"soit possible."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If set to 0 the user cannot authenticate offline if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"offline_failed_login_attempts has been reached. Only a successful online "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"authentication can enable offline authentication again."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si la valeur est à 0, l'utilisateur ne peut s'authentifier en mode "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"déconnecté si offline_failed_login_attempts est atteint. Seulement une "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"connexion réussie en ligne peut réactiver l'authentification."
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 5"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 5"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "pam_verbosity (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "pam_verbosity (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Controls what kind of messages are shown to the user during authentication. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The higher the number to more messages are displayed."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Contrôle le type de messages affichés à l'utilisateur pendant le processus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'authentification. Plus le nombre est grand, plus le nombre de messages "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"affichés sera important."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Currently sssd supports the following values:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Actuellement sssd supporte les valeurs suivantes :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>0</emphasis>: do not show any message"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<emphasis>0</emphasis> : ne pas afficher de message"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>1</emphasis>: show only important messages"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<emphasis>1</emphasis> : afficher seulement les messages importants"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>2</emphasis>: show informational messages"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<emphasis>2</emphasis> : afficher les messages d'information"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>3</emphasis>: show all messages and debug information"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>3</emphasis> : afficher tous les messages et informations de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 1"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 1"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "pam_id_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "pam_id_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For any PAM request while SSSD is online, the SSSD will attempt to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"immediately update the cached identity information for the user in order to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ensure that authentication takes place with the latest information."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de chaque requête PAM quand SSSD est en mode connecté, SSSD tentera de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mettre à jour immédiatement les informations d'identité mises en cache pour "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"l'utilisateur de manière à s'assurer que l'authentification se fasse avec "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"les dernières informations."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"A complete PAM conversation may perform multiple PAM requests, such as "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"account management and session opening. This option controls (on a per-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"client-application basis) how long (in seconds) we can cache the identity "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"information to avoid excessive round-trips to the identity provider."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Une conversation PAM complète peut effectuer plusieurs requêtes PAM, comme "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la gestion de compte et l'ouverture de session. Cette option contrôle (par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"client et par application) la durée (en secondes) de mise en cache des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"informations d'identité afin d'éviter de nombreux aller-retour avec le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur d'identité."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "pam_pwd_expiration_warning (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "pam_pwd_expiration_warning (entier)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Display a warning N days before the password expires."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Afficher une alerte N jours avant l'expiration du mot de passe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that the backend server has to provide information about the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"expiration time of the password. If this information is missing, sssd "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"cannot display a warning."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que le moteur du service doit fournir des informations à propos du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"délai d'expiration du mot de passe. Si cette information est manquante, sssd "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ne peut afficher de message d'alerte."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"If zero is set, then this filter is not applied, i.e. if the expiration "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"warning was received from backend server, it will automatically be displayed."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si la valeur est zéro, ce filtre n'est pas appliqué, c'est-à-dire que si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'avertissement d'expiration est reçu de la part du moteur du serveur, il "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sera automatiquement affiché."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"This setting can be overridden by setting <emphasis>pwd_expiration_warning</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"emphasis> for a particular domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ce paramètre peut être surchargé par le paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>pwd_expiration_warning</emphasis> pour un domaine particulier."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: 0"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgstr "Par défaut : 0"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "SUDO configuration options"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Options de configuration de SUDO"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "These options can be used to configure the sudo service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les options suivantes peuvent être utilisées pour configurer le service sudo."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "sudo_timed (bool)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sudo_timed (booléen)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Whether or not to evaluate the sudoNotBefore and sudoNotAfter attributes "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"that implement time-dependent sudoers entries."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Évaluation ou non des attributs sudoNotBefore et sudoNotAfter qui utilisent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les entrées sudoers sensibles au temps."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "AUTOFS configuration options"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Options de configuration AUTOFS"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "These options can be used to configure the autofs service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Ces options peuvent être utilisées pour configurer le service autofs."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "autofs_negative_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "autofs_negative_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Specifies for how many seconds should the autofs responder negative cache "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"hits (that is, queries for invalid map entries, like nonexistent ones) "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"before asking the back end again."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie le délai en secondes pendant lequel le répondeur autofs stocke les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"réponses négatives (autrement dit, les requêtes pour les entrées de mappage "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"non valide, comme celles qui n'existent pas) avant de demander à nouveau au "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "SSH configuration options"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Options de configuration SSH"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "These options can be used to configure the SSH service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les options suivantes peuvent être utilisées pour configurer le service SSH."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ssh_hash_known_hosts (bool)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ssh_hash_known_hosts (bool)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
45db68ae27147955a4be4c2c772041824c0dc00fStephen Gallagher"Whether or not to hash host names and addresses in the managed known_hosts "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Condenser ou non les noms de systèmes et adresses du fichier known_hosts"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "ssh_known_hosts_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ssh_known_hosts_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"How many seconds to keep a host in the managed known_hosts file after its "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"host keys were requested."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle conserver un système dans le fichier "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"known_hosts géré après que ses clés de système ont été demandés."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Default: 180"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : 180"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><title>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "PAC responder configuration options"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Options de configuration du répondeur PAC"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"The PAC responder works together with the authorization data plugin for MIT "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Kerberos sssd_pac_plugin.so and a sub-domain provider. The plugin sends the "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"PAC data during a GSSAPI authentication to the PAC responder. The sub-domain "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"provider collects domain SID and ID ranges of the domain the client is "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"joined to and of remote trusted domains from the local domain controller. "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"If the PAC is decoded and evaluated some of the following operations are "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le répondeur PAC fonctionne avec le greffon de données d'autorisation pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sssd_pac_plugin.so MIT Kerberos et un fournisseur de sous-domaine. Le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"greffon envoie les données PAC au cours d'une authentification GSSAPI au "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"répondeur PAC. Le fournisseur de sous-domaine recueille le SID du domaine et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les plages d'ID du domaine auquel le client est lié au et des domaines "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"approuvés distants du contrôleur de domaine local. Si les données PAC sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"décodées et évaluées, les opérations suivantes sont effectuées :"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"If the remote user does not exist in the cache, it is created. The uid is "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"determined with the help of the SID, trusted domains will have UPGs and the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"gid will have the same value as the uid. The home directory is set based on "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"the subdomain_homedir parameter. The shell will be empty by default, i.e. "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"the system defaults are used, but can be overwritten with the default_shell "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si l'utilisateur distant n'existe pas dans le cache, il est créé. L'uid est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"calculé en fonction du SID, les domaines de confiance auront des groupes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'utilisateurs privés, et le gid aura la même valeur que l'uid. Le "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"répertoire utilisateur est défini en fonction du paramètre "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"subdomain_homedir. Le shell sera vide par défaut, permettant l'utilisation "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"de la valeur par défaut du système, mais peut être remplacé par le paramètre "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"default_shell."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para><itemizedlist><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"If there are SIDs of groups from domains sssd knows about, the user will be "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"added to those groups."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"S'il y a des SID de groupes des domaines connus de sssd, l'utilisateur sera "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"ajouté à ces groupes."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "These options can be used to configure the PAC responder."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les options suivantes peuvent être utilisées pour configurer le répondeur "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "allowed_uids (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "allowed_uids (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Specifies the comma-separated list of UID values or user names that are "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"allowed to access the PAC responder. User names are resolved to UIDs at "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la liste séparée par des virgules des UID ou noms d'utilisateurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"qui sont autorisés à accéder au répondeur PAC. Les noms d'utilisateurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"seront résolus en UID au démarrage."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "Default: 0 (only the root user is allowed to access the PAC responder)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : 0 (seul l'utilisateur root est autorisé à accéder au répondeur "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Please note that although the UID 0 is used as the default it will be "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"overwritten with this option. If you still want to allow the root user to "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"access the PAC responder, which would be the typical case, you have to add 0 "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"to the list of allowed UIDs as well."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que bien que l'UID 0 est utilisé par défaut, il sera remplacé par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cette option. Si vous voulez continuer à permettre à l'utilisateur root à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"accéder au répondeur PAC, ce qui serait un cas habituel, vous devez ajouter "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"0 à la liste des UID d'utilisateurs autorisés."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "DOMAIN SECTIONS"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "SECTIONS DOMAINES"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "min_id,max_id (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "min_id,max_id (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"UID and GID limits for the domain. If a domain contains an entry that is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"outside these limits, it is ignored."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Limites UID et GID pour le domaine. Si un domaine contient une entrée en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dehors de ces limites, elle est ignorée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For users, this affects the primary GID limit. The user will not be returned "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to NSS if either the UID or the primary GID is outside the range. For non-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"primary group memberships, those that are in range will be reported as "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour les utilisateurs, cela affecte la limite des GID primaires. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'utilisateur ne sera pas renvoyé vers NSS si l'UID ou le GID primaire sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"en dehors de la plage. Pour l'appartenance à un groupe non primaire, ceux "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"qui sont dans la plage seront rapportés comme prévu."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"These ID limits affect even saving entries to cache, not only returning them "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"by name or ID."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Ces limites d'identifiants affecte aussi les mises en cache des entrées, et "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"pas seulement leur recherche par nom ou identifiant."
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 1 for min_id, 0 (no limit) for max_id"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Default: 1 for min_id, 0 (no limit) for max_id"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "enumerate (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "enumerate (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Determines if a domain can be enumerated. This parameter can have one of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"following values:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Détermine si un domaine peut être énuméré. Ce paramètre peut avoir une des "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"valeurs suivantes :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "TRUE = Users and groups are enumerated"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "TRUE = utilisateurs et groupes sont énumérés"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "FALSE = No enumerations for this domain"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "FALSE = aucune énumération pour ce domaine"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:940 sssd.conf.5.xml:1141 sssd.conf.5.xml:1250
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: FALSE"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : FALSE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Note: Enabling enumeration has a moderate performance impact on SSSD while "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"enumeration is running. It may take up to several minutes after SSSD startup "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to fully complete enumerations. During this time, individual requests for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"information will go directly to LDAP, though it may be slow, due to the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"heavy enumeration processing. Saving a large number of entries to cache "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"after the enumeration completes might also be CPU intensive as the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"memberships have to be recomputed."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Note : activer l'énumération a un impact modéré sur les performances de SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"lorsque l'énumération est en cours. Plusieurs minutes peuvent être "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"nécessaires après le démarrage de SSSD pour terminer l'énumération complète. "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Pendant ce temps, les requêtes individuelles pour des informations iront "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"directement vers LDAP, bien que plus lent et ce à cause de la charge "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"importante liée au processus d'énumération. Le fait de mettre un grand "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"nombre d'entrées en cache lorsque l'énumération est terminée peut être "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"également intensif pour le CPU, car les appartenances aux groupes doivent "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"être recalculées."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"While the first enumeration is running, requests for the complete user or "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"group lists may return no results until it completes."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsque la première énumération est en cours, les requêtes pour des listes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisateurs ou de groupes peuvent retourner des résultats vides avant que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'énumération ne se termine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Further, enabling enumeration may increase the time necessary to detect "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"network disconnection, as longer timeouts are required to ensure that "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"enumeration lookups are completed successfully. For more information, refer "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to the man pages for the specific id_provider in use."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"De plus, activer l'énumération peut augmenter le temps nécessaire pour "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"détecter la déconnexion d'un réseau, puisque des délais d'attente supérieurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sont nécessaires pour s'assurer que les requêtes d'énumération se terminent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"avec succès. Pour plus d'informations, se référer au manuel pour le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur d'identité spécifique utilisé."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"For the reasons cited above, enabling enumeration is not recommended, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"especially in large environments."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Pour les raisons citées plus haut, l'activation de l'énumération est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"déconseillée, surtout dans les environnements de grande taille."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| msgid "subdomain_homedir (string)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "subdomain_enumerate (string)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "subdomain_homedir (string)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "All discovered trusted domains will be enumerated"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "No discovered trusted domains will be enumerated"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Whether any of autodetected trusted domains should be enumerated. The "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"supported values are: <placeholder type=\"variablelist\" id=\"0\"/> "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Optionally, a list of one or more domain names can enable enumeration just "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"for these trusted domains."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "Default: none"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "Par défaut : aucun"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "entry_cache_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "entry_cache_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"How many seconds should nss_sss consider entries valid before asking the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit considérer les entrées "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"comme valides avant de les redemander au moteur"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 5400"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 5400"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "entry_cache_user_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_user_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"How many seconds should nss_sss consider user entries valid before asking "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"the backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit considérer les entrées "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'utilisateurs comme valides avant de les redemander au moteur."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1040 sssd.conf.5.xml:1053 sssd.conf.5.xml:1066
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1079 sssd.conf.5.xml:1092 sssd.conf.5.xml:1106
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: entry_cache_timeout"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : entry_cache_timeout"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "entry_cache_group_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_group_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"How many seconds should nss_sss consider group entries valid before asking "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"the backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit considérer les entrées de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"groupes comme valides avant de les redemander au moteur."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "entry_cache_netgroup_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_netgroup_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"How many seconds should nss_sss consider netgroup entries valid before "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"asking the backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit considérer les entrées de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"netgroup comme valides avant de les redemander au moteur."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "entry_cache_service_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_service_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"How many seconds should nss_sss consider service entries valid before asking "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"the backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle nss_sss doit considérer les entrées de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"service valides avant de les redemander au moteur"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "entry_cache_sudo_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_sudo_timeout (integer)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"How many seconds should sudo consider rules valid before asking the backend "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle sudo doit considérer les règles comme "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"valides avant de les redemander au moteur"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "entry_cache_autofs_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "entry_cache_autofs_timeout (integer)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"How many seconds should the autofs service consider automounter maps valid "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"before asking the backend again"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle le service autofs doit considérer les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cartes d'automontage comme valides avant de les redemander au moteur"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "refresh_expired_interval (integer)"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "refresh_expired_interval (entier)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Specifies how many seconds SSSD has to wait before refreshing expired "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"records. Currently only refreshing expired netgroups is supported."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Spécifie la durée en secondes pendant laquelle SSSD doit attendre avant "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"d'actualiser les enregistrements expirés. Seuls les netgroup expirés sont "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"actuellement pris en charge."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "You can consider setting this value to 3/4 * entry_cache_timeout."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Il est envisageable de configurer cette valeur à 3/4 * entry_cache_timeout."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "Default: 0 (disabled)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Par défaut : 0 (désactivé)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "cache_credentials (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "cache_credentials (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Determines if user credentials are also cached in the local LDB cache"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Détermine si les données d'identification de l'utilisateur sont aussi mis en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cache dans le cache LDB local"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "User credentials are stored in a SHA512 hash, not in plaintext"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les informations d'identification utilisateur sont stockées dans une table "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de hachage SHA512, et non en texte brut"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "account_cache_expiration (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "account_cache_expiration (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Number of days entries are left in cache after last successful login before "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"being removed during a cleanup of the cache. 0 means keep forever. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"value of this parameter must be greater than or equal to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"offline_credentials_expiration."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Durée en jours pendant laquelle les entrées sont stockées dans le cache "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"après la dernière connexion réussie, avant d'être enlevées lors du nettoyage "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"du cache. 0 signifie qu'elles sont conservées indéfiniment. La valeur de ce "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"paramètre doit être supérieur ou égal à offline_credentials_expiration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 0 (unlimited)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : 0 (illimité)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "pwd_expiration_warning (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "pwd_expiration_warning (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Please note that the backend server has to provide information about the "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"expiration time of the password. If this information is missing, sssd "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"cannot display a warning. Also an auth provider has to be configured for the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Veuillez noter que le moteur du service doit fournir des informations à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"propos du délai d'expiration du mot de passe. Si cette information est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manquante, sssd ne peut afficher de message d'alerte. De plus, un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur oauth doit être configuré pour le moteur."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: 7 (Kerberos), 0 (LDAP)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : 7 (Kerberos), 0 (LDAP)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "id_provider (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "id_provider (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The identification provider used for the domain. Supported ID providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur d'identification utilisé pour le domaine. Les fournisseurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identification pris en charge sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "<quote>proxy</quote>: Support a legacy NSS provider"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "<quote>proxy</quote> : prise en charge de l'ancien fournisseur NSS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "<quote>local</quote>: SSSD internal provider for local users"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>local</quote> : Fournisseur interne SSSD pour les utilisateurs locaux"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<quote>ldap</quote>: LDAP provider. See <citerefentry> <refentrytitle>sssd-"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> for more "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"information on configuring LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap</quote> : fournisseur LDAP. Cf. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour plus d'informations sur la configuration de "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1207 sssd.conf.5.xml:1293 sssd.conf.5.xml:1344
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<quote>ipa</quote>: FreeIPA and Red Hat Enterprise Identity Management "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"provider. See <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<manvolnum>5</manvolnum> </citerefentry> for more information on configuring "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ipa</quote> : fournisseur FreeIPA et Red Hat Enterprise Identity "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Management. Cf. <citerefentry><refentrytitle>sssd-ipa</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> pour plus d'informations sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configuration de FreeIPA."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1216 sssd.conf.5.xml:1302 sssd.conf.5.xml:1353
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<quote>ad</quote>: Active Directory provider. See <citerefentry> "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry> for more information on configuring Active Directory."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ad</quote> : fournisseur Active Directory. Cf. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-ad</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour plus d'informations sur la configuration "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'Active Directory."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "use_fully_qualified_names (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "use_fully_qualified_names (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Use the full name and domain (as formatted by the domain's full_name_format) "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"as the user's login name reported to NSS."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Utiliser le nom complet et le domaine (comme formaté par le paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"full_name_format du domaine) comme nom de connexion de l'utilisateur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"communiqué à NSS."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If set to TRUE, all requests to this domain must use fully qualified names. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For example, if used in LOCAL domain that contains a \"test\" user, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>getent passwd test</command> wouldn't find the user while "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>getent passwd test@LOCAL</command> would."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si défini à TRUE, toutes les requêtes pour ce domaine doivent utiliser des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"noms pleinement qualifiés. Par exemple, pour un utilisateur « test » dans un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine LOCAL, <command>getent passwd test</command> ne trouvera pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur avant que <command>getent passwd test@LOCAL</command> ne le "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"NOTE: This option has no effect on netgroup lookups due to their tendency to "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"include nested netgroups without qualified names. For netgroups, all domains "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"will be searched when an unqualified name is requested."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "ignore_group_members (bool)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ignore_group_members (booléen)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Do not return group members for group lookups."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Ne pas envoyer les membres des groupes sur les recherches de groupes."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"If set to TRUE, the group membership attribute is not requested from the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap server, and group members are not returned when processing group lookup "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si positionné à TRUE, l'attribut de membre de groupe n'est pas demandé au "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"serveur ldap, et les membres du groupe ne sont pas renvoyés lors du "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"traitement des appels de recherche de groupes."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "auth_provider (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "auth_provider (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The authentication provider used for the domain. Supported auth providers "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le fournisseur d'authentification utilisé pour le domaine. Les fournisseurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pris en charge sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap</quote> for native LDAP authentication. See <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> for more information on configuring LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap</quote> pour une authentification LDAP native. Cf. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> pour plus d'informations sur la configuration de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>krb5</quote> for Kerberos authentication. See <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> for more information on configuring Kerberos."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>krb5</quote> pour une authentification Kerberos. Cf. <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> pour plus d'informations sur la configuration de Kerberos."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>proxy</quote> for relaying authentication to some other PAM target."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>proxy</quote> pour relayer l'authentification vers d'autres cibles "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<quote>none</quote> disables authentication explicitly."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<quote>none</quote> désactive l'authentification explicitement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: <quote>id_provider</quote> is used if it is set and can handle "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication requests."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : <quote>id_provider</quote> est utilisé s'il est défini et peut "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"gérer les requêtes d'authentification."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "access_provider (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "access_provider (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The access control provider used for the domain. There are two built-in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access providers (in addition to any included in installed backends) "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Internal special providers are:"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le fournisseur de contrôle d'accès utilisé pour le domaine. Il y a deux "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseurs d'accès natifs (en plus de ceux disponibles dans les moteurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"installés). Les fournisseurs internes spécifiques sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>permit</quote> always allow access. It's the only permitted access "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"provider for a local domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>permit</quote> toujours autoriser l'accès. C'est le seul fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'accès autorisé pour un domaine local."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<quote>deny</quote> always deny access."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<quote>deny</quote> toujours refuser les accès."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>simple</quote> access control based on access or deny lists. See "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd-simple</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum></citerefentry> for more information on configuring the simple "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access module."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Contrôle d'accès <quote>simple</quote> basé sur des listes d'autorisations "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ou de refus d'accès. Cf. <citerefentry> <refentrytitle>sssd-simple</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle> <manvolnum>5</manvolnum></citerefentry> pour plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'informations sur la configuration du module d'accès simple."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <quote>permit</quote>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : <quote>permit</quote>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "chpass_provider (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "chpass_provider (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The provider which should handle change password operations for the domain. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Supported change password providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur qui doit gérer le changement des mots de passe pour le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine. Les fournisseurs pris en charge sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap</quote> to change a password stored in a LDAP server. See "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> for more information on configuring LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap</quote> pour modifier un mot de passe stocké sur un serveur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"LDAP. Cf. <citerefentry> <refentrytitle>sssd-ldap</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum> </citerefentry> pour plus d'informations sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configuration LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>krb5</quote> to change the Kerberos password. See <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> for more information on configuring Kerberos."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>krb5</quote> pour changer le mot de passe Kerberos. Cf. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> pour plus d'informations sur la configuration de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>proxy</quote> for relaying password changes to some other PAM target."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>proxy</quote> pour relayer le changement de mot de passe vers une "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"autre cible PAM."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<quote>none</quote> disallows password changes explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>none</quote> pour désactiver explicitement le changement de mot de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: <quote>auth_provider</quote> is used if it is set and can handle "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"change password requests."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : <quote>auth_provider</quote> est utilisé si il est défini et "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"peut gérer les changements de mot de passe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "sudo_provider (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sudo_provider (chaîne)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The SUDO provider used for the domain. Supported SUDO providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur SUDO, utilisé pour le domaine. Les fournisseurs SUDO pris en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"charge sont :"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<quote>ldap</quote> for rules stored in LDAP. See <citerefentry> "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"citerefentry> for more information on configuring LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap</quote> pour les règles stockés dans LDAP. Voir "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour plus d'informations sur la configuration de "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "<quote>none</quote> disables SUDO explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<quote>none</quote> désactive explicitement SUDO."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1445 sssd.conf.5.xml:1499 sssd.conf.5.xml:1531
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: The value of <quote>id_provider</quote> is used if it is set."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Par défaut : La valeur de <quote>id_provider</quote> est utilisée si elle "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"est définie."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "selinux_provider (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "selinux_provider (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The provider which should handle loading of selinux settings. Note that this "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"provider will be called right after access provider ends. Supported selinux "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur qui doit gérer le chargement des paramètres de selinux. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : ce fournisseur sera appelé juste après la fin de l'appel au "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur d'accès. Les fournisseurs selinux pris en charge sont :"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<quote>ipa</quote> to load selinux settings from an IPA server. See "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"manvolnum> </citerefentry> for more information on configuring IPA."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ipa</quote> pour charger les paramètres selinux depuis un serveur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"IPA. Cf. <citerefentry><refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour plus d'informations sur la configuration de "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "<quote>none</quote> disallows fetching selinux settings explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>none</quote> n'autorise pas la récupération explicite des paramètres "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Default: <quote>id_provider</quote> is used if it is set and can handle "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"selinux loading requests."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : <quote>id_provider</quote> est utilisé s'il est défini et peut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"gérer le chargement selinux"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "subdomains_provider (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "subdomains_provider (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The provider which should handle fetching of subdomains. This value should "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"be always the same as id_provider. Supported subdomain providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur doit être capable de gérer la récupération des sous-"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaines. Cette valeur doit être toujours identique à id_provider. Les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseurs de sous-domaine pris en charge sont :"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>ipa</quote> to load a list of subdomains from an IPA server. See "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"manvolnum> </citerefentry> for more information on configuring IPA."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ipa</quote> pour charger une liste de sous-domaines depuis un serveur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"IPA. Cf. <citerefentry><refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour plus d'informations sur la configuration de "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "<quote>none</quote> disallows fetching subdomains explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>none</quote> désactive la récupération explicite des sous-domaines."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "autofs_provider (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "autofs_provider (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The autofs provider used for the domain. Supported autofs providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur autofs utilisé pour le domaine. Les fournisseurs autofs pris "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"en charge sont :"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>ldap</quote> to load maps stored in LDAP. See <citerefentry> "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"citerefentry> for more information on configuring LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap</quote> pour charger les cartes stockées dans LDAP. Cf. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry> pour plus d'informations sur la configuration de "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>ipa</quote> to load maps stored in an IPA server. See <citerefentry> "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</manvolnum> </"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"citerefentry> for more information on configuring IPA."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ipa</quote> pour charger les cartes stockées sur un serveur IPA. Cf. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry> pour plus d'information sur la configuration de "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "<quote>none</quote> disables autofs explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<quote>none</quote> désactive explicitement autofs."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "hostid_provider (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "hostid_provider (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The provider used for retrieving host identity information. Supported "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"hostid providers are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur utilisé pour récupérer les informations d'identité des "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"systèmes. Les fournisseurs de hostid pris en charge sont :"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>ipa</quote> to load host identity stored in an IPA server. See "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<citerefentry> <refentrytitle>sssd-ipa</refentrytitle> <manvolnum>5</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"manvolnum> </citerefentry> for more information on configuring IPA."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ipa</quote> pour charge l'identité du système stockée sur un serveur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"IPA. Cf. <citerefentry> <refentrytitle>sssd-ipa</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum> </citerefentry> pour plus d'informations sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configuration de IPA."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "<quote>none</quote> disables hostid explicitly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<quote>none</quote> désactive explicitement hostid."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Regular expression for this domain that describes how to parse the string "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"containing user name and domain into these components. The \"domain\" can "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"match either the SSSD configuration domain name, or, in the case of IPA "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"trust subdomains and Active Directory domains, the flat (NetBIOS) name of "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"the domain."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"L'expression rationnelle pour ce domaine qui décrit comment analyser la "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"chaîne contenant le nom d'utilisateur et domaine et en extraire ces "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"composants. Le « domaine » peut correspondre à soit au nom de domaine de la "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"configuration SSSD, ou, dans le cas de relations d'approbations avec des "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"sous-domaines IPA ou des domaines Active Directory, le nom plat (NetBIOS) du "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"Default for the AD and IPA provider: <quote>(((?P<domain>[^\\\\]+)\\"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<domain>.+$))|(^(?"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"P<name>[^@\\\\]+)$))</quote> which allows three different styles for "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"user names:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Valeur par défaut pour les fournisseurs AD et IPA : <quote>(((?P<"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domain>[^\\\\]+)\\\\(?P<name>.+$))|((?P<name>[^@]+)@(?P<"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domain>.+$))|(^(?P<name>[^@\\\\]+)$))</quote> qui utilisent trois "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"styles différents pour les noms d'utilisateurs :"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "username"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "username"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "username@domain.name"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "username@domain.name"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "domain\\username"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "domain\\username"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"While the first two correspond to the general default the third one is "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"introduced to allow easy integration of users from Windows domains."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Bien que les deux premiers correspondent à la valeur par défaut en général "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le troisième est introduit pour permettre une intégration facile des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisateurs de domaines Windows."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Default: <quote>(?P<name>[^@]+)@?(?P<domain>[^@]*$)</quote> "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"which translates to \"the name is everything up to the <quote>@</quote> "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"sign, the domain everything after that\""
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Par défaut : <quote>(?P<name>[^@]+)@?(?P<domain>[^@]*$)</quote> "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"qui se traduit par « peu importe le nom jusqu'au <quote>@</quote>, peu "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"importe le domaine après »"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"PLEASE NOTE: the support for non-unique named subpatterns is not available "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"on all platforms (e.g. RHEL5 and SLES10). Only platforms with libpcre "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"version 7 or higher can support non-unique named subpatterns."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"REMARQUE : la prise en charge de sous-motifs nommés multiples n'est pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"disponible sur certaines plates-formes (par exemple, RHEL5 et SLES10). "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Seules les plates-formes avec libpcre version 7 ou supérieure peuvent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"prendre en charge les sous-motifs nommés multiples."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"PLEASE NOTE ALSO: older version of libpcre only support the Python syntax (?"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"P<name>) to label subpatterns."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"REMARQUE ADDITIONNELLE : les anciennes versions de libpcre ne supportent que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la syntaxe Python (?P<name>) pour nommer les sous-motifs."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Default: <quote>%1$s@%2$s</quote>."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgstr "Par défaut : <quote>%1$s@%2$s</quote>."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "lookup_family_order (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "lookup_family_order (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Provides the ability to select preferred address family to use when "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"performing DNS lookups."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Fournit la possibilité de sélectionner la famille d'adresse préférée à "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"utiliser pour effectuer les requêtes DNS."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Supported values:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Valeurs prises en charge :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipv4_first: Try looking up IPv4 address, if that fails, try IPv6"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ipv4_first : essayer de chercher une adresse IPv4, et en cas d'échec, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"essayer IPv6."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipv4_only: Only attempt to resolve hostnames to IPv4 addresses."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ipv4_only : ne tenter de résoudre les noms de systèmes qu'en adresses IPv4."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipv6_first: Try looking up IPv6 address, if that fails, try IPv4"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ipv6_first : essayer de chercher une adresse IPv6, et en cas d'échec, tenter "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipv6_only: Only attempt to resolve hostnames to IPv6 addresses."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ipv6_only : ne tenter de résoudre les noms de systèmes qu'en adresses IPv6."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: ipv4_first"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : ipv4_first"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "dns_resolver_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "dns_resolver_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Defines the amount of time (in seconds) to wait for a reply from the DNS "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"resolver before assuming that it is unreachable. If this timeout is reached, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the domain will continue to operate in offline mode."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Délai (en secondes) d'attente de la réponse du résolveur DNS avant de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"considérer qu'il est injoignable. Si ce délai maximum est atteint, le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine continuera à opérer en mode déconnecté."
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1697 sssd-ldap.5.xml:1097 sssd-ldap.5.xml:1139
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozekmsgid "Default: 6"
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozekmsgstr "Par défaut : 6"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "dns_discovery_domain (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "dns_discovery_domain (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If service discovery is used in the back end, specifies the domain part of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the service discovery DNS query."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si la découverte de services est utilisé par le moteur, spécifie la partie "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"du domaine faisant partie de la requête DNS de découverte de services."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: Use the domain part of machine's hostname"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : utiliser la partie du domaine qui est dans le nom de système de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la machine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "override_gid (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "override_gid (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Override the primary GID value with the one specified."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Redéfinit le GID primaire avec la valeur spécifiée."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "case_sensitive (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "case_sensitive (booléen)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"Treat user and group names as case sensitive. At the moment, this option is "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"not supported in the local provider."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Traiter les utilisateur et les noms de groupes comme sensible à la casse. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Actuellement, cette option n'est pas supportée dans le fournisseur local."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: True"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : True"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "proxy_fast_alias (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "proxy_fast_alias (boolean)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"When a user or group is looked up by name in the proxy provider, a second "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"lookup by ID is performed to \"canonicalize\" the name in case the requested "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"name was an alias. Setting this option to true would cause the SSSD to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"perform the ID lookup from cache for performance reasons."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Quand un utilisateur ou un groupe est recherché par son nom dans le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur proxy, une deuxième recherche par ID est effectuée pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"récupérer le nom canonique, dans le cas où le nom demandé serait un alias. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option positionnée à true active la recherche par l'ID dans le cache "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"afin d'améliorer les performances."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "subdomain_homedir (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "subdomain_homedir (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "flat (NetBIOS) name of a subdomain."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "nom plat (NetBIOS) d'un sous-domaine."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Use this homedir as default value for all subdomains within this domain. See "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>override_homedir</emphasis> for info about possible values. In "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"addition to those, the expansion below can only be used with "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>subdomain_homedir</emphasis>. <placeholder type=\"variablelist\" "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Utiliser ce répertoire utilisateur comme valeur par défaut pour tous les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sous-domaines dans ce domaine. Voir <emphasis>override_homedir</emphasis> "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"pour des informations sur les valeurs possibles. En plus de celles-ci, le "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"remplacement ci-dessous ne peut être utilisé qu'avec "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>subdomain_homedir</emphasis>. <placeholder type=\"variablelist\" "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The value can be overridden by <emphasis>override_homedir</emphasis> option."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La valeur peut être surchargée par l'option <emphasis>override_homedir</"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Default: <filename>/home/%d/%u</filename>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : <filename>/home/%d/%u</filename>"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "realmd_tags (string)"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "realmd_tags (chaîne)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Various tags stored by the realmd configuration service for this domain."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Étiquettes diverses stockées par le service de configuration de realmd pour "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"ce domaine."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"These configuration options can be present in a domain configuration "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"section, that is, in a section called <quote>[domain/<replaceable>NAME</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable>]</quote> <placeholder type=\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Ces options de configuration peuvent être présentes dans la section de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuration du domaine, c'est-à-dire dans la section nommée <quote>[domain/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>NAME</replaceable>]</quote> <placeholder type=\"variablelist\" "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "proxy_pam_target (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "proxy_pam_target (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The proxy target PAM proxies to."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Le proxy cible duquel PAM devient mandataire."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: not set by default, you have to take an existing pam configuration "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"or create a new one and add the service name here."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : non défini, il faut utiliser une configuration de pam existante "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ou en créer une nouvelle et ajouter le nom de service ici."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "proxy_lib_name (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "proxy_lib_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The name of the NSS library to use in proxy domains. The NSS functions "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"searched for in the library are in the form of _nss_$(libName)_$(function), "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"for example _nss_files_getpwent."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le nom de la bibliothèque NSS à utiliser dans les domaines proxy. Les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"recherches de fonctions NSS dans la bibliothèque sont sous la forme _nss_"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"$(libName)_$(function), par exemple _nss_files_getpwent."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Options valid for proxy domains. <placeholder type=\"variablelist\" id="
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Options valides pour les domaines proxy. <placeholder type=\"variablelist\" "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The local domain section"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "La section du domaine local"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This section contains settings for domain that stores users and groups in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"SSSD native database, that is, a domain that uses "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>id_provider=local</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Cette section contient les paramètres pour le domaine qui stocke les "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"utilisateurs et les groupes dans la base de données native SSSD, c'est-à-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"dire un domaine qui utilise <replaceable>id_provider=local</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "default_shell (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "default_shell (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The default shell for users created with SSSD userspace tools."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'interpréteur de commandes par défaut pour les utilisateurs créés avec les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"outils en espace utilisateur SSSD."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <filename>/bin/bash</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : <filename>/bin/bash</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "base_directory (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "base_directory (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The tools append the login name to <replaceable>base_directory</replaceable> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"and use that as the home directory."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Les outils ajoutent le nom d'utilisateur à <replaceable>base_directory</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> et l'utilisent comme dossier personnel."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <filename>/home</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : <filename>/home</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "create_homedir (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "create_homedir (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Indicate if a home directory should be created by default for new users. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Can be overridden on command line."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Indique si un dossier personnel doit être créé par défaut pour les nouveaux "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"utilisateurs. Peut être outrepassé par la ligne de commande."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: TRUE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : TRUE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "remove_homedir (bool)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "remove_homedir (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Indicate if a home directory should be removed by default for deleted "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"users. Can be overridden on command line."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Indiquer si un dossier personnel doit par défaut être supprimé à la "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"suppression des utilisateurs. Peut être outrepassé par la ligne de commande."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "homedir_umask (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "homedir_umask (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Used by <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>8</manvolnum> </citerefentry> to specify the default permissions "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"on a newly created home directory."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Utilisé par <citerefentry> <refentrytitle>sss_useradd</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>8</manvolnum> </citerefentry> pour spécifier les permissions par "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"défaut sur un répertoire personnel nouvellement créé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 077"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : 077"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "skel_dir (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "skel_dir (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The skeleton directory, which contains files and directories to be copied in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the user's home directory, when the home directory is created by "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le répertoire squelette contenant les fichiers et répertoires à copier dans "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"le répertoire personnel de l'utilisateur une fois ce répertoire créé par "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sss_useradd</refentrytitle> <manvolnum>8</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <filename>/etc/skel</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : <filename>/etc/skel</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "mail_dir (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "mail_dir (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The mail spool directory. This is needed to manipulate the mailbox when its "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"corresponding user account is modified or deleted. If not specified, a "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"default value is used."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le répertoire de gestion des e-mails. Nécessaire pour manipuler les boîtes e-"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mail quand les comptes utilisateurs sont modifiés ou supprimés. Si non "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"précisé, la valeur par défaut est utilisée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <filename>/var/mail</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : <filename>/var/mail</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "userdel_cmd (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "userdel_cmd (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The command that is run after a user is removed. The command us passed the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"username of the user being removed as the first and only parameter. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"return code of the command is not taken into account."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La commande qui est exécutée quand un utilisateur est supprimé. La commande "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"a comme seul argument le nom de l'utilisateur qui doit être supprimé. Le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"code en retour de la commande n'est pas pris en compte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><refsect2><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: None, no command is run"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : None, aucune commande lancée"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd.conf.5.xml:1952 sssd-ldap.5.xml:2399 sssd-simple.5.xml:131
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ipa.5.xml:759 sssd-ad.5.xml:293 sssd-krb5.5.xml:526
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "EXAMPLE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "EXEMPLE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"domains = LDAP\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"services = nss, pam\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"config_file_version = 2\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filter_groups = root\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filter_users = root\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"id_provider = ldap\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_uri = ldap://ldap.example.com\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_search_base = dc=example,dc=com\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"auth_provider = krb5\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"krb5_realm = EXAMPLE.COM\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"cache_credentials = true\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"min_id = 10000\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"max_id = 20000\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"enumerate = False\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"domains = LDAP\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"services = nss, pam\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"config_file_version = 2\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filter_groups = root\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filter_users = root\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"id_provider = ldap\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_uri = ldap://ldap.example.com\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_search_base = dc=example,dc=com\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"auth_provider = krb5\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"krb5_realm = EXAMPLE.COM\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"cache_credentials = true\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"min_id = 10000\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"max_id = 20000\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"enumerate = False\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following example shows a typical SSSD config. It does not describe "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuration of the domains themselves - refer to documentation on "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuring domains for more details. <placeholder type=\"programlisting\" "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"L'exemple suivant montre une configuration SSSD classique. Il ne décrit pas "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"la configuration des domaines. Se référer à la documentation sur la "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuration des domaines pour plus de détails. <placeholder type="
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"\"programlisting\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sssd-ldap"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sssd-ldap"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This manual page describes the configuration of LDAP domains for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"</citerefentry>. Refer to the <quote>FILE FORMAT</quote> section of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> manual page for detailed syntax information."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Ce manuel décrit la configuration des domaines LDAP pour <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry>. Se référer à la section <quote>FILE FORMAT</quote> du manuel "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> pour des informations sur la syntaxe détaillée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "You can configure SSSD to use more than one LDAP domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Il est possible de configurer SSSD pour utiliser plus d'un domaine LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP back end supports id, auth, access and chpass providers. If you want to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authenticate against an LDAP server either TLS/SSL or LDAPS is required. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sssd</command> <emphasis>does not</emphasis> support authentication "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"over an unencrypted channel. If the LDAP server is used only as an identity "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"provider, an encrypted channel is not needed. Please refer to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap_access_filter</quote> config option for more information about "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"using LDAP as an access provider."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Le moteur de traitement LDAP prend en charge les fournisseurs id, auth, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access et chpass. Si vous voulez vous authentifier sur un serveur LDAP, il "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"vous faut utiliser TLS/SSL ou LDAPS. <command>sssd</command> <emphasis>ne "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"prend pas en charge</emphasis> l'authentification sur un canal non chiffré. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si le serveur LDAP est utilisé seulement comme fournisseur d'identité, un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"canal crypté n'est pas nécessaire. Se référer aux options de configurations "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap_access_filter</quote> pour plus d'information sur l'utilisation "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"en tant que fournisseur d'accès."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ldap.5.xml:49 sssd-simple.5.xml:69 sssd-ipa.5.xml:70 sssd-ad.5.xml:83
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "CONFIGURATION OPTIONS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "OPTIONS DE CONFIGURATION"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "ldap_uri, ldap_backup_uri (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_uri, ldap_backup_uri (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"should connect in the order of preference. Refer to the <quote>FAILOVER</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"quote> section for more information on failover and server redundancy. If "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"neither option is specified, service discovery is enabled. For more "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"information, refer to the <quote>SERVICE DISCOVERY</quote> section."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie par ordre de préférence la liste séparée par des virgules d'URI des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"serveurs LDAP auquel doit se connecter SSSD. Se reporter à la section de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>BASCULEMENT</quote> pour plus d'informations sur le basculement et la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"redondance de serveurs. Si aucune de ces options n'est spécifiée, la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"découverte d'un service est activé. Pour plus d'informations, se reporter à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la section de <quote>DÉCOUVERTE DE SERVICE</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The format of the URI must match the format defined in RFC 2732:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le format de l'URI doit correspondre au format définit dans la RFC 2732 :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap[s]://<host>[:port]"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap[s]://<host>[:port]"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For explicit IPv6 addresses, <host> must be enclosed in brackets []"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Pour les adresses explicitement en IPv6, le composant <host> doit être "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"entre crochets []"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "example: ldap://[fc00::126:25]:389"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "exemple : ldap://[fc00::126:25]:389"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_chpass_uri, ldap_chpass_backup_uri (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the comma-separated list of URIs of the LDAP servers to which SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"should connect in the order of preference to change the password of a user. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Refer to the <quote>FAILOVER</quote> section for more information on "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"failover and server redundancy."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la liste d'URI séparée par des virgules des serveurs LDAP auquel "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"doit se connecter DSSD par ordre de préférence pour changer le mot de passe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'un utilisateur. Reportez-vous à la section de <quote>basculement</quote> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour plus d'informations sur le repli et la redondance de serveurs."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "To enable service discovery ldap_chpass_dns_service_name must be set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour activer la découverte de services, ldap_chpass_dns_service_name doit "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"être défini."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: empty, i.e. ldap_uri is used."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : vide, ldap_uri est donc utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_search_base (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_search_base (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The default base DN to use for performing LDAP user operations."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le DN de base par défaut à utiliser pour effectuer les opérations LDAP sur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les utilisateurs."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"Starting with SSSD 1.7.0, SSSD supports multiple search bases using the "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"À partir de SSSD 1.7.0, SSSD prend en charge plusieurs bases de recherche à "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"l'aide de la syntaxe :"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallaghermsgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "search_base[?scope?[filter][?search_base?scope?[filter]]*]"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallaghermsgid "The scope can be one of \"base\", \"onelevel\" or \"subtree\"."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La portée peut être l'une des « base », « onelevel » ou « subtree »."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"The filter must be a valid LDAP search filter as specified by http://www."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le filtre doit être un filtre de recherche LDAP valide tel que spécifié par "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallaghermsgid "Examples:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Exemples :"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"ldap_search_base = dc=example,dc=com (which is equivalent to) "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"ldap_search_base = dc=example,dc=com?subtree?"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_search_base = dc=example,dc=com (ce qui équivaut à) ldap_search_base = "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dc=example,dc=com?subtree?"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"(host=thishost)?dc=example.com?subtree?"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_search_base = cn=host_specific,dc=example,dc=com?subtree?"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"(host=thishost)?dc=example.com?subtree?"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"Note: It is unsupported to have multiple search bases which reference "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"identically-named objects (for example, groups with the same name in two "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"different search bases). This will lead to unpredictable behavior on client "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : Il est n'est pas possible d'avoir plusieurs bases de recherche "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"qui référencent des objets portant le même nom (par exemple, les groupes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"portant le même nom dans deux bases de recherche différents). Cela conduira "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"à un comportement imprévisible sur les ordinateurs clients."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"Default: If not set, the value of the defaultNamingContext or namingContexts "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"attribute from the RootDSE of the LDAP server is used. If "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"defaultNamingContext does not exist or has an empty value namingContexts is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"used. The namingContexts attribute must have a single value with the DN of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the search base of the LDAP server to make this work. Multiple values are "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"are not supported."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : si non définie, les valeurs des attributs defaultNamingContext "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ou namingContexts du RootDSE du serveur LDAP sont utilisées. Si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"defaultNamingContext n'existe pas ou a une valeur vide, namingContexts est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisé. Les attributs namingContexts doivent avoir une seule valeur avec un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"DN de base de recherche pour le serveur LDAP pour que cela fonctionne. Des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"valeurs multiples ne sont pas permises."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_schema (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_schema (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the Schema Type in use on the target LDAP server. Depending on "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the selected schema, the default attribute names retrieved from the servers "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"may vary. The way that some attributes are handled may also differ."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie le type de schéma utilisé sur le serveur LDAP cible. Selon le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"schéma sélectionné, les noms d'attributs par défaut provenant des serveurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"peuvent varier. La manière dont certains attributs sont traités peut-être "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"également différer."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "Four schema types are currently supported:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Quatre types de schéma sont actuellement pris en charge :"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "rfc2307"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "rfc2307"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "rfc2307bis"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "rfc2307bis"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><itemizedlist><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"The main difference between these schema types is how group memberships are "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"recorded in the server. With rfc2307, group members are listed by name in "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"the <emphasis>memberUid</emphasis> attribute. With rfc2307bis and IPA, "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"group members are listed by DN and stored in the <emphasis>member</emphasis> "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"attribute. The AD schema type sets the attributes to correspond with Active "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Directory 2008r2 values."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La principale différence entre ces types de schéma est la façon dont les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"appartenances aux groupes sont enregistrés dans le serveur. Avec rfc2307, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les membres du groupe sont répertoriées par nom dans l'attribut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>memberUid</emphasis>. Avec rfc2307bis et IPA, les membres du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"groupe sont répertoriés par DN et stockées dans l'attribut de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>member</emphasis>. Le type de schéma AD définit les attributs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"correspondant aux valeurs d'Active Directory 2008r2."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: rfc2307"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : rfc2307"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_default_bind_dn (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_default_bind_dn (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The default bind DN to use for performing LDAP operations."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le DN de connexion par défaut à utiliser pour effectuer les opérations LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_default_authtok_type (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_default_authtok_type (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The type of the authentication token of the default bind DN."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le type de jeton d'authentification pour le DN de connexion par défaut."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The two mechanisms currently supported are:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Les deux mécanismes actuellement pris en charge sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "obfuscated_password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "obfuscated_password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : password"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_default_authtok (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_default_authtok (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The authentication token of the default bind DN. Only clear text passwords "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"are currently supported."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le jeton d'authentification pour le DN de connexion par défaut. Seuls les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mots de passe en clair sont actuellement pris en charge."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_object_class (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_object_class (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The object class of a user entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe d'objet d'une entrée utilisateur dans LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: posixAccount"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : posixAccount"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_name (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the user's login name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP correspondant à l'identifiant de connexion de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: uid"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : uid"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_uid_number (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_uid_number (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the user's id."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP correspondant à l'id de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: uidNumber"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "par défaut : uidNumber"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_gid_number (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_gid_number (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the user's primary group id."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP correspondant à l'id du groupe primaire de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: gidNumber"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : gidNumber"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_gecos (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_gecos (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the user's gecos field."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "L'attribut LDAP correspondant au champ gecos de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: gecos"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Par défaut : gecos"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_home_directory (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_home_directory (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the name of the user's home directory."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'attribut LDAP qui contient le nom du répertoire personnel de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: homeDirectory"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : homeDirectory"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shell (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shell (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the path to the user's default shell."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'attribut LDAP qui contient le chemin vers l'interpréteur de commandes de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: loginShell"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : loginShell"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_uuid (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_uuid (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the UUID/GUID of an LDAP user object."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient les UUID/GUID d'un objet LDAP utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:348 sssd-ldap.5.xml:818 sssd-ldap.5.xml:1004
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: nsUniqueId"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : nsUniqueId"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_user_objectsid (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_user_objectsid (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The LDAP attribute that contains the objectSID of an LDAP user object. This "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"is usually only necessary for ActiveDirectory servers."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient l'objectSID d'un objet d'utilisateur LDAP. Ceci "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"n'est habituellement nécessaire que pour les serveurs Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: objectSid for ActiveDirectory, not set for other servers."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Par défaut : objectSid pour ActiveDirectory, indéfini pour les autres "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_modify_timestamp (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_modify_timestamp (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:372 sssd-ldap.5.xml:842 sssd-ldap.5.xml:1013
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The LDAP attribute that contains timestamp of the last modification of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"parent object."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'attribut LDAP qui contient l'horodatage de la dernière modification de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'objet parent."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:376 sssd-ldap.5.xml:846 sssd-ldap.5.xml:1020
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: modifyTimestamp"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : modifyTimestamp"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_last_change (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_last_change (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (date of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the last password change)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow, ce paramètre contient le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de l'attribut LDAP correspondant à sa contrepartie <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> (date de changement du dernier mot de passe)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowLastChange"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowLastChange"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_min (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_min (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (minimum "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"password age)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow, ce paramètre contient le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de l'attribut LDAP correspondant à sa contrepartie<citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> (durée de validité minimum du mot de passe)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowMin"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowMin"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_max (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_max (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart (maximum "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"password age)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow, ce paramètre contient le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de l'attribut LDAP correspondant à sa contrepartie <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> (âge maximum du mot de passe)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowMax"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowMax"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_warning (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_warning (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"(password warning period)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow, ce paramètre contient le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de l'attribut LDAP correspondant à sa contrepartie <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> (période d'avertissement du mot de passe)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowWarning"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowWarning"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_inactive (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_inactive (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow, this parameter contains the name of an "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP attribute corresponding to its <citerefentry> <refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> counterpart "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"(password inactivity period)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow, ce paramètre contient le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de l'attribut LDAP correspondant à sa contrepartie <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> (période d'inactivité du mot de passe)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowInactive"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowInactive"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_shadow_expire (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_shadow_expire (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=shadow or ldap_account_expire_policy=shadow, this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"parameter contains the name of an LDAP attribute corresponding to its "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>shadow</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> counterpart (account expiration date)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=shadow ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_account_expire_policy=shadow, ce paramètre contient le nom de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'attribut LDAP correspondant à sa contrepartie <citerefentry> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<refentrytitle>shadow</refentrytitle> <manvolnum>5</manvolnum> </"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> (date d'expiration du compte)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: shadowExpire"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : shadowExpire"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_krb_last_pwd_change (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_krb_last_pwd_change (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"an LDAP attribute storing the date and time of last password change in "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=mit_kerberos, ce paramètre contient "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le nom de l'attribut LDAP stockant la date et l'heure du dernier changement "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de mot de passe dans kerberos."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: krbLastPwdChange"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : krbLastPwdChange"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_krb_password_expiration (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_krb_password_expiration (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_pwd_policy=mit_kerberos, this parameter contains the name of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"an LDAP attribute storing the date and time when current password expires."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_pwd_policy=mit_kerberos, ce paramètre contient "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le nom de l'attribut LDAP stockant la date et l'heure d'expiration du mot de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"passe actuel."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: krbPasswordExpiration"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : krbPasswordExpiration"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_ad_account_expires (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_ad_account_expires (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=ad, this parameter contains the name "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of an LDAP attribute storing the expiration time of the account."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=ad, ce paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"contient le nom d'un attribut LDAP stockant la date d'expiration du compte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: accountExpires"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : accountExpires"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_ad_user_account_control (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_ad_user_account_control (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=ad, this parameter contains the name "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of an LDAP attribute storing the user account control bit field."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=ad, ce paramètre "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"contient le nom d'un attribut LDAP stockant le champ de bits de contrôle du "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"compte utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: userAccountControl"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : userAccountControl"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_ns_account_lock (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_ns_account_lock (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=rhds or equivalent, this parameter "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"determines if access is allowed or not."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=rhds ou équivalent, ce "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"paramètre détermine si l'accès est autorisé ou non."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: nsAccountLock"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : nsAccountLock"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_nds_login_disabled (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_nds_login_disabled (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=nds, this attribute determines if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access is allowed or not."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=nds, cet attribut "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"détermine si l'accès est autorisé ou non."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: loginDisabled"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : loginDisabled"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_nds_login_expiration_time (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_nds_login_expiration_time (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=nds, this attribute determines until "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"which date access is granted."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=nds, cet attribut "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"détermine jusqu'à quand l'accès est autorisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_nds_login_allowed_time_map (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_nds_login_allowed_time_map (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using ldap_account_expire_policy=nds, this attribute determines the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"hours of a day in a week when access is granted."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Lors de l'utilisation de ldap_account_expire_policy=nds, cet attribut "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"détermine les heures des jours dans la semaine pendant lesquelles l'accès "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"est autorisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: loginAllowedTimeMap"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : loginAllowedTimeMap"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_principal (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_principal (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The LDAP attribute that contains the user's Kerberos User Principal Name "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP contenant le nom du principal d'utilisateur (UPN) Kerberos "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: krbPrincipalName"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : krbPrincipalName"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_user_ssh_public_key (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_user_ssh_public_key (chaîne)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains the user's SSH public keys."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient les clés publiques SSH de l'utilisateur."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_force_upper_case_realm (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_force_upper_case_realm (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Some directory servers, for example Active Directory, might deliver the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"realm part of the UPN in lower case, which might cause the authentication to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"fail. Set this option to a non-zero value if you want to use an upper-case "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Certains serveurs d'annuaire, comme par exemple Active Directory, peuvent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"délivrer la partie domaine de l'UPN en minuscules, ce qui peut faire échouer "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'authentification. Définir cette option à une valeur non nulle pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utiliser un nom de domaine en majuscules."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_enumeration_refresh_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_enumeration_refresh_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallagher"Specifies how many seconds SSSD has to wait before refreshing its cache of "
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallagher"enumerated records."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la durée en secondes pendant laquelle SSSD doit attendre avant "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'actualiser son cache d\"énumération d'enregistrements."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallaghermsgid "ldap_purge_cache_timeout (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_purge_cache_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Determine how often to check the cache for inactive entries (such as groups "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"with no members and users who have never logged in) and remove them to save "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Détermine la fréquence de vérification de la présence d'entrées inactives "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dans le cache (telles que groupes sans membres et utilisateurs ne s'étant "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"jamais connectés) et de suppression pour économiser de l'espace."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Setting this option to zero will disable the cache cleanup operation."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Mettre cette option à zéro désactive l'opération de nettoyage du cache."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 10800 (12 hours)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 1800 (12 heures)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_fullname (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_fullname (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the user's full name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP correspondant au nom complet de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:686 sssd-ldap.5.xml:779 sssd-ldap.5.xml:954
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1045 sssd-ldap.5.xml:1963 sssd-ldap.5.xml:2289
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: cn"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : cn"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_member_of (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_member_of (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that lists the user's group memberships."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP énumérant les groupes auquel appartient un utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: memberOf"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : memberOf"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_authorized_service (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_authorized_service (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If access_provider=ldap and ldap_access_order=authorized_service, SSSD will "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"use the presence of the authorizedService attribute in the user's LDAP entry "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to determine access privilege."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsque access_provider=ldap et ldap_access_order=authorized_service, SSSD "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilise la présence de l'attribut authorizedService dans l'entrée LDAP de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'utilisateur pour déterminer les autorisations d'accès."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"An explicit deny (!svc) is resolved first. Second, SSSD searches for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"explicit allow (svc) and finally for allow_all (*)."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le refus explicite (!svc) est résolu en premier. Ensuite, SSSD cherche une "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"autorisation explicite (svc) et enfin allow_all (*)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Please note that the ldap_access_order configuration option <emphasis>must</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"emphasis> include <quote>authorized_service</quote> in order for the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"ldap_user_authorized_service option to work."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Noter que l'option de configuration ldap_access_order <emphasis>doit</"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"emphasis> inclure <quote>authorized_service</quote> de façon à permettre à "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"l'option ldap_user_authorized_service de fonctionner."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: authorizedService"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : authorizedService"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_authorized_host (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_user_authorized_host (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If access_provider=ldap and ldap_access_order=host, SSSD will use the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"presence of the host attribute in the user's LDAP entry to determine access "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Si access_provider=ldap et ldap_access_order=host, SSSD va utiliser la "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"présence de l'attribut host dans l'entrée LDAP de l'utilisateur pour "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"déterminer les autorisations d'accès."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"An explicit deny (!host) is resolved first. Second, SSSD searches for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"explicit allow (host) and finally for allow_all (*)."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le refus explicite (!host) est résolu en premier. SSSD recherche ensuite les "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"autorisations explicites (host) et enfin toutes les autorisations (*)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Please note that the ldap_access_order configuration option <emphasis>must</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"emphasis> include <quote>host</quote> in order for the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"ldap_user_authorized_host option to work."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Noter que l'option de configuration ldap_access_order <emphasis>doit</"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"emphasis> inclure <quote>host</quote> de façon à permettre à l'option "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"ldap_user_authorized_host de fonctionner."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: host"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : host"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_object_class (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_object_class (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The object class of a group entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe d'objet d'une entrée de groupe dans LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: posixGroup"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : posixGroup"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_name (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the group name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP correspondant au nom du groupe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_gid_number (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_gid_number (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the group's id."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP correspondant à l'identifiant de groupe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_member (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_member (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the names of the group's members."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP contenant les noms des membres du groupe."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: memberuid (rfc2307) / member (rfc2307bis)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : memberuid (rfc2307) / member (rfc2307bis)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_uuid (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_uuid (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the UUID/GUID of an LDAP group object."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP contenant les UUID/GUID d'un objet groupe LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_group_objectsid (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_group_objectsid (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The LDAP attribute that contains the objectSID of an LDAP group object. This "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"is usually only necessary for ActiveDirectory servers."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient l'objectSID d'un objet de groupe LDAP. Ceci "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"n'est habituellement nécessaire que pour les serveurs Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_modify_timestamp (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_modify_timestamp (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_nesting_level (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_group_nesting_level (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If ldap_schema is set to a schema format that supports nested groups (e.g. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"RFC2307bis), then this option controls how many levels of nesting SSSD will "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"follow. This option has no effect on the RFC2307 schema."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si ldap_schema est défini comme un format prenant en charge les groupes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"imbriqués (par exemple RFC2307bis), alors cette option contrôle le nombre de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"niveaux d'imbrication que SSSD suivra. Cette option n'a pas d'effet sur le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"schéma RFC2307."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 2"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 2"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "ldap_groups_use_matching_rule_in_chain"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_groups_use_matching_rule_in_chain"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"This option tells SSSD to take advantage of an Active Directory-specific "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"feature which may speed up group lookup operations on deployments with "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"complex or deep nested groups."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option indique à SSSD de tirer parti d'une fonctionnalité Active "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Directory spécifique qui peut accélérer les opérations de recherche de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"groupe sur les déploiements utilisant des groupes profondément imbriqués et "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"In most common cases, it is best to leave this option disabled. It generally "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"only provides a performance increase on very complex nestings."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Dans la plupart des cas, il est préférable de laisser cette option "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"désactivée. Elle ne fournit une augmentation des performances que sur les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"imbrications très complexes."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"If this option is enabled, SSSD will use it if it detects that the server "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"supports it during initial connection. So \"True\" here essentially means "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"\"auto-detect\"."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si cette option est activée, SSSD l'utilisera s'il détecte que le serveur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"prend en charge au cours de la connexion initiale. Ainsi, « true » signifie "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"essentiellement « auto-detect »."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"Note: This feature is currently known to work only with Active Directory "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"2008 R1 and later. See <ulink url=\"http://msdn.microsoft.com/en-us/library/"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"windows/desktop/aa746475%28v=vs.85%29.aspx\"> MSDN(TM) documentation</ulink> "
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"for more details."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : Cette fonctionnalité fonctionne uniquement avec Active Directory "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"2008 R1 et versions suivantes. Consulter <ulink url=\"http://msdn.microsoft."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"com/en-us/library/windows/desktop/aa746475%28v=vs.85%29.aspx\">la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"documentation de MSDN(TM)</ulink> pour plus de détails."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:894 sssd-ldap.5.xml:921 sssd-ldap.5.xml:1212
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1233 sssd-ldap.5.xml:1734 include/ldap_id_mapping.xml:184
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Default: False"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : False"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "ldap_initgroups_use_matching_rule_in_chain"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_initgroups_use_matching_rule_in_chain"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"This option tells SSSD to take advantage of an Active Directory-specific "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"feature which might speed up initgroups operations (most notably when "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"dealing with complex or deep nested groups)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option indique à SSSD de tirer parti d'une fonctionnalité Active "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Directory spécifique qui peut accélérer les opérations initgroups (le plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"souvent lors de l'utilisation de groupes profondément imbriqués ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"complexes)."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_object_class (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_object_class (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The object class of a netgroup entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe d'objet d'une entrée de netgroup dans LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "In IPA provider, ipa_netgroup_object_class should be used instead."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour un fournisseur IPA, ipa_netgroup_object_class doit être utilisé à la "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: nisNetgroup"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : nisNetgroup"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_name (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that corresponds to the netgroup name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP correspondant au nom du netgroup."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "In IPA provider, ipa_netgroup_name should be used instead."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Dans le fournisseur IPA, ipa_netgroup_name doit être utilisé à la place."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_member (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_member (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The LDAP attribute that contains the names of the netgroup's members."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP contenant les noms des membres du netgroup."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "In IPA provider, ipa_netgroup_member should be used instead."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Dans le fournisseur IPA, ipa_netgroup_member doit être utilisé à la place."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: memberNisNetgroup"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : memberNisNetgroup"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_triple (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_triple (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The LDAP attribute that contains the (host, user, domain) netgroup triples."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP contenant les triplets (hôte, utilisateur, domaine) d'un "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "This option is not available in IPA provider."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Cette option n'est pas disponible dans le fournisseur IPA."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: nisNetgroupTriple"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : nisNetgroupTriple"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_uuid (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_uuid (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP contenant les UUID/GUID d'un objet netgroup LDAP."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "In IPA provider, ipa_netgroup_uuid should be used instead."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Dans le fournisseur IPA, ipa_netgroup_uuid doit être utilisé à la place."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_netgroup_modify_timestamp (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_netgroup_modify_timestamp (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_service_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_service_object_class (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The object class of a service entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe d'objet d'une entrée de service LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipService"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipService"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_service_name (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_service_name (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains the name of service attributes and their "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient le nom des attributs de service et de leurs "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_service_port (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_service_port (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains the port managed by this service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient le port géré par ce service."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipServicePort"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipServicePort"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_service_proto (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_service_proto (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains the protocols understood by this service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient les protocoles compris par ce service."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipServiceProtocol"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipServiceProtocol"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_service_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_service_search_base (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_search_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_search_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Specifies the timeout (in seconds) that ldap searches are allowed to run "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"before they are cancelled and cached results are returned (and offline mode "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le délai d'attente (en secondes) autorisé pour les recherches LDAP "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"avant annulation et utilisation des résultats contenus dans le cache (et "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"activation du mode hors ligne)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Note: this option is subject to change in future versions of the SSSD. It "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"will likely be replaced at some point by a series of timeouts for specific "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"lookup types."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Note : cette option est susceptible de changer dans les prochaines version "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de SSSD. Elle sera sûrement remplacée par une série de délais d'attente pour "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"différents types de recherches."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_enumeration_search_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_enumeration_search_timeout (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Specifies the timeout (in seconds) that ldap searches for user and group "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"enumerations are allowed to run before they are cancelled and cached results "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"are returned (and offline mode is entered)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le délai d'attente (en secondes) autorisé pour les recherches LDAP "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"sur les utilisateurs et groupes avant annulation et utilisation des "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"résultats mis en cache (et activation du mode hors ligne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_network_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_network_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the timeout (in seconds) after which the <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> </citerefentry>/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>select</refentrytitle> <manvolnum>2</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> following a <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> returns in case of no activity."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit le délai d'attente (en secondes) après lequel les fonctions "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>poll</refentrytitle> <manvolnum>2</manvolnum> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"</citerefentry>/<citerefentry> <refentrytitle>select</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>2</manvolnum> </citerefentry> suivant un <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>connect</refentrytitle> <manvolnum>2</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> rendent la main en cas d'inactivité."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_opt_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_opt_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies a timeout (in seconds) after which calls to synchronous LDAP APIs "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"will abort if no response is received. Also controls the timeout when "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"communicating with the KDC in case of SASL bind."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit le délai d'attente (en secondes) après lequel les appels synchrones "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"à l'API LDAP échouent si aucune réponse n'est obtenue. Permet aussi de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"contrôler le délai de communication avec le KDC dans le cas d'un appel SASL."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ldap_connection_expire_timeout (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_connection_expire_timeout (entier)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"Specifies a timeout (in seconds) that a connection to an LDAP server will be "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"maintained. After this time, the connection will be re-established. If used "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"in parallel with SASL/GSSAPI, the sooner of the two values (this value vs. "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"the TGT lifetime) will be used."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie un délai d'attente (en secondes) pendant laquelle une connexion à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"un serveur LDAP est maintenue. Passé ce délai, la connexion devra être "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"rétablie. Si ce paramètre est utilisé en parallèle avec SASL/GSSAPI, la plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"courte des deux valeurs entre celle-ci et la durée de vie TGT sera utilisée."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: 900 (15 minutes)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 900 (15 minutes)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_page_size (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_page_size (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specify the number of records to retrieve from LDAP in a single request. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Some LDAP servers enforce a maximum limit per-request."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Définit le nombre d'enregistrements à récupérer lors d'une requête LDAP. "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Certains serveurs LDAP imposent une limite maximale par requête."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 1000"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 1000"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_disable_paging (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_disable_paging (boolean)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Disable the LDAP paging control. This option should be used if the LDAP "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"server reports that it supports the LDAP paging control in its RootDSE but "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"it is not enabled or does not behave properly."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Désactiver le contrôle de pagination LDAP. Cette option doit être utilisée "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"si le serveur LDAP signale qu'il prend en charge le contrôle de pagination "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"LDAP de l'objet RootDSE, mais qu'il n'est pas activé ou ne se comporte pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"correctement."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Example: OpenLDAP servers with the paging control module installed on the "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"server but not enabled will report it in the RootDSE but be unable to use it."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Exemple : le serveurs OpenLDAP avec le module de contrôle de pagination "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"installé sur le serveur mais non activé le signaleront dans RootDSE mais il "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sera impossible de l'utiliser."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Example: 389 DS has a bug where it can only support a one paging control at "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"a time on a single connection. On busy clients, this can result in some "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"requests being denied."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Exemple : 389 DS a un bogue où il ne peut que soutenir qu'un seul contrôle "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de pagination à la fois sur une connexion donnée. Sur les clients chargés, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cela peut entraîner l'échec de certaines demandes."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "ldap_disable_range_retrieval (boolean)"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "ldap_disable_range_retrieval (booléen)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "Disable Active Directory range retrieval."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "Désactiver la récupération de plage Active Directory."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Active Directory limits the number of members to be retrieved in a single "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"lookup using the MaxValRange policy (which defaults to 1500 members). If a "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"group contains more members, the reply would include an AD-specific range "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"extension. This option disables parsing of the range extension, therefore "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"large groups will appear as having no members."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Active Directory limite le nombre de membres à récupérer par recherche à "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"l'aide de la stratégie MaxValRange (qui prend la valeur par défaut de 1500 "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"membres). Si un groupe contient plus de membres, la réponse inclura une "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"extension de plage spécifique à Active Directory. Cette option désactive "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"l'analyse de cette extension de plage, les groupes de grande taille "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"apparaissant ainsi sans aucun membre."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_sasl_minssf (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sasl_minssf (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"When communicating with an LDAP server using SASL, specify the minimum "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"security level necessary to establish the connection. The values of this "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"option are defined by OpenLDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de la communication avec un serveur LDAP en utilisant SASL, spécifie le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"niveau de sécurité minimal nécessaire pour établir la connexion. Les valeurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de cette option sont définies par OpenLDAP."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: Use the system default (usually specified by ldap.conf)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Par défaut : Utiliser la valeur par défaut du système (généralement spécifié "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_deref_threshold (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_deref_threshold (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specify the number of group members that must be missing from the internal "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"cache in order to trigger a dereference lookup. If less members are missing, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"they are looked up individually."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Définit le nombre de membres du groupe qui doivent manquer au sein du cache "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"interne afin de déclencher une recherche de déréférencement. Si le nombre de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"membres manquants est inférieur, ils sont recherchés individuellement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"You can turn off dereference lookups completely by setting the value to 0."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Vous pouvez désactiver complètement les recherches de déréférencement en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"affectant la valeur 0."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"A dereference lookup is a means of fetching all group members in a single "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"LDAP call. Different LDAP servers may implement different dereference "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"methods. The currently supported servers are 389/RHDS, OpenLDAP and Active "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Une recherche de déréférencement est un moyen pour récupérer tous les "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"membres d'un groupe avec un seul appel LDAP. Plusieurs serveurs LDAP peuvent "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"avoir différentes méthodes de déréférencement. Les serveurs actuellement "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"acceptés sont 389/RHDS, OpenLDAP et Active Directory."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"<emphasis>Note:</emphasis> If any of the search bases specifies a search "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"filter, then the dereference lookup performance enhancement will be disabled "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"regardless of this setting."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>Remarque :</emphasis> Si l'une des bases de recherche spécifie un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"filtre de recherche, alors l'amélioration de la performance de recherche de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"déréférencement est désactivée indépendamment de ce paramètre."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_reqcert (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_reqcert (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies what checks to perform on server certificates in a TLS session, if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"any. It can be specified as one of the following values:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit les vérifications à effectuer sur les certificats serveur sur une "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"session TLS, si elle existe. Une des valeurs suivantes est utilisable :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>never</emphasis> = The client will not request or check any server "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>never</emphasis> : le client ne demandera ni ne vérifiera un "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"quelconque certificat du serveur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>allow</emphasis> = The server certificate is requested. If no "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"certificate is provided, the session proceeds normally. If a bad certificate "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"is provided, it will be ignored and the session proceeds normally."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>allow</emphasis> : le certificat serveur est demandé. Si aucun "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"certificat n'est fournit, la session continue normalement. Si un mauvais "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certificat est fourni, il est ignoré et la session continue normalement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>try</emphasis> = The server certificate is requested. If no "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"certificate is provided, the session proceeds normally. If a bad certificate "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"is provided, the session is immediately terminated."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>try</emphasis> : le certificat serveur est demandé. Si aucun "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certificat n'est fourni, la session continue normalement. Si un mauvais "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certificat est fourni, la session se termine immédiatement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>demand</emphasis> = The server certificate is requested. If no "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"certificate is provided, or a bad certificate is provided, the session is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"immediately terminated."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>demand</emphasis> : le certificat serveur est demandé. Si aucun "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certificat ou un mauvais certificat est fourni, la session se termine "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"immédiatement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>hard</emphasis> = Same as <quote>demand</quote>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<emphasis>hard</emphasis> : identique à <quote>demand</quote>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: hard"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : hard"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_cacert (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_cacert (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the file that contains certificates for all of the Certificate "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Authorities that <command>sssd</command> will recognize."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le fichier qui contient les certificats pour toutes les autorités de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"certification que <command>sssd</command> reconnaîtra."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ldap.5.xml:1339 sssd-ldap.5.xml:1357 sssd-ldap.5.xml:1398
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: use OpenLDAP defaults, typically in <filename>/etc/openldap/ldap."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"conf</filename>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : utilise les paramètres par défaut de OpenLDAP, en général dans "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<filename>/etc/openldap/ldap.conf</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_cacertdir (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_cacertdir (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the path of a directory that contains Certificate Authority "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"certificates in separate individual files. Typically the file names need to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"be the hash of the certificate followed by '.0'. If available, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>cacertdir_rehash</command> can be used to create the correct names."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Spécifie le chemin d'un dossier qui contient les certificats de l'autorité "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de certificats dans des fichiers séparés. Usuellement, les noms de fichiers "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"sont la somme de contrôle du certificat suivi de « .0 ». Si disponible, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>cacertdir_rehash</command> peut être utilisé pour créer les noms "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_cert (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_cert (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies the file that contains the certificate for the client's key."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Définit le fichier qui contient le certificat pour la clef du client."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_key (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_key (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies the file that contains the client's key."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Définit le fichier qui contient la clef du client."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_tls_cipher_suite (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_tls_cipher_suite (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies acceptable cipher suites. Typically this is a colon sperated "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"list. See <citerefentry><refentrytitle>ldap.conf</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>5</manvolnum></citerefentry> for format."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Définit les algorithmes de chiffrement acceptables. Généralement sous la "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"forme d'une liste séparée par des deux-points. Cf. "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<citerefentry><refentrytitle>ldap.conf</refentrytitle> <manvolnum>5</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"manvolnum></citerefentry> pour le format."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_id_use_start_tls (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_id_use_start_tls (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies that the id_provider connection must also use <systemitem class="
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"\"protocol\">tls</systemitem> to protect the channel."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit le fait que le fournisseur d'identité de connexion doit aussi "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utiliser <systemitem class=\"protocol\">tls</systemitem> pour protéger le "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_id_mapping (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_id_mapping (boolean)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specifies that SSSD should attempt to map user and group IDs from the "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"ldap_user_objectsid and ldap_group_objectsid attributes instead of relying "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"on ldap_user_uid_number and ldap_group_gid_number."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Indique que SSSD doit tenter de trouver les correspondances des ID "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'utilisateur et de groupe dans les attributs ldap_user_objectsid et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_group_objectsid au lieu d'utiliser ldap_user_uid_number et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_group_gid_number."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Currently this feature supports only ActiveDirectory objectSID mapping."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette fonctionnalité ne prend actuellement en charge que la correspondance "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"par objectSID avec Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozekmsgid "ldap_min_id, ldap_max_id (interger)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "ldap_min_id, ldap_max_id (entiers)"
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"In contrast to the SID based ID mapping which is used if ldap_id_mapping is "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"set to true the allowed ID range for ldap_user_uid_number and "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"ldap_group_gid_number is unbound. In a setup with sub/trusted-domains this "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"might lead to ID collisions. To avoid collisions ldap_min_id and ldap_max_id "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"can be set to restrict the allowed range for the IDs which are read directly "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"from the server. Sub-domains can then pick other ranges to map IDs."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Au contraire de la mise en correspondance d'identifiants s'appuyant sur les "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"SID utilisée si ldap_id_mapping est positionné à true, les plages "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"d'identifiants autorisés pour ldap_user_uid_number et ldap_group_gid_number "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"n'ont pas de limite. Dans une configuration avec des sous-domaines ou des "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"domaines approuvés, cela peut engendrer des collisions. Pour les éviter, "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"ldap_min_id et ldap_max_id peuvent être configurés afin de restreindre les "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"plages d'identifiants autorisées lues directement depuis le serveur. Les "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"sous-domaines peuvent ensuite choisir d'autres plages pour leurs propres "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"identifiants."
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozekmsgid "Default: not set (both options are set to 0)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "Par défaut : non indiqué (les deux options sont à 0)"
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_sasl_mech (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_sasl_mech (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specify the SASL mechanism to use. Currently only GSSAPI is tested and "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le mécanisme SASL à utiliser. Actuellement, seul GSSAPI est testé et "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"pris en charge."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_sasl_authid (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_sasl_authid (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specify the SASL authorization id to use. When GSSAPI is used, this "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"represents the Kerberos principal used for authentication to the directory. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"This option can either contain the full principal (for example host/"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"myhost@EXAMPLE.COM) or just the principal name (for example host/myhost)."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Définit l'identité à utiliser pour l'autorisation SASL. Lorsque GSSAPI est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"utilisé, c'est l'identifiant Kerberos principal utilisé pour s'authentifier "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"à l'annuaire. Cette option peut soit contenir le principal complet (par "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"exemple host/myhost@EXAMPLE.COM), soit juste le nom du principal (par "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "Default: host/hostname@REALM"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : host/hostname@REALM"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "ldap_sasl_realm (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ldap_sasl_realm (chaîne)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Specify the SASL realm to use. When not specified, this option defaults to "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"the value of krb5_realm. If the ldap_sasl_authid contains the realm as "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"well, this option is ignored."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Spécifie le domaine SASL à utiliser. Si non spécifié, cette option prend par "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"défaut la valeur de krb5_realm. Si le ldap_sasl_authid contient aussi le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"domaine, cette option est ignorée."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Default: the value of krb5_realm."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Par défaut : la valeur de krb5_realm."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_sasl_canonicalize (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_sasl_canonicalize (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If set to true, the LDAP library would perform a reverse lookup to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"canonicalize the host name during a SASL bind."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si true, la bibliothèque LDAP effectue une recherche inversée pour canoniser "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le nom de l'hôte au cours d'une liaison SASL."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: false;"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Défaut : false;"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_krb5_keytab (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_krb5_keytab (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specify the keytab to use when using SASL/GSSAPI."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Définit le fichier keytab à utiliser pour utiliser SASL/GSSAPI."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: System keytab, normally <filename>/etc/krb5.keytab</filename>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Par défaut : le fichier keytab du système, normalement <filename>/etc/krb5."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"keytab</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_krb5_init_creds (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_krb5_init_creds (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies that the id_provider should init Kerberos credentials (TGT). This "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"action is performed only if SASL is used and the mechanism selected is "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit le fait que le fournisseur d'identité doit initialiser les données "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identification Kerberos (TGT). Cette action est effectuée seulement si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SASL est utilisé et que le mécanisme choisi est GSSAPI."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_krb5_ticket_lifetime (integer)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_krb5_ticket_lifetime (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies the lifetime in seconds of the TGT if GSSAPI is used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Définit la durée de vie, en secondes, des TGT si GSSAPI est utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 86400 (24 hours)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 86400 (24 heures)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "krb5_server, krb5_backup_server (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "krb5_server, krb5_backup_server (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the comma-separated list of IP addresses or hostnames of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Kerberos servers to which SSSD should connect in the order of preference. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For more information on failover and server redundancy, see the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"colon) may be appended to the addresses or hostnames. If empty, service "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"discovery is enabled - for more information, refer to the <quote>SERVICE "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"DISCOVERY</quote> section."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie par ordre de préférence la liste séparée par des virgules des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"adresses IP ou des noms de systèmes des serveurs Kerberos auquel SSSD doit "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"se connecter. Pour plus d'informations sur la redondance de basculement et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le serveur, consulter la section <quote>BASCULEMENT</quote>. Un numéro de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"port facultatif (précédé de deux-points) peut être ajouté aux adresses ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"aux noms de systèmes. Si vide, la découverte de services est activée - pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"plus d'informations, se reporter à la section de <quote>DÉCOUVERTE DE "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SERVICES</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When using service discovery for KDC or kpasswd servers, SSSD first searches "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"for DNS entries that specify _udp as the protocol and falls back to _tcp if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"none are found."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lors de l'utilisation de découverte de services pour le KDC ou les serveurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"kpasswd, SSSD recherche en premier les entrées DNS qui définissent _udp "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"comme protocole, et passe sur _tcp si aucune entrée n'est trouvée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option was named <quote>krb5_kdcip</quote> in earlier releases of SSSD. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"While the legacy name is recognized for the time being, users are advised to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"migrate their config files to use <quote>krb5_server</quote> instead."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option s'appelait <quote>krb5_kdcip</quote> dans les versions "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"précédentes de SSSD. Bien que ce nom soit toujours reconnu à l'heure "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"actuelle, il est conseillé de migrer les fichiers de configuration vers "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'utilisation de <quote>krb5_server</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:1586 sssd-ipa.5.xml:371 sssd-krb5.5.xml:103
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_realm (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_realm (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specify the Kerberos REALM (for SASL/GSSAPI auth)."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Définit le DOMAINE de Kerberos (pour l'authentification SASL/GSSAPI)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: System defaults, see <filename>/etc/krb5.conf</filename>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : valeur par défaut du système, voir <filename>/etc/krb5.conf</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ldap.5.xml:1598 sssd-ipa.5.xml:386 sssd-krb5.5.xml:460
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallaghermsgid "krb5_canonicalize (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "krb5_canonicalize (booléen)"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"Specifies if the host principal should be canonicalized when connecting to "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"LDAP server. This feature is available with MIT Kerberos >= 1.7"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie si le principal de l'hôte doit être rendu canonique lors de la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"connexion au serveur LDAP. Cette fonctionnalité est disponible avec MIT "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Kerberos > = 1.7"
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "krb5_use_kdcinfo (boolean)"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "krb5_use_kdcinfo (booléen)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Specifies if the SSSD should instruct the Kerberos libraries what realm and "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"which KDCs to use. This option is on by default, if you disable it, you need "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"to configure the Kerberos library using the <citerefentry> "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"citerefentry> configuration file."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Indique si SSSD doit préciser aux bibliothèques Kerberos quels domaine et "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"KDC utiliser. Cette option est activée par défaut, si elle est désactivée, "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"la bibliothèque Kerberos doit être configurée à l'aide du fichier de "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"configuration <citerefentry> <refentrytitle>krb5.conf</refentrytitle> "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"<manvolnum>5</manvolnum> </citerefentry>."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"See the <citerefentry> <refentrytitle>sssd_krb5_locator_plugin</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> manual page for more "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"information on the locator plugin."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Consulter la page de manuel de <citerefentry> "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle> <manvolnum>8</"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"manvolnum> </citerefentry> pour plus d'informations sur le greffon de "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"localisation."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_pwd_policy (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_pwd_policy (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Select the policy to evaluate the password expiration on the client side. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following values are allowed:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Détermine la politique d'expiration des mots de passe côté client. Les "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"valeurs suivantes sont acceptées :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>none</emphasis> - No evaluation on the client side. This option "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"cannot disable server-side password policies."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>none</emphasis> : aucun évaluation du côté client. Cette option ne "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"peut pas désactiver la politique sur les mots de passe du côté serveur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>shadow</emphasis> - Use <citerefentry><refentrytitle>shadow</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum></citerefentry> style attributes to "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"evaluate if the password has expired."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>shadow</emphasis> - Utiliser les attributs de style "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>shadow</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> pour évaluer si le mot de passe a expiré."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>mit_kerberos</emphasis> - Use the attributes used by MIT Kerberos "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to determine if the password has expired. Use chpass_provider=krb5 to update "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"these attributes when the password is changed."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>mit_kerberos</emphasis> : utilise les attributs utilisés par MIT "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Kerberos pour déterminer si le mot de passe a expiré. Utiliser "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"chpass_provider=krb5 afin de modifier ces attributs lorsque le mot de passe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"est changé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_referrals (boolean)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_referrals (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies whether automatic referral chasing should be enabled."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Définit si le déréférencement automatique doit être activé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that sssd only supports referral chasing when it is compiled "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"with OpenLDAP version 2.4.13 or higher."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Veuillez noter que sssd ne supporte que le déréférencement que lorsqu'il est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"compilé avec OpenLDAP version 2.4.13 ou supérieur."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Chasing referrals may incur a performance penalty in environments that use "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"them heavily, a notable example is Microsoft Active Directory. If your setup "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"does not in fact require the use of referrals, setting this option to false "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"might bring a noticeable performance improvement."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La déréférenciation de références peut subir une altération notable des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"performances dans les environnements qui les utilisent fortement, un exemple "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"notable étant Microsoft Active Directory. Si votre installation ne nécessite "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas l'utilisation des références, affecter false à cette option devrait "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"permettre d'améliorer de façon notable les performances."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_dns_service_name (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_dns_service_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies the service name to use when service discovery is enabled."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le nom de service à utiliser quand la découverte de services est "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: ldap"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : ldap"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_chpass_dns_service_name (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ldap_chpass_dns_service_name (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the service name to use to find an LDAP server which allows "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"password changes when service discovery is enabled."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit le nom de service à utiliser pour trouver un serveur LDAP autorisant "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"un changement de mot de passe quand la découverte de services est activée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: not set, i.e. service discovery is disabled"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Par défaut : non défini, c'est-à-dire que le service de découverte est "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "ldap_chpass_update_last_change (bool)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_chpass_update_last_change (bool)"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"Specifies whether to update the ldap_user_shadow_last_change attribute with "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"days since the Epoch after a password change operation."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie s'il faut mettre à jour l'attribut ldap_user_shadow_last_change "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"avec le nombre de jours depuis Epoch après l'opération de changement de mot "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_access_filter (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_access_filter (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"If using access_provider = ldap and ldap_access_order = filter (default), "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"this option is mandatory. It specifies an LDAP search filter criteria that "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"must be met for the user to be granted access on this host. If "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"access_provider = ldap, ldap_access_order = filter and this option is not "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"set, it will result in all users being denied access. Use access_provider = "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"permit to change this default behavior."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option est obligatoire lors de l'utilisation de access_provider = ldap "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"et ldap_access_order = filter (qui sont les valeurs par défaut). Elle "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"spécifie un critère de filtre de recherche LDAP qui doit être satisfaite "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour que l'utilisateur ait accès à ce système. Si access_provider = ldap, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_access_order = filter et que cette option n'est pas définie, tous les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisateurs se verront refuser leurs accès. Utiliser access_provider = "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"permit de changer ce comportement par défaut."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Example:"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Exemple:"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access_provider = ldap\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"access_provider = ldap\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_access_filter = memberOf=cn=allowedusers,ou=Groups,dc=example,dc=com\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This example means that access to this host is restricted to members of the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"\"allowedusers\" group in ldap."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cet exemple montre un accès à l'hôte restreint aux membres du groupe LDAP « "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"allowedusers »."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Offline caching for this feature is limited to determining whether the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"user's last online login was granted access permission. If they were granted "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access during their last login, they will continue to be granted access "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"while offline and vice-versa."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le cache hors-ligne pour cette fonctionnalité est limité à la détermination "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"du fait que la dernière connexion en ligne de l'utilisateur a été autorisée. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si tel était le cas, l'accès sera conservé en mode hors-ligne et vice-versa."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: Empty"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : vide"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_account_expire_policy (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_account_expire_policy (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"With this option a client side evaluation of access control attributes can "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Avec cette option une évaluation du côté client des contrôles d'accès peut "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"être activée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that it is always recommended to use server side access control, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"i.e. the LDAP server should deny the bind request with a suitable error code "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"even if the password is correct."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Veuillez noter qu'il est toujours recommandé d'utiliser un contrôle d'accès "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"du côté serveur, c'est-à-dire que le serveur LDAP doit refuser une requête "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de connexion avec un code erreur approprié même si le mot de passe est "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The following values are allowed:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Les valeurs suivantes sont autorisées :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>shadow</emphasis>: use the value of ldap_user_shadow_expire to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"determine if the account is expired."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>shadow</emphasis> : utiliser la valeur de ldap_user_shadow_expire "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour déterminer si le compte a expiré."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>ad</emphasis>: use the value of the 32bit field "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_user_ad_user_account_control and allow access if the second bit is not "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"set. If the attribute is missing access is granted. Also the expiration time "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of the account is checked."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>ad</emphasis> : utilise la valeur du champ 32 bits "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ldap_user_ad_user_account_control et autorise l'accès si le deuxième bit "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"n'est pas défini. Si l'attribut est manquant, l'accès est autorisé. La date "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"d'expiration du compte est aussi vérifiée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"emphasis>: use the value of ldap_ns_account_lock to check if access is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"allowed or not."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>rhds</emphasis>, <emphasis>ipa</emphasis>, <emphasis>389ds</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> : utilise la valeur de ldap_ns_account_lock afin de vérifier si "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'accès est autorisé ou non."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>nds</emphasis>: the values of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled and "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ldap_user_nds_login_expiration_time are used to check if access is allowed. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If both attributes are missing access is granted."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>nds</emphasis> : les valeurs de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"ldap_user_nds_login_allowed_time_map, ldap_user_nds_login_disabled et "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"ldap_user_nds_login_expiration_time sont utilisées pour vérifier si l'accès "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"est autorisé. Si les deux attributs sont manquants, l'accès est autorisé."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Please note that the ldap_access_order configuration option <emphasis>must</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"emphasis> include <quote>expire</quote> in order for the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"ldap_account_expire_policy option to work."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Noter que l'option de configuration ldap_access_order <emphasis>doit</"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"emphasis> inclure <quote>expire</quote> de façon à permettre à l'option "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"ldap_account_expire_policy de fonctionner."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_access_order (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_access_order (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Comma separated list of access control options. Allowed values are:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparées par des virgules des options de contrôles d'accès. Les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"valeurs autorisées sont :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>filter</emphasis>: use ldap_access_filter"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<emphasis>filter</emphasis> : utiliser ldap_access_filter"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>expire</emphasis>: use ldap_account_expire_policy"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<emphasis>expire</emphasis>: utiliser ldap_account_expire_policy"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>authorized_service</emphasis>: use the authorizedService attribute "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to determine access"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>authorized_service</emphasis> : utiliser l'attribut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"authorizedService pour déterminer l'accès"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>host</emphasis>: use the host attribute to determine access"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>host</emphasis> : utilise l'attribut host pour déterminer l'accès"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: filter"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : filter"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that it is a configuration error if a value is used more than "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Veuillez noter qu'une valeur utilisée plusieurs fois résulte en une erreur "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_deref (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_deref (chaînes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies how alias dereferencing is done when performing a search. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"following options are allowed:"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit comment le déréférencement de l'alias est effectué lors d'une "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"recherche. Les options suivantes sont autorisées :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>never</emphasis>: Aliases are never dereferenced."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<emphasis>never</emphasis> : les alias ne sont jamais déréférencés."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>searching</emphasis>: Aliases are dereferenced in subordinates of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the base object, but not in locating the base object of the search."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>searching</emphasis> : Les alias sont déréférencés comme des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"subordonnés de l'objet de base, mais pas en localisant l'objet de base de la "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>finding</emphasis>: Aliases are only dereferenced when locating "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the base object of the search."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>finding</emphasis> : les alias sont seulement déréférencés lors de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"la localisation de l'objet de base de la recherche."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>always</emphasis>: Aliases are dereferenced both in searching and "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"in locating the base object of the search."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>always</emphasis> : les alias sont déréférencés à la fois pour la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"recherche et et la localisation de l'objet de base de la recherche."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: Empty (this is handled as <emphasis>never</emphasis> by the LDAP "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"client libraries)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Par défaut : vide (ceci est traité comme <emphasis>never</emphasis> par les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"bibliothèques clientes LDAP)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "ldap_rfc2307_fallback_to_local_users (boolean)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ldap_rfc2307_fallback_to_local_users (booléen)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Allows to retain local users as members of an LDAP group for servers that "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"use the RFC2307 schema."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Permet de conserver les utilisateurs locaux en tant que membres d'un groupe "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"LDAP pour les serveurs qui utilisent le schéma RFC2307."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"In some environments where the RFC2307 schema is used, local users are made "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"members of LDAP groups by adding their names to the memberUid attribute. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The self-consistency of the domain is compromised when this is done, so SSSD "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"would normally remove the \"missing\" users from the cached group "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"memberships as soon as nsswitch tries to fetch information about the user "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"via getpw*() or initgroups() calls."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Dans certains environnements où le schéma RFC2307 est utilisé, les "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"utilisateurs locaux deviennent membres du groupes LDAP en ajoutant leurs "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"noms à l'attribut memberUid. La cohérence du domaine est compromise quand "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"cela est fait, SSSD supprimerait normalement les utilisateurs « disparus » "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"des appartenances aux groupes mises en cache dès que nsswitch essaie de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"récupérer des informations sur l'utilisateur via des appels à getpw*() ou "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"initgoups()."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"This option falls back to checking if local users are referenced, and caches "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"them so that later initgroups() calls will augment the local users with the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"additional LDAP groups."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Cette option vérifie en dernier recours si les utilisateurs locaux sont "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"référencés et les met en cache afin que des appels ultérieurs à initgoups() "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ajoutent les utilisateurs locaux aux groupes LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"All of the common configuration options that apply to SSSD domains also "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"apply to LDAP domains. Refer to the <quote>DOMAIN SECTIONS</quote> section "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> manual page for full details. <placeholder type="
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"\"variablelist\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Toutes les options de configuration communes appliquées aux domaines SSSD "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"s'appliquent aussi aux domaines LDAP. Voir la section des <quote>SECTIONS DE "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"DOMAINE</quote> dans la page de manuel <citerefentry> <refentrytitle>sssd."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"conf</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> pour plus de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"détails. <placeholder type=\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "SUDO OPTIONS"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "OPTIONS DE SUDO"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_object_class (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The object class of a sudo rule entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe d'objet d'une entrée de règle de sudo dans LDAP."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoRole"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoRole"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_name (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_name (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that corresponds to the sudo rule name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui correspond au nom de la règle de sudo."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_command (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_command (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that corresponds to the command name."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui correspond au nom de la commande."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoCommand"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoCommand"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_host (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_host (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the host name (or host IP address, "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"host IP network, or host netgroup)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond au nom d'hôte (ou adresse IP de l'hôte, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"réseau IP de l'hôte ou netgroup de l'hôte)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoHost"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoHost"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_user (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_user (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the user name (or UID, group name or "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"user's netgroup)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond au nom d'utilisateur (ou UID, le nom du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"groupe ou netgroup de l'utilisateur)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoUser"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoUser"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_option (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_option (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that corresponds to the sudo options."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui correspond aux options sudo."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoOption"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoOption"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_runasuser (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_runasuser (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the user name that commands may be "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond aux commandes peuvent être exécutées sous le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom d'utilisateur."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoRunAsUser"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoRunAsUser"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_runasgroup (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_runasgroup (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the group name or group GID that "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"commands may be run as."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond au nom du groupe ou GID du groupe sous lequel "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les commandes seront être exécutées."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoRunAsGroup"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoRunAsGroup"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_notbefore (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_notbefore (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the start date/time for when the sudo "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"rule is valid."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond à la date/heure de début pour laquelle la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"règle sudo est valide."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoNotBefore"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoNotBefore"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_notafter (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_notafter (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that corresponds to the expiration date/time, after which "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"the sudo rule will no longer be valid."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui correspond à la date/heure d'expiration, après quoi la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"règle sudo ne sera plus valide."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoNotAfter"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoNotAfter"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudorule_order (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudorule_order (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that corresponds to the ordering index of the rule."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui correspond à l'index de tri de la règle."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: sudoOrder"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : sudoOrder"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_full_refresh_interval (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_full_refresh_interval (integer)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"How many seconds SSSD will wait between executing a full refresh of sudo "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"rules (which downloads all rules that are stored on the server)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle SSSD va attendre entre deux "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"actualisations complètes des règles de sudo (qui téléchargent toutes les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"règles qui sont stockées sur le serveur)."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"The value must be greater than <emphasis>ldap_sudo_smart_refresh_interval </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La valeur doit être supérieure à <emphasis>ldap_sudo_smart_refresh_interval</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "Default: 21600 (6 hours)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : 21600 (6 heures)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_smart_refresh_interval (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_smart_refresh_interval (integer)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"How many seconds SSSD has to wait before executing a smart refresh of sudo "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"rules (which downloads all rules that have USN higher than the highest USN "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"of cached rules)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La durée en secondes pendant laquelle SSSD doit attendre avant d'exécuter "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"une actualisation intelligente des règles sudo (qui télécharge toutes les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"règles qui ont un USN supérieur à l'USN le plus élevé des règles mises en "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"If USN attributes are not supported by the server, the modifyTimestamp "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"attribute is used instead."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si les attributs USN ne sont pas pris en charge par le serveur, l'attribut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"modifyTimestamp est utilisé à la place."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_use_host_filter (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_use_host_filter (boolean)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"If true, SSSD will download only rules that are applicable to this machine "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"(using the IPv4 or IPv6 host/network addresses and hostnames)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si true, SSSD téléchargera les seules règles qui s'appliquent à cette "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"machine (à l'aide de l'adresse de système ou de réseau IPv4 ou IPv6 et des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"noms de systèmes)."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_hostnames (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_hostnames (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Space separated list of hostnames or fully qualified domain names that "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"should be used to filter the rules."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparés par des espaces des noms de systèmes ou de domaines qui "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"doivent être utilisés pour filtrer les règles."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"If this option is empty, SSSD will try to discover the hostname and the "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"fully qualified domain name automatically."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si cette option est vide, SSSD va essayer de découvrir automatiquement le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de système et le nom de domaine pleinement qualifié."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:2153 sssd-ldap.5.xml:2176 sssd-ldap.5.xml:2194
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"If <emphasis>ldap_sudo_use_host_filter</emphasis> is <emphasis>false</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"emphasis> then this option has no effect."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si <emphasis>ldap_sudo_use_host_filter</emphasis> est <emphasis>false</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"emphasis>, alors cette option n'a aucun effet."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "Default: not specified"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : non spécifié"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_ip (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_ip (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Space separated list of IPv4 or IPv6 host/network addresses that should be "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"used to filter the rules."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparés par des espaces d'adresses de système ou de réseaux IPv4 ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"IPv6 qui doivent être utilisés pour filtrer les règles."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"If this option is empty, SSSD will try to discover the addresses "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"automatically."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si cette option est vide, SSSD va essayer de découvrir les adresses "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"automatiquement."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_include_netgroups (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_include_netgroups (boolean)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"If true then SSSD will download every rule that contains a netgroup in "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"sudoHost attribute."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si elle est vraie alors SSSD téléchargera toutes les règles qui contient un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"netgroup dans l'attribut sudoHost."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ldap_sudo_include_regexp (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_include_regexp (boolean)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"If true then SSSD will download every rule that contains a wildcard in "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sudoHost attribute."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si positionnée à true, SSSD téléchargera toutes les règles qui contiennent "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"un joker dans l'attribut sudoHost."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "<placeholder type=\"variablelist\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<placeholder type=\"variablelist\" id=\"0\"/>"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"This manual page only describes attribute name mapping. For detailed "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"explanation of sudo related attribute semantics, see <citerefentry> "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<refentrytitle>sudoers.ldap</refentrytitle><manvolnum>5</manvolnum> </"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"citerefentry>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette page de manuel décrit uniquement le mappage de noms d'attribut. Pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"une explication détaillée des sémantiques d'attributs relatives à sudo, cf. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "AUTOFS OPTIONS"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "OPTIONS AUTOFS"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Please note that the default values correspond to the default schema which "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Veuillez noter que les valeurs par défaut correspondent au schéma par défaut "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"qui est RFC2307."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_map_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_map_object_class (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The object class of an automount map entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La classe d'objet d'une entrée de table de montage automatique dans LDAP."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: automountMap"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : automountMap"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_map_name (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_map_name (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The name of an automount map entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Le nom d'une entrée de table de montage automatique dans LDAP."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ou"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ou"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_entry_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_entry_object_class (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_entry_key (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_entry_key (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The key of an automount entry in LDAP. The entry usually corresponds to a "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La clé d'une entrée de montage automatique dans LDAP. L'entrée correspond "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"généralement à un point de montage."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_entry_value (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_entry_value (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: automountInformation"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : automountInformation"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"\"variablelist\" id=\"4\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<placeholder type=\"variablelist\" id=\"0\"/> <placeholder type="
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"\"variablelist\" id=\"1\"/> <placeholder type=\"variablelist\" id=\"2\"/> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<placeholder type=\"variablelist\" id=\"3\"/> <placeholder type="
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"\"variablelist\" id=\"4\"/>"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ADVANCED OPTIONS"
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgstr "OPTIONS AVANCÉES"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_netgroup_search_base (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgstr "ldap_netgroup_search_base (chaînes)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_search_base (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_search_base (chaînes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_search_base (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_group_search_base (chaînes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_user_search_filter (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_user_search_filter (chaînes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option specifies an additional LDAP search filter criteria that "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"restrict user searches."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Cette option définit un filtre de recherche LDAP supplémentaire qui "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"restreint les recherches utilisateur."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"by ldap_user_search_base."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option est <emphasis>déconseillée</emphasis> en faveur de la syntaxe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisée par ldap_user_search_base."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" ldap_user_search_filter = (loginShell=/bin/tcsh)\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This filter would restrict user searches to users that have their shell set "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Ce filtre restreindrait les recherches aux seuls utilisateurs qui ont leur "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"interpréteur de commande défini en /bin/tcsh."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ldap_group_search_filter (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ldap_group_search_filter (chaînes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option specifies an additional LDAP search filter criteria that "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"restrict group searches."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Cette option définit un filtre de recherche LDAP supplémentaire qui "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"restreint les recherches de groupe."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"This option is <emphasis>deprecated</emphasis> in favor of the syntax used "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"by ldap_group_search_base."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option est <emphasis>déconseillée</emphasis> en faveur de la syntaxe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisée par ldap_group_search_base."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_sudo_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_sudo_search_base (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ldap_autofs_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_autofs_search_base (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"These options are supported by LDAP domains, but they should be used with "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"caution. Please include them in your configuration only if you know what you "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"are doing. <placeholder type=\"variablelist\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ces options sont prises en charge par les domaines LDAP, mais ils doivent "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"être utilisés avec précaution. Veuillez les inclure dans votre configuration "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"seulement si vous savez ce que vous faites. <placeholder type=\"variablelist"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following example assumes that SSSD is correctly configured and LDAP is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"set to one of the domains in the <replaceable>[domains]</replaceable> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant suppose que SSSD est correctement configuré et que LDAP "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pointe sur un des domaines de la section <replaceable>[domains]</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" id_provider = ldap\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" auth_provider = ldap\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" ldap_uri = ldap://ldap.mydomain.org\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" ldap_search_base = dc=mydomain,dc=org\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" ldap_tls_reqcert = demand\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" cache_credentials = true\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" id_provider = ldap\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" auth_provider = ldap\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" ldap_uri = ldap://ldap.mydomain.org\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" ldap_search_base = dc=mydomain,dc=org\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" ldap_tls_reqcert = demand\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" cache_credentials = true\n"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#: sssd-ldap.5.xml:2406 sssd-simple.5.xml:139 sssd-ipa.5.xml:767
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ad.5.xml:301 sssd-sudo.5.xml:56 sssd-sudo.5.xml:78 sssd-krb5.5.xml:535
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<placeholder type=\"programlisting\" id=\"0\"/>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<placeholder type=\"programlisting\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-ldap.5.xml:2419 sssd_krb5_locator_plugin.8.xml:61 sssd-ad.5.xml:316
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The descriptions of some of the configuration options in this manual page "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"are based on the <citerefentry> <refentrytitle>ldap.conf</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>5</manvolnum> </citerefentry> manual page from the OpenLDAP 2.4 "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"distribution."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les descriptions de quelques unes des options de configuration des pages de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manuel sont basées sur le manuel de <citerefentry> <refentrytitle>ldap.conf</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> de la distribution "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de OpenLDAP 2.4."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refentryinfo>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<productname>SSSD</productname> <orgname>The SSSD upstream - http://"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<productname>SSSD</productname> <orgname>Le projet SSSD - http://"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "pam_sss"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "pam_sss"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "PAM module for SSSD"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Module PAM pour SSSD"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<command>pam_sss.so</command> <arg choice='opt'> <replaceable>quiet</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"replaceable> </arg> <arg choice='opt'> <replaceable>forward_pass</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"replaceable> </arg> <arg choice='opt'> <replaceable>use_first_pass</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"replaceable> </arg> <arg choice='opt'> <replaceable>use_authtok</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"replaceable> </arg> <arg choice='opt'> <replaceable>retry=N</replaceable> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>pam_sss.so</command> is the PAM interface to the System Security "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Services daemon (SSSD). Errors and results are logged through "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<command>syslog(3)</command> with the LOG_AUTHPRIV facility."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>pam_sss.so</command> est l'interface PAM pour le démon des services "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de sécurité système (SSSD). Les erreurs et résultats sont journalisés par "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>syslog(3)</command> avec l'argument LOG_AUTHPRIV."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>quiet</option>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "<option>quiet</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Suppress log messages for unknown users."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Supprimer les messages de journal pour les utilisateurs inconnus."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>forward_pass</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>forward_pass</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If <option>forward_pass</option> is set the entered password is put on the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"stack for other PAM modules to use."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si <option>forward_pass</option> est défini, le mot de passe saisi est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"inséré en mémoire pour les autres modules PAM utilisés."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>use_first_pass</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>use_first_pass</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The argument use_first_pass forces the module to use a previous stacked "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"modules password and will never prompt the user - if no password is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"available or the password is not appropriate, the user will be denied access."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'argument use_first_pass force le module à utliser un module de mot de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"passe déjà en mémoire et n'en fera jamais la demande à l'utilisateur. Si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"aucun mot de passe n'est disponible ou que celui-ci n'est pas approprié, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur verra son accès refusé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>use_authtok</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>use_authtok</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When password changing enforce the module to set the new password to the one "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"provided by a previously stacked password module."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsque le changement de mot de passe force le module à modifier le mot de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"passe par celui fourni par un module de mot de passe déjà chargé en mémoire."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>retry=N</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>retry=N</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If specified the user is asked another N times for a password if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication fails. Default is 0."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Si définit, on demande le mot de passe à l'utilisateur encore N fois si "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"l'authentification échoue. Par défaut : 0."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that this option might not work as expected if the application "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"calling PAM handles the user dialog on its own. A typical example is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sshd</command> with <option>PasswordAuthentication</option>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Veuillez noter que cette option peut ne pas fonctionner comme attendu si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'application qui appelle PAM gère lui-même les dialogues avec "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur. Un exemple typique est <command>sshd</command> avec "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>PasswordAuthentication</option>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "MODULE TYPES PROVIDED"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "TYPES DE MODULES FOURNIS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"All module types (<option>account</option>, <option>auth</option>, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>password</option> and <option>session</option>) are provided."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Tous les types de module (<option>account</option>, <option>auth</option>, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>password</option> et <option>session</option>) sont fournis."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "FICHIERS"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If a password reset by root fails, because the corresponding SSSD provider "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"does not support password resets, an individual message can be displayed. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This message can e.g. contain instructions about how to reset a password."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si une réinitialisation par root d'un mot de passe échoue parce que le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur SSSD correspondant ne prend pas en charge la réinitialisation de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mot de passe, un message spécifique peut être affiché. Ce message peut, par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"exemple, contenir les instructions permettant la réinitialisation."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The message is read from the file <filename>pam_sss_pw_reset_message.LOC</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filename> where LOC stands for a locale string returned by <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>setlocale</refentrytitle><manvolnum>3</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry>. If there is no matching file the content of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<filename>pam_sss_pw_reset_message.txt</filename> is displayed. Root must be "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the owner of the files and only root may have read and write permissions "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"while all other users must have only read permissions."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le message est lu depuis le fichier <filename>pam_sss_pw_reset_message.LOC</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"filename> où LOC représente une chaîne de paramètres régionaux retournée par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>setlocale</refentrytitle> <manvolnum>3</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>. Si il n'y a aucun fichier correspondant, le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"contenu de <filename>pam_sss_pw_reset_message.txt</filename> est affiché. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'utilisateur root doit être le propriétaire des fichiers et seul root peut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"avoir les autorisations en lecture et en écriture alors que tous les autres "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisateurs doivent avoir les autorisations en lecture seule."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"These files are searched in the directory <filename>/etc/sssd/customize/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"DOMAIN_NAME/</filename>. If no matching file is present a generic message is "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ces fichiers sont recherchés dans le dossier <filename>/etc/sssd/customize/"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"NOM_DE_DOMAINE/</filename>. Si aucun fichier correspondant n'est présent, un "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"message spécifique est affiché."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd_krb5_locator_plugin.8.xml:10 sssd_krb5_locator_plugin.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sssd_krb5_locator_plugin"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sssd_krb5_locator_plugin"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The Kerberos locator plugin <command>sssd_krb5_locator_plugin</command> is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"used by the Kerberos provider of <citerefentry> <refentrytitle>sssd</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>8</manvolnum> </citerefentry> to tell the Kerberos "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"libraries what Realm and which KDC to use. Typically this is done in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> which is always read by the Kerberos libraries. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"To simplify the configuration the Realm and the KDC can be defined in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> as described in <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le greffon de localisation Kerberos <command>sssd_krb5_locator_plugin</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"command> est utilisé par le fournisseur Kerberos de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> pour indiquer aux bibliothèques Kerberos quel domaine et quel "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"KDC à utiliser. En général, cela se fait en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>krb5.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> qui est toujours lu par les bibliothèques de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Kerberos. Pour simplifier la configuration, le Domaine et le KDC peuvent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"être définis dans <citerefentry><refentrytitle>sssd.conf</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> comme indiqué dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-krb5.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"</citerefentry> puts the Realm and the name or IP address of the KDC into "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the environment variables SSSD_KRB5_REALM and SSSD_KRB5_KDC respectively. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"When <command>sssd_krb5_locator_plugin</command> is called by the kerberos "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"libraries it reads and evaluates these variables and returns them to the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>SSSD</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> met le nom de domaine et le nom ou adresse IP du KDC dans les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"variables d'environnement SSSD_KRB5_REALM et SSSD_KRB5_KDC respectivement. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsque <command>sssd_krb5_locator_plugin</command> est appelé par les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"bibliothèques de kerberos, il lit et évalue ces variables et les transmet "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"aux bibliothèques."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Not all Kerberos implementations support the use of plugins. If "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sssd_krb5_locator_plugin</command> is not available on your system "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"you have to edit /etc/krb5.conf to reflect your Kerberos setup."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Toutes les versions de Kerberos ne prennent en charge l'utilisation de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"greffons. Si <command>sssd_krb5_locator_plugin</command> n'est pas présent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sur votre système, il faut modifier /etc/krb5.conf pour s'adapter à la "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"configuration de Kerberos."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If the environment variable SSSD_KRB5_LOCATOR_DEBUG is set to any value "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"debug messages will be sent to stderr."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si la variable d'environnement SSSD_KRB5_LOCATOR_DEBUG a une valeur "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"quelconque, des messages de débogage seront envoyés sur la sortie standard "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sssd-simple.5.xml:10 sssd-simple.5.xml:16
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sssd-simple"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sssd-simple"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "the configuration file for SSSD's 'simple' access-control provider"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le fichier de configuration pour le fournisseur de contrôle d'accès « "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"simple » de SSSD."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This manual page describes the configuration of the simple access-control "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"provider for <citerefentry> <refentrytitle>sssd</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>8</manvolnum> </citerefentry>. For a detailed syntax reference, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refer to the <quote>FILE FORMAT</quote> section of the <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> manual page."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette page de manuel décrit la configuration du fournisseur de contrôle "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'accès simple de <citerefentry> <refentrytitle>sssd</refentrytitle> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<manvolnum>8</manvolnum> </citerefentry>. Pour plus de détails sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"syntaxe, cf. la section <quote>FORMAT DE FICHIER</quote> de la page de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manuel <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The simple access provider grants or denies access based on an access or "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"deny list of user or group names. The following rules apply:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur d'accès simple autorise les accès à partir de listes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'autorisation ou de refus de noms d'utilisateurs ou de groupes. Les règles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"suivantes s'appliquent :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "If all lists are empty, access is granted"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Si toutes les listes sont vides, l'accès est autorisé"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If any list is provided, the order of evaluation is allow,deny. This means "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"that any matching deny rule will supersede any matched allow rule."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si une liste est fournie, quelle qu'elle soit, l'ordre d'évaluation est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"allow,deny. Autrement dit une règle de refus écrasera une règle "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"d'autorisation."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If either or both \"allow\" lists are provided, all users are denied unless "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"they appear in the list."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si la ou les listes fournies sont seulement de type « allow », tous les "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"utilisateurs sont refusés à moins qu'ils ne soient dans la liste."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><itemizedlist><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If only \"deny\" lists are provided, all users are granted access unless "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"they appear in the list."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si seulement les listes « deny » sont utilisées, tous les utlisateurs sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"autorisés à moins qu'ils ne soient dans la liste."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "simple_allow_users (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "simple_allow_users (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Comma separated list of users who are allowed to log in."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparée par des virgules d'utilisateurs autorisés à se connecter."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "simple_deny_users (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "simple_deny_users (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Comma separated list of users who are explicitly denied access."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparée par des virgules d'utilisateurs dont l'accès sera refusé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "simple_allow_groups (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "simple_allow_groups (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Comma separated list of groups that are allowed to log in. This applies only "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to groups within this SSSD domain. Local groups are not evaluated."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparée par des virgules de groupes autorisés à se connecter. Ceci ne "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"s'applique qu'à des groupes dans un domaine SSSD. Les groupes locaux ne sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas pris en compte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "simple_deny_groups (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "simple_deny_groups (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Comma separated list of groups that are explicitly denied access. This "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"applies only to groups within this SSSD domain. Local groups are not "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Liste séparée par des virgules de groupes dont l'accès sera refusé. Ceci ne "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"s'applique qu'à des groupes dans un domaine SSSD. Les groupes locaux ne sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas pris en compte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-simple.5.xml:70 sssd-ipa.5.xml:71 sssd-ad.5.xml:84
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Refer to the section <quote>DOMAIN SECTIONS</quote> of the <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> manual page for details on the configuration of an SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Se référer à la section <quote>SECTIONS DE DOMAINE</quote> de la page de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manuel <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry> pour les détails sur la configuration d'un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine SSSD. <placeholder type=\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Specifying no values for any of the lists is equivalent to skipping it "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"entirely. Beware of this while generating parameters for the simple provider "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"using automated scripts."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Ne spécifier aucune valeur pour aucune des listes revient à l'ignorer "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"complètement. Se méfier de ceci lors de la création des paramètres pour le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"fournisseur simple à l'aide automatique de scripts."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that it is an configuration error if both, simple_allow_users "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"and simple_deny_users, are defined."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Veuillez noter que la configuration simultanée de simple_allow_users et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"simple_deny_users est une erreur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following example assumes that SSSD is correctly configured and example."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This examples shows only the simple access provider-specific options."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant suppose que SSSD est correctement configuré et que example."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"com est un des domaines dans la section <replaceable>[sssd]</replaceable>. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ces exemples montrent seulement les options spécifiques du fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'accès simple."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" access_provider = simple\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" simple_allow_users = user1, user2\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" access_provider = simple\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" simple_allow_users = user1, user2\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sssd-ipa"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sssd-ipa"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This manual page describes the configuration of the IPA provider for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Cette page de manuel décrit la configuration du fournisseur IPA pour "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"</citerefentry>. Pour une référence détaillée sur la syntaxe, veuillez "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"regarder la section <quote>FORMAT DE FICHIER</quote> de la page de manuel "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"manvolnum> </citerefentry>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The IPA provider is a back end used to connect to an IPA server. (Refer to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the freeipa.org web site for information about IPA servers.) This provider "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"requires that the machine be joined to the IPA domain; configuration is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"almost entirely self-discovered and obtained directly from the server."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur IPA est le moteur pour se connecter à un serveur IPA. (Cf. le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"site freeipa.org pour plus d'informations sur les serveurs IPA). Ce "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"fournisseur nécessite que la machine soit joignable pour le domaine IPA ; la "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"configuration est presque entièrement obtenue et auto-découverte à partir du "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The IPA provider accepts the same options used by the <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"provider with some exceptions described below."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur IPA accepte les mêmes options utilisées par le fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identité <citerefentry><refentrytitle>sssd-ldap</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> et le fournisseur d'authentification "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> avec les quelques exceptions décrites ci-dessous."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"However, it is neither necessary nor recommended to set these options. IPA "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"provider can also be used as an access and chpass provider. As an access "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"provider it uses HBAC (host-based access control) rules. Please refer to "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"freeipa.org for more information about HBAC. No configuration of access "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"provider is required on the client side."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Toutefois, il n'est ni nécessaire ni recommandé de définir ces options. Le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur IPA peut également servir comme fournisseur d'accès et chpass. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"En tant que fournisseur d'accès, il utilise des règles HBAC (host-based "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"access control). Veuillez consulter freeipa.org pour plus d'informations sur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"HBAC. Aucune configuration de fournisseur d'accès n'est requise côté client."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The IPA provider will use the PAC responder if the Kerberos tickets of users "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"from trusted realms contain a PAC. To make configuration easier the PAC "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"responder is started automatically if the IPA ID provider is configured."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le fournisseur IPA utilisera le répondeur PAC si les tickets Kerberos "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"d'utilisateurs de domaines Kerberos approuvés contiennent un PAC. Pour "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"rendre la configuration plus facile, le répondeur PAC est démarré "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"automatiquement si le fournisseur d'ID de IPA est configuré."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipa_domain (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ipa_domain (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specifies the name of the IPA domain. This is optional. If not provided, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the configuration domain name is used."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Définit le nom du domaine IPA. Facultatif, s'il n'est pas fourni, le nom de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine de la configuration est utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "ipa_server, ipa_backup_server (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_server, ipa_backup_server (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The comma-separated list of IP addresses or hostnames of the IPA servers to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"which SSSD should connect in the order of preference. For more information "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"on failover and server redundancy, see the <quote>FAILOVER</quote> section. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This is optional if autodiscovery is enabled. For more information on "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"service discovery, refer to the <quote>SERVICE DISCOVERY</quote> section."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La liste par ordre de préférence séparée par des virgules des adresses IP ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des noms de systèmes des serveurs IPA auxquels SSSD doit se connecter . Pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"plus d'informations sur la redondance de serveurs et le basculement, "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"consulter la section de <quote>BASCULEMENT</quote>. Ceci est facultatif si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la découverte automatique est activée. Pour plus d'informations sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"découverte de services, se reporter à la section de <quote>DÉCOUVERTE DE "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SERVICE</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipa_hostname (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ipa_hostname (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Optional. May be set on machines where the hostname(5) does not reflect the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"fully qualified name used in the IPA domain to identify this host."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Facultatif. Peut être défini pour des machines dont le hostname(5) ne "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"reflète pas le nom de domaine pleinement qualifié du domaine IPA pour "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"identifier l'hôte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_update (boolean)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_update (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Optional. This option tells SSSD to automatically update the DNS server "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"built into FreeIPA v2 with the IP address of this client. The update is "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"secured using GSS-TSIG. The IP address of the IPA LDAP connection is used "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"for the updates, if it is not otherwise specified by using the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<quote>dyndns_iface</quote> option."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Facultatif. Cette option indique à SSSD de mettre à jour automatiquement le "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"serveur DNS intégré à IPA v2 avec l'adresse IP de ce client. La mise à jour "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"est sécurisée avec GSS-TSIG. L'adresse IP de la connexion LDAP IPA est "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"utilisée pour les mises à jour, à moins qu'elle ne soit spécifiée par "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"l'utilisation de l'option <quote>dyndns_iface</quote>."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"NOTE: On older systems (such as RHEL 5), for this behavior to work reliably, "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"the default Kerberos realm must be set properly in /etc/krb5.conf"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"NOTE : Sur les systèmes plus anciens (tels que RHEL 5), afin que ce "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"comportement fonctionne de façon fiable, le domaine Kerberos par défaut doit "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"être défini correctement dans /etc/krb5.conf"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_update</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> option, users should migrate to using <emphasis>dyndns_update</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> in their config file."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"REMARQUE : Bien qu'il soit toujours possible d'utiliser l'ancienne option "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>ipa_dyndns_update</emphasis>, les utilisateurs doivent maintenant "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"utiliser <emphasis>dyndns_update</emphasis> dans leur fichier de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_ttl (integer)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_ttl (entier)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The TTL to apply to the client DNS record when updating it. If "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"dyndns_update is false this has no effect. This will override the TTL "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"serverside if set by an administrator."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le TTL à appliquer à l'enregistrement du client DNS lors de sa mise à jour. "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Si dyndns_update a la valeur false, cela n'a aucun effet. Cela remplacera le "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"TTL côté serveur s'il est défini par un administrateur."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_ttl</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> option, users should migrate to using <emphasis>dyndns_ttl</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> in their config file."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"REMARQUE : Bien qu'il soit toujours possible d'utiliser l'ancienne option "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>ipa_dyndns_ttl</emphasis>, les utilisateurs doivent maintenant "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"utiliser <emphasis>dyndns_ttl</emphasis> dans leur fichier de configuration."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Default: 1200 (seconds)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Par défaut : 1200 (secondes)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_iface (string)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_iface (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Optional. Applicable only when dyndns_update is true. Choose the interface "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"whose IP address should be used for dynamic DNS updates."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Facultatif. Applicable seulement quand dyndns_update est vrai. Choisit "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'interface dont l'adresse IP sera utilisée pour les mises à jour dynamiques "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE: While it is still possible to use the old <emphasis>ipa_dyndns_iface</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> option, users should migrate to using <emphasis>dyndns_iface</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"emphasis> in their config file."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"REMARQUE : Bien qu'il soit toujours possible d'utiliser l'ancienne option "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>ipa_dyndns_iface</emphasis>, les utilisateurs doivent maintenant "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"utiliser <emphasis>dyndns_iface</emphasis> dans leur fichier de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"configuration."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: Use the IP address of the IPA LDAP connection"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : utilise l'adresse IP de la connexion IPA LDAP"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "ipa_enable_dns_sites (boolean)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "ipa_enable_dns_sites (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Enables DNS sites - location based service discovery."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Active les sites DNS - découverte de service basée sur l'emplacement"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"If true and service discovery (see Service Discovery paragraph at the bottom "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"of the man page) is enabled, then the SSSD will first attempt location "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"based discovery using a query that contains \"_location.hostname.example.com"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"\" and then fall back to traditional SRV discovery. If the location based "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"discovery succeeds, the IPA servers located with the location based "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"discovery are treated as primary servers and the IPA servers located using "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"the traditional SRV discovery are used as back up servers"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Si true et que la découverte de service (cf. le paragraphe Découverte de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"service au bas de la page de manuel) est activée, alors SSSD tentera d'abord "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"une découverte basée sur l'emplacement en utilisant une requête contenant "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"« _location.hostname.example.com », puis reviendra à une découverte SRV "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"traditionnelle. Si la découverte basée sur l'emplacement réussit, les "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"serveurs IPA ainsi découverts sont traités comme serveurs primaires, et les "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"serveurs identifiés via la découverte basée sur les enregistrements SRV "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"seront utilisés comme serveurs de repli"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_refresh_interval (integer)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_refresh_interval (entier)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"How often should the back end perform periodic DNS update in addition to the "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"automatic update performed when the back end goes online. This option is "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"optional and applicable only when dyndns_update is true."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Fréquence de mise à jour des DNS par le moteur en plus des mises à jour "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"automatiques effectuées lorsque le moteur arrive en ligne. Cette option est "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"facultative, et n'est applicable que lorsque l'option dyndns_update est "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"configurée à true."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_update_ptr (bool)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_update_ptr (booléen)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Whether the PTR record should also be explicitly updated when updating the "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"client's DNS records. Applicable only when dyndns_update is true."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Selon que l'enregistrement PTR doit être explicitement mis à jour lors de la "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"mise à jour des enregistrements DNS du client. Applicable uniquement lorsque "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"l'option dyndns_update est configurée à true."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"This option should be False in most IPA deployments as the IPA server "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"generates the PTR records automatically when forward records are changed."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Cette option doit être positionnée à False pour la plupart des déploiements "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"IPA, puisque le serveur IPA crée les enregistrements PTR automatiquement "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"quand les enregistrements directs sont modifiés."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: False (disabled)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Par défaut : False (désactivé)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "dyndns_force_tcp (bool)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "dyndns_force_tcp (booléen)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Whether the nsupdate utility should default to using TCP for communicating "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"with the DNS server."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Selon que l'utilitaire nsupdate doit utiliser TCP par défaut pour la "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"communication avec le serveur DNS."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: False (let nsupdate choose the protocol)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Par défaut : False (laisser nsupdate choisir le protocole)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "ipa_hbac_search_base (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ipa_hbac_search_base (chaîne)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Optional. Use the given string as search base for HBAC related objects."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Facultatif. Utilise la chaîne donnée comme base de recherche pour les objets "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"HBAC associés."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: Use base DN"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Par défaut : utilise le DN de base"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "ipa_host_search_base (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ipa_host_search_base (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Optional. Use the given string as search base for host objects."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Facultatif. Utiliser la chaîne donnée comme base de recherche pour héberger "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des objets."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ipa.5.xml:280 sssd-ipa.5.xml:304 sssd-ipa.5.xml:323 sssd-ipa.5.xml:342
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"See <quote>ldap_search_base</quote> for information about configuring "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"multiple search bases."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cf. <quote>ldap_search_base</quote> pour plus d'informations sur la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configuration des bases de recherche multiples."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"If filter is given in any of search bases and "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"<emphasis>ipa_hbac_support_srchost</emphasis> is set to False, the filter "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"will be ignored."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si le filtre est donné dans l'une des bases de recherche et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>ipa_hbac_support_srchost</emphasis> a la valeur False, le filtre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sera ignoré."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#: sssd-ipa.5.xml:290 sssd-ipa.5.xml:309 include/ldap_search_bases.xml:23
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#: include/ldap_search_bases_experimental.xml:23
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "Default: the value of <emphasis>ldap_search_base</emphasis>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : la valeur de <emphasis>ldap_search_base</emphasis>"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_search_base (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Optional. Use the given string as search base for SELinux user maps."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Facultatif. Utiliser la chaîne donnée comme base de recherche pour les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"mappages utilisateur SELinux."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ipa_subdomains_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_subdomains_search_base (string)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Optional. Use the given string as search base for trusted domains."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Facultatif. Utiliser la chaîne donnée comme base de recherche pour les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaines approuvés."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Default: the value of <emphasis>cn=trusts,%basedn</emphasis>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : la valeur de <emphasis>cn=trusts,%basedn</emphasis>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "ipa_master_domain_search_base (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_master_domain_search_base (string)"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Optional. Use the given string as search base for master domain object."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Facultatif. Utiliser la chaîne donnée comme base de recherche objet de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine maître."
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallaghermsgid "Default: the value of <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : la valeur de <emphasis>cn=ad,cn=etc,%basedn</emphasis>"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_validate (boolean)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_validate (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Verify with the help of krb5_keytab that the TGT obtained has not been "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Vérifie avec l'aide de krb5_keytab que le TGT obtenu n'est pas usurpé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Note that this default differs from the traditional Kerberos provider back "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que cette valeur par défaut diffère du moteur de traitement Kerberos "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The name of the Kerberos realm. This is optional and defaults to the value "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of <quote>ipa_domain</quote>."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le nom du domaine Kerberos. Facultatif, prend comme valeur par défaut la "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"valeur de <quote>ipa_domain</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The name of the Kerberos realm has a special meaning in IPA - it is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"converted into the base DN to use for performing LDAP operations."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le nom du domaine Kerberos a une signification spéciale dans IPA. Il est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"convertit en DN de base pour effectuer les opérations LDAP."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"Specifies if the host and user principal should be canonicalized when "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"connecting to IPA LDAP and also for AS requests. This feature is available "
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher"with MIT Kerberos >= 1.7"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie si l'hôte et l'utilisateur principal doivent être rendus canoniques "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"lors des connexions au serveur LDAP de IPA, mais aussi pour les requêtes AS. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette fonctionnalité est disponible avec MIT Kerberos > = 1.7"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipa_hbac_refresh (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ipa_hbac_refresh (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The amount of time between lookups of the HBAC rules against the IPA server. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This will reduce the latency and load on the IPA server if there are many "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"access-control requests made in a short period."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le temps entre deux recherches de règles HBAC sur un serveur IPA. Cela "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"permet de réduire le temps de latence et la charge du serveur IPA si il y a "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"beaucoup de requêtes de contrôle d'accès sur une courte période."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: 5 (seconds)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : 5 (secondes)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "ipa_hbac_selinux (integer)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "ipa_hbac_selinux (entier)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The amount of time between lookups of the SELinux maps against the IPA "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"server. This will reduce the latency and load on the IPA server if there are "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"many user login requests made in a short period."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le temps entre les recherches de cartes SELinux sur un serveur IPA. Cela "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"réduit le temps de latence et la charge du serveur IPA s'il y a beaucoup de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"requêtes de connexions utilisateurs sur une courte période."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "ipa_hbac_treat_deny_as (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "ipa_hbac_treat_deny_as (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option specifies how to treat the deprecated DENY-type HBAC rules. As "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of FreeIPA v2.1, DENY rules are no longer supported on the server. All users "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"of FreeIPA will need to migrate their rules to use only the ALLOW rules. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"client will support two modes of operation during this transition period:"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Cette option indique comment utiliser les règles HBAC obsolètes de type "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"DENY. À partir de FreeIPA v2.1, les règles DENY ne sont plus prises en "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"charge sur le serveur. Tous les utilisateurs de FreeIPA doivent modifier "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"leurs règles pour utiliser uniquement les règles ALLOW. Le client prendra en "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"charge les deux modes opératoires pendant cette période de transition :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>DENY_ALL</emphasis>: If any HBAC DENY rules are detected, all "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"users will be denied access."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>DENY_ALL</emphasis> : si une règle DENY HBAC est détectée, aucun "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"utilisateur ne pourra se connecter."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>IGNORE</emphasis>: SSSD will ignore any DENY rules. Be very "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"careful with this option, as it may result in opening unintended access."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>IGNORE</emphasis> : SSSD ignorera toutes les règles DENY. "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Attention avec cette option, elle peut ouvrir des accès imprévus."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: DENY_ALL"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : DENY_ALL"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_hbac_support_srchost (boolean)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ipa_hbac_support_srchost (booléen)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"If this is set to false, then srchost as given to SSSD by PAM will be "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Si false, srchost tel qu'il figure à SSSD par PAM sera ignoré."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"Note that if set to <emphasis>False</emphasis>, this option casuses filters "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"given in <emphasis>ipa_host_search_base</emphasis> to be ignored;"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que si la valeur <emphasis>False</emphasis>, cette option implique que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les filtres donnés en <emphasis>ipa_host_search_base</emphasis> seront "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozekmsgid "ipa_server_mode (boolean)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "ipa_server_mode (booléen)"
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| msgid "This options should only be set by the IPA installer."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "This option should only be set by the IPA installer."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Cette option ne doit être utilisée que par le programme d'installation IPA."
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"The option denotes that the SSSD is running on IPA server and should perform "
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek"lookups of users and groups from trusted domains differently."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Cette option indique que SSSD fonctionne sur un serveur IPA et doit "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"effectuer différemment ses recherches d'utilisateurs et groupes depuis les "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"domaines approuvés."
e0882baf3b0174cd5c34d593442f66bf6ff75261Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallaghermsgid "ipa_automount_location (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_automount_location (string)"
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallaghermsgid "The automounter location this IPA client will be using"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'emplacement à automonter qu'utilisera ce client IPA"
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallaghermsgid "Default: The location named \"default\""
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : Le lieu nommé « default »"
292cbb3fbe41bb7ee09b67c3ec59ab7c7ba5220eStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_netgroup_member_of (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ipa_netgroup_member_of (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "The LDAP attribute that lists netgroup's memberships."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui répertorie les appartenances aux netgroups."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_netgroup_member_user (string)"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "ipa_netgroup_member_user (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"The LDAP attribute that lists system users and groups that are direct "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"members of the netgroup."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui répertorie les utilisateurs et les groupes qui sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"membres directs du netgroup."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: memberUser"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : memberUser"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_netgroup_member_host (string)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "ipa_netgroup_member_host (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"The LDAP attribute that lists hosts and host groups that are direct members "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"of the netgroup."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"L'attribut LDAP qui répertorie les systèmes et les groupes de systèmes qui "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"sont membres directs du netgroup."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: memberHost"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : memberHost"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_netgroup_member_ext_host (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_netgroup_member_ext_host (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"The LDAP attribute that lists FQDNs of hosts and host groups that are "
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"members of the netgroup."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui répertorie les noms de domaines complets des systèmes et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des groupes de systèmes qui appartiennent au groupe réseau."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: externalHost"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : externalHost"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_netgroup_domain (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_netgroup_domain (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "The LDAP attribute that contains NIS domain name of the netgroup."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient le nom de domaine NIS du netgroup."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: nisDomainName"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : nisDomainName"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_host_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_host_object_class (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "The object class of a host entry in LDAP."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "La classe de l'objet d'une entrée d'hôte dans l'annuaire LDAP."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: ipaHost"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipaHost"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "ipa_host_fqdn (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_host_fqdn (chaîne)"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "The LDAP attribute that contains FQDN of the host."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient le nom de domaine complet du système."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Default: fqdn"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : nom de domaine complet"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_object_class (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_object_class (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_name (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_name (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains the name of SELinux usermap."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient le nom de SELinux usermap."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_member_user (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_member_user (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains all users / groups this rule match against."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient tous les utilisateurs / groupes correspondant à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cette règle."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_member_host (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_member_host (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains all hosts / hostgroups this rule match "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient tous les hôtes / hostgroups correspondant à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cette règle."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_see_also (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_see_also (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains DN of HBAC rule which can be used for "
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"matching instead of memberUser and memberHost"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient le DN de la règle de HBAC qui peut être utilisé "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour la correspondance au lieu de memberUser et memberHost"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: seeAlso"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : seeAlso"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_selinux_user (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_selinux_user (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains SELinux user string itself."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient la chaîne utilisateur SELinux."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipaSELinuxUser"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipaSELinuxUser"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_enabled (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_enabled (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallagher"The LDAP attribute that contains whether or not is user map enabled for "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient le fait que la carte utilisateur est activée "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour utilisation ou non."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipaEnabledFlag"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipaEnabledFlag"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_user_category (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_user_category (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains user category such as 'all'."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'attribut LDAP qui contient la catégorie utilisateur tels que « all »."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: userCategory"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : userCategory"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_host_category (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_host_category (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains host category such as 'all'."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient la catégorie hôte tels que « all »."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: hostCategory"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : hostCategory"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_selinux_usermap_uuid (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_selinux_usermap_uuid (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains unique ID of the user map."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient l'ID unique de la carte de l'utilisateur."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipaUniqueID"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipaUniqueID"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "ipa_host_ssh_public_key (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ipa_host_ssh_public_key (string)"
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "The LDAP attribute that contains the host's SSH public keys."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'attribut LDAP qui contient les clés publiques SSH de l'hôte."
056302a92862fda16351d7192600746746f38e5dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
056302a92862fda16351d7192600746746f38e5dStephen Gallaghermsgid "Default: ipaSshPubKey"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : ipaSshPubKey"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><title>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "SUBDOMAINS PROVIDER"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "FOURNISSEURS DE SOUS-DOMAINES"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The IPA subdomains provider behaves slightly differently if it is configured "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"explicitly or implicitly."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le fournisseur de sous-domaines IPA se comporte un peu différemment s'il est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"configuré explicitement ou implicitement."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"If the option 'subdomains_provider = ipa' is found in the domain section of "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sssd.conf, the IPA subdomains provider is configured explicitly, and all "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"subdomain requests are sent to the IPA server if necessary."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si l'option « subdomains_provider = ipa » se trouve dans la section domaine "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de sssd.conf, le fournisseur de sous-domaines d'IPA est configuré "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"explicitement, et toutes les demandes de sous-domaines sont envoyées au "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"serveur IPA si nécessaire."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"If the option 'subdomains_provider' is not set in the domain section of sssd."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"conf but there is the option 'id_provider = ipa', the IPA subdomains "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"provider is configured implicitly. In this case, if a subdomain request "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"fails and indicates that the server does not support subdomains, i.e. is not "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configured for trusts, the IPA subdomains provider is disabled. After an "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"hour or after the IPA provider goes online, the subdomains provider is "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"enabled again."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si l'option « subdomains_provider » n'est pas définie dans la section "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"domaine de sssd.conf, mais qu'il y a l'option « id_provider = ipa », le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"fournisseur de sous-domaines IPA est configuré implicitement. Dans ce cas, "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"si une demande de sous-domaine échoue et indique que le serveur ne prend pas "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"en charge les sous-domaines, c'est-à-dire qu'il n'est pas configuré pour les "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"relations d'approbations, le fournisseur de sous-domaines IPA est désactivé. "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Après une heure ou après que le fournisseur IPA arrive en ligne, le "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"fournisseur de sous-domaines est à nouveau activé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following example assumes that SSSD is correctly configured and example."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This examples shows only the ipa provider-specific options."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant suppose que SSSD est correctement configuré et example.com "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"est un des domaines de la section <replaceable>[sssd]</replaceable>. Ces "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"exemples montrent seulement les options spécifiques au fournisseur IPA."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" id_provider = ipa\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" ipa_hostname = myhost.example.com\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" id_provider = ipa\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" ipa_hostname = myhost.example.com\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refnamediv><refname>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "sssd-ad"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sssd-ad"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"This manual page describes the configuration of the AD provider for "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"</citerefentry>. For a detailed syntax reference, refer to the <quote>FILE "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"FORMAT</quote> section of the <citerefentry> <refentrytitle>sssd.conf</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette page de manuel décrit la configuration du fournisseur AD pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>sssd</refentrytitle> <manvolnum>8</manvolnum> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"</citerefentry>. Pour une référence détaillée sur la syntaxe, cf. la section "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>FORMAT DE FICHIER</quote> de la page de manuel <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"The AD provider is a back end used to connect to an Active Directory server. "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"This provider requires that the machine be joined to the AD domain and a "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"keytab is available."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur AD est un moteur utilisé pour se connecter à un serveur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Active Directory. Ce fournisseur exige que la machine soit jointe au domaine "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"AD et qu'un fichier keytab soit disponible."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"The AD provider supports connecting to Active Directory 2008 R2 or later. "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Earlier versions may work, but are unsupported."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur AD prend en charge la connexion à Active Directory 2008 R2 ou "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ultérieures. Les versions antérieures peuvent fonctionner, mais ne sont pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"supportées."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"The AD provider is able to provide identity information and authentication "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"for entities from trusted domains as well. Currently only trusted domains in "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"the same forest are recognized."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"The AD provider accepts the same options used by the <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry> identity provider and the <citerefentry> <refentrytitle>sssd-"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"krb5</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> authentication "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"provider with some exceptions described below."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le fournisseur AD accepte les mêmes options utilisées par le fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identité <citerefentry><refentrytitle>sssd-ldap</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> et le fournisseur d'authentification "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-krb5</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> avec les quelques exceptions décrites ci-dessous."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"However, it is neither necessary nor recommended to set these options. The "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"AD provider can also be used as an access and chpass provider. No "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"configuration of the access provider is required on the client side."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Toutefois, il n'est ni nécessaire ni recommandé de définir ces options. Le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur AD peut également être utilisé comme fournisseur d'accès et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fournisseur chpass. Aucune configuration du fournisseur d'accès n'est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"requise côté client."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><programlisting>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"ldap_id_mapping = False\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_id_mapping = False\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"By default, the AD provider will map UID and GID values from the objectSID "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"parameter in Active Directory. For details on this, see the <quote>ID "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"MAPPING</quote> section below. If you want to disable ID mapping and instead "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"rely on POSIX attributes defined in Active Directory, you should set "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<placeholder type=\"programlisting\" id=\"0\"/> Users, groups and other "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"entities served by SSSD are always treated as case-insensitive in the AD "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"provider for compatibility with Active Directory's LDAP implementation."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Dans son comportement par défaut, le fournisseur AD associera les valeurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"UID et GID à partir du paramètre objectSID dans Active Directory. Pour plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'informations sur le sujet, voir la section <quote>CORRESPONDANCES "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"D'IDENTIFIANTS</quote> ci-dessous. Si vous souhaitez désactiver la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"correspondance d'ID et vous appuyer plutôt sur les attributs POSIX définis "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dans Active Directory, il faut définir <placeholder type=\"programlisting\" "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"id=\"0\"/> Les utilisateurs, les groupes et autres objets servis par SSSD "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"sont toujours traités comme étant insensibles à la casse dans le fournisseur "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"AD de manière à rester compatible avec la mise en œuvre de LDAP dans Active "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ad_domain (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ad_domain (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Specifies the name of the Active Directory domain. This is optional. If not "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"provided, the configuration domain name is used."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Spécifie le nom du domaine Active Directory. Ceci est facultatif. S'il "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"n'est pas fourni, le nom de domaine de la configuration est utilisé."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"For proper operation, this option should be specified as the lower-case "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"version of the long version of the Active Directory domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour un fonctionnement correct, cette option doit être le nom long du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine Active Directory, spécifié en minuscules."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"The short domain name (also known as the NetBIOS or the flat name) is "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"autodetected by the SSSD."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Le nom de domaine court (aussi connu comme le nom NetBIOS ou nom plat) est "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"autodétecté par SSSD."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "ad_server, ad_backup_server (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ad_server, ad_backup_server (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"The comma-separated list of hostnames of the AD servers to which SSSD should "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"connect in order of preference. For more information on failover and server "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"redundancy, see the <quote>FAILOVER</quote> section. This is optional if "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"autodiscovery is enabled. For more information on service discovery, refer "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"to the <quote>SERVICE DISCOVERY</quote> section."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"La liste par ordre de préférence séparée par des virgules des noms de "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"systèmes des serveurs AD auquel SSSD doit se connecter. Pour plus "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"d'informations sur la redondance de serveurs et le basculement, consulter la "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"section <quote>BASCULEMENT</quote>. Ceci est optionnel si la découverte "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"automatique est activée. Pour plus d'informations sur la découverte de "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"services, se reporter à la section de <quote>DÉCOUVERTE DE SERVICE</quote>."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "ad_hostname (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ad_hostname (string)"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"Optional. May be set on machines where the hostname(5) does not reflect the "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"fully qualified name used in the Active Directory domain to identify this "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Facultatif. Peut être défini sur les machines où le hostname(5) ne reflète "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas le nom pleinenent qualifié utilisé dans le domaine Active Directory pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"identifier ce système."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"This field is used to determine the host principal in use in the keytab. It "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"must match the hostname for which the keytab was issued."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ce champ est utilisé pour déterminer le principal d'hôte utilisé dans un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fichier keytab. Elle doit correspondre au nom du système pour lequel a été "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"publié un fichier keytab."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "ad_enable_dns_sites (boolean)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "ad_enable_dns_sites (booléen)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"If true and service discovery (see Service Discovery paragraph at the bottom "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"of the man page) is enabled, the SSSD will first attempt to discover the "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Active Directory server to connect to using the Active Directory Site "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Discovery and fall back to the DNS SRV records if no AD site is found. The "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"DNS SRV configuration, including the discovery domain, is used during site "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"discovery as well."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Si configuré à true et que la découverte de service (cf. le paragraphe "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Découverte de service au bas de la page de manuel) est activée, SSSD tentera "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"d'abord de découvrir le serveur Active Directory auquel se connecter en "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"utilisant Active Directory Site Discovery, puis se repliera sur "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"l'utilisation des enregistrements DNS SRV si aucun site AD n'est trouvé. La "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"configuration SRV du DNS, incluant la découverte de domaine, est aussi "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"utilisée pendant la découverte de site."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Optional. This option tells SSSD to automatically update the Active "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Directory DNS server with the IP address of this client. The update is "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"secured using GSS-TSIG. As a consequence, the Active Directory administrator "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"only needs to allow secure updates for the DNS zone. The IP address of the "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"AD LDAP connection is used for the updates, if it is not otherwise specified "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"by using the <quote>dyndns_iface</quote> option."
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"Facultatif. Cette option indique à SSSD de mettre à jour automatiquement le "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"serveur DNS intégré à IPA v2 avec l'adresse IP de ce client. La mise à jour "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"est sécurisée avec GSS-TSIG. Ainsi, l'administrateur Active Directory a "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"uniquement besoin d'activer les mises à jour sécurisées pour la zone DNS. "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"L'adresse IP de la connexion LDAP AD est utilisée pour les mises à jour, à "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"moins qu'elle ne soit spécifiée par l'utilisation de l'option "
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozek"<quote>dyndns_iface</quote>."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: 3600 (seconds)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Par défaut : 3600 (secondes)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgid "Default: Use the IP address of the AD LDAP connection"
0172959f117b545c8a6b1893f5f56818d82dd624Jakub Hrozekmsgstr "Par défaut : utilise l'adresse IP de la connexion LDAP AD"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "krb5_use_enterprise_principal (boolean)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "krb5_use_enterprise_principal (booléen)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Specifies if the user principal should be treated as enterprise principal. "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"See section 5 of RFC 6806 for more details about enterprise principals."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Indique si le principal de l'utilisateur doit être traité comme un principal "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"d'entreprise. Cf. la section 5 de la RFC 6806 pour plus de détails sur les "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"principals d'entreprise."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"The following example assumes that SSSD is correctly configured and example."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"com is one of the domains in the <replaceable>[sssd]</replaceable> section. "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"This example shows only the AD provider-specific options."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant suppose que SSSD est correctement configuré et example.com "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"est un des domaines de la section <replaceable>[sssd]</replaceable>. Ces "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"exemples montrent seulement les options spécifiques au fournisseur AD."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><programlisting>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"id_provider = ad\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"auth_provider = ad\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"access_provider = ad\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"chpass_provider = ad\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"ad_hostname = client.example.com\n"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"ad_domain = example.com\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"id_provider = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"auth_provider = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"access_provider = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"chpass_provider = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ad_hostname = client.example.com\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ad_domain = example.com\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><programlisting>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"access_provider = ldap\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_access_order = expire\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_account_expire_policy = ad\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"access_provider = ldap\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ldap_access_order = expire\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ldap_account_expire_policy = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"The AD access control provider checks if the account is expired. It has the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"same effect as the following configuration of the LDAP provider: "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<placeholder type=\"programlisting\" id=\"0\"/>"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le fournisseur de contrôle d'accès AD vérifie si le compte a expiré. Cela a "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"le même effet que la configuration suivante du fournisseur LDAP : "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<placeholder type=\"programlisting\" id=\"0\"/>"
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"However, unless the <quote>ad</quote> access control provider is explicitly "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"configured, the default access provider is <quote>permit</quote>."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Cependant, à moins que le fournisseur de contrôle d'accès <quote>ad</quote> "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"soit explicitement configué, le fournisseur de contrôle d'accès par défaut "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"est <quote>permit</quote>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refnamediv><refname>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "sssd-sudo"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sssd-sudo"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek#. type: Content of: <reference><refentry><refnamediv><refpurpose>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "Configuring sudo with the SSSD back end"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Configuration de sudo avec le moteur SSSD"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"This manual page describes how to configure <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum> </citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"to work with <citerefentry> <refentrytitle>sssd</refentrytitle> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<manvolnum>8</manvolnum> </citerefentry> and how SSSD caches sudo rules."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette page de manuel décrit comment configurer "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sudo</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> pour travailler avec <citerefentry><refentrytitle>sssd</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle> <manvolnum>8</manvolnum></citerefentry> et comment SSSD met "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"en cache les règles sudo."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><title>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Configuring sudo to cooperate with SSSD"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Configuration de sudo pour coopérer avec SSSD"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"To enable SSSD as a source for sudo rules, add <emphasis>sss</emphasis> to "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"the <emphasis>sudoers</emphasis> entry in <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour activer SSSD comme source pour les règles de sudo, ajouter "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>sss</emphasis> à l'entrée <emphasis>sudoers</emphasis> dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>nsswitch.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"For example, to configure sudo to first lookup rules in the standard "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<citerefentry> <refentrytitle>sudoers</refentrytitle> <manvolnum>5</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"manvolnum> </citerefentry> file (which should contain rules that apply to "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"local users) and then in SSSD, the nsswitch.conf file should contain the "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"following line:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par exemple, pour configurer sudo pour rechercher d'abord les règles dans le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fichier standard <citerefentry><refentrytitle>sudoers</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> (qui doit contenir les règles qui "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"s'appliquent aux utilisateurs locaux) et ensuite dans SSSD, le fichier "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nsswitch.conf doit contenir la ligne suivante :"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><programlisting>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "sudoers: files sss\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sudoers: files sss\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"More information about configuring the sudoers search order from the "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"nsswitch.conf file as well as information about the LDAP schema that is used "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"to store sudo rules in the directory can be found in <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sudoers.ldap</refentrytitle> <manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Plus d'informations sur la configuration de l'ordre de recherche de sudoers "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"depuis le fichier nsswitch.conf, mais aussi les informations sur le schéma "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"LDAP qui est utilisé pour stocker les règles sudo dans l'annuaire sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"disponibles dans <citerefentry><refentrytitle>sudoers.ldap</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><title>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Configuring SSSD to fetch sudo rules"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Configuration de SSSD pour aller chercher les règles de sudo"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The following example shows how to configure SSSD to download sudo rules "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"from an LDAP server."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant montre comment configurer SSSD pour télécharger les règles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sudo à partir d'un serveur LDAP."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><programlisting>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"config_file_version = 2\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"services = nss, pam, sudo\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"domains = EXAMPLE\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"id_provider = ldap\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"sudo_provider = ldap\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"ldap_uri = ldap://example.com\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"config_file_version = 2\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"services = nss, pam, sudo\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domains = EXAMPLE\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"id_provider = ldap\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sudo_provider = ldap\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_uri = ldap://example.com\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_sudo_search_base = ou=sudoers,dc=example,dc=com\n"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"When the SSSD is configured to use the IPA provider, the sudo provider is "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"automatically enabled. The sudo search base is configured to use the compat "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"tree (ou=sudoers,$DC)."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Lorsque SSSD est configuré pour utiliser le fournisseur IPA, le fournisseur "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"sudo est ajouté automatiquement. La base de recherche de sudo est alors "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"configurée pour utiliser la branche de compatibilité (ou=sudoers,$DC)."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><title>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "The SUDO rule caching mechanism"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Le mécanisme de mise en cache de règles SUDO"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The biggest challenge, when developing sudo support in SSSD, was to ensure "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"that running sudo with SSSD as the data source provides the same user "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"experience and is as fast as sudo but keeps providing the most current set "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"of rules as possible. To satisfy these requirements, SSSD uses three kinds "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"of updates. They are referred to as full refresh, smart refresh and rules "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le plus grand défi lors du développement de la prise en charge de sudo dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SSSD était de de s'assurer que l'utilisation d'un sudo exploitant SSSD comme "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"source de données fournissait la même expérience utilisateur et était aussi "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"rapide que sudo, tout en conservant le jeu de règles le plus à jour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"possible. Pour satisfaire ces exigences, SSSD utilise trois types de mises à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"jour. Elles sont appelées actualisation complète, rafraîchissement "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"intelligent et rafraîchissement des règles."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The <emphasis>smart refresh</emphasis> periodically downloads rules that are "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"new or were modified after the last update. Its primary goal is to keep the "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"database growing by fetching only small increments that do not generate "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"large amounts of network traffic."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le <emphasis>rafraîchissement intelligent</emphasis> télécharge "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"périodiquement les règles qui sont nouvelles ou qui ont été modifiées après "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"la dernière mise à jour. Son but premier est d'éviter à la base de données "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de grossir en allant chercher de petits incréments qui ne génèrent pas de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"gros de trafic réseau."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The <emphasis>full refresh</emphasis> simply deletes all sudo rules stored "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"in the cache and replaces them with all rules that are stored on the server. "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"This is used to keep the cache consistent by removing every rule which was "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"deleted from the server. However, full refresh may produce a lot of traffic "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"and thus it should be run only occasionally depending on the size and "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"stability of the sudo rules."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le <emphasis>rafracîchissement complèt</emphasis> supprime simplement toutes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les règles sudo stockées dans le cache et les remplace par toutes les règles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"qui sont stockées sur le serveur. Ceci est utilisé pour assurer la cohérence "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de cache en supprimant toutes les règles qui ont été supprimées du serveur. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cependant, un rafraîchissement complet peut produire beaucoup de trafic et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"doit n'être exécuté qu'occasionnellement selon la taille et de la stabilité "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des règles sudo."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The <emphasis>rules refresh</emphasis> ensures that we do not grant the user "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"more permission than defined. It is triggered each time the user runs sudo. "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Rules refresh will find all rules that apply to this user, check their "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"expiration time and redownload them if expired. In the case that any of "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"these rules are missing on the server, the SSSD will do an out of band full "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"refresh because more rules (that apply to other users) may have been deleted."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le <emphasis>rafraîchissement des règles</emphasis> fait en sorte de ne pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"accorder à l'utilisateur plus d'autorisations que défini. Il est déclenché "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"chaque fois que l'utilisateur exécute sudo. L'actualisation des règles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"trouvera toutes les règles qui s'appliquent à cet utilisateur, vérifie leur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"date d'expiration et les retéléchargera si elles ont expiré. Dans le cas où "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'une de ces règles est manquante sur le serveur, SSSD programmera en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"parallèle un rafraîchissement complet hors ligne car d'autres règles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"(s'appliquant à d'autres utilisateurs) peuvent avoir été supprimées."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"If enabled, SSSD will store only rules that can be applied to this machine. "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"This means rules that contain one of the following values in "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<emphasis>sudoHost</emphasis> attribute:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si activé, SSSD stocke uniquement les règles qui peuvent être appliquées à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cette machine. En d'autres termes, ce sont les règles qui contiennent une "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des valeurs suivantes dans l'attribut de <emphasis>sudoHost</emphasis> :"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "keyword ALL"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "mot-clé ALL"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgid "wildcard"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "joker"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "netgroup (in the form \"+netgroup\")"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "netgroup (sous la forme « +netgroup »)"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "hostname or fully qualified domain name of this machine"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"nom de système ou le nom de domaine pleinement qualifié de cette machine"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "one of the IP addresses of this machine"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "une des adresses IP de cette machine"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><itemizedlist><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "one of the IP addresses of the network (in the form \"address/mask\")"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "une des adresses IP du réseau (sous la forme « adresse/masque »)"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"There are many configuration options that can be used to adjust the "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"behavior. Please refer to \"ldap_sudo_*\" in <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry> and \"sudo_*\" in <citerefentry> <refentrytitle>sssd.conf</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"refentrytitle> <manvolnum>5</manvolnum> </citerefentry>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Il existe de nombreuses options de configuration qui peuvent être utilisées "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour ajuster le comportement. Consulter « ldap_sudo_ * » dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry> et « sudo_ * » dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "System Security Services Daemon"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "System Security Services Daemon"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sssd</command> <arg choice='opt'> <replaceable>options</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable> </arg>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>SSSD</command> provides a set of daemons to manage access to remote "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"directories and authentication mechanisms. It provides an NSS and PAM "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"interface toward the system and a pluggable backend system to connect to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"multiple different account sources as well as D-Bus interface. It is also "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the basis to provide client auditing and policy services for projects like "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"FreeIPA. It provides a more robust database to store local users as well as "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"extended user data."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>SSSD</command> fournit un jeu de démons pour gérer l'accès à des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dossiers distants et les mécanismes d'authentification. Il fournit une "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"interface NSS et PAM au travers du système et un moteur système extensible "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"par greffons pour se connecter à de multiples comptes de sources différentes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"en plus d'une interface D-Bus. C'est aussi un moyen de fournir un moyen "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'audit client et une politique de services pour les projets tels que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"FreeIPA. Il fournit une base de donnée plus robuste pour stocker les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisateurs locaux ainsi que les données étendues des utilisateurs."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-d</option>,<option>--debug-level</option> <replaceable>LEVEL</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "<option>--debug-timestamps=</option><replaceable>mode</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>1</emphasis>: Add a timestamp to the debug messages"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<emphasis>1</emphasis> : Ajouter un horodatage aux messages de débogage"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>0</emphasis>: Disable timestamp in the debug messages"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<emphasis>0</emphasis> : Désactiver l'horodatage dans les messages de "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "<option>--debug-microseconds=</option><replaceable>mode</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<emphasis>1</emphasis>: Add microseconds to the timestamp in debug messages"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<emphasis>1</emphasis> : Ajouter les microsecondes à l'horodatage dans les "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"messages de débogage"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<emphasis>0</emphasis>: Disable microseconds in timestamp"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<emphasis>0</emphasis> : Désactiver les microsecondes dans l'horodatage"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-f</option>,<option>--debug-to-files</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-f</option>,<option>--debug-to-files</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Send the debug output to files instead of stderr. By default, the log files "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"are stored in <filename>/var/log/sssd</filename> and there are separate log "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"files for every SSSD service and domain."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Envoie la sortie de débogage vers des fichiers plutôt que vers la sortie "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'erreur standard. Par défaut, les fichiers de sortie sont stockés dans "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<filename>/var/log/sssd</filename> et des fichiers différents sont créés "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"pour chaque service et domaine SSSD."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-D</option>,<option>--daemon</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-D</option>,<option>--daemon</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Become a daemon after starting up."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Devenir un démon après le démarrage."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-i</option>,<option>--interactive</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-i</option>,<option>--interactive</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Run in the foreground, don't become a daemon."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Tourner en avant-plan et ne pas devenir un démon."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-c</option>,<option>--config</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-c</option>,<option>--config</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Specify a non-default config file. The default is <filename>/etc/sssd/sssd."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"conf</filename>. For reference on the config file syntax and options, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"consult the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<manvolnum>5</manvolnum> </citerefentry> manual page."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit un fichier de configuration autre que celui par défaut (<filename>/"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"etc/sssd/sssd.conf</filename>). Pour obtenir des informations sur la syntaxe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"et les options du fichier de configuration, consulter les pages de manuel de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry>."
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "<option>--version</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>--version</option>"
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallaghermsgid "Print version number and exit."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Afficher le numéro de version et quitter."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Signals"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Signaux"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Informs the SSSD to gracefully terminate all of its child processes and then "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"shut down the monitor."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Indique à SSSD de fermer normalement tous ses processus fils puis d'arrêter "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le moniteur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "SIGHUP"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Tells the SSSD to stop writing to its current debug file descriptors and to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"close and reopen them. This is meant to facilitate log rolling with programs "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"like logrotate."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Précise à SSSD de ne plus écrire vers son fichier de débogage actuel, de le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fermer et de le rouvrir. Cela permet de faciliter les rotations de fichiers "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de sortie avec des programmes tels que logrotate."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SIGUSR1"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "SIGUSR1"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Tells the SSSD to simulate offline operation for one minute. This is mostly "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"useful for testing purposes."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Précise à SSSD de simuler une opération hors-ligne pendant une minute. C'est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"surtout utile pour faire des tests."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SIGUSR2"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "SIGUSR2"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Tells the SSSD to go online immediately. This is mostly useful for testing "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Précise à SSSD de passer en mode hors-ligne immédiatement. C'est surtout "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"utile pour faire des tests."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_obfuscate.8.xml:10 sss_obfuscate.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_obfuscate"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_obfuscate"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "obfuscate a clear text password"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "obscurcir un mot de passe en clair"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable></arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_obfuscate</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg> <arg choice='plain'><replaceable>[PASSWORD]</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable></arg>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_obfuscate</command> converts a given password into human-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"unreadable format and places it into appropriate domain section of the SSSD "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_obfuscate</command> convertit un mot de passe donné en un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"format illisible par un humain et le place dans la section de domaine "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"appropriée du fichier de configuration SSSD."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The cleartext password is read from standard input or entered "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"interactively. The obfuscated password is put into "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap_default_authtok</quote> parameter of a given SSSD domain and the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>ldap_default_authtok_type</quote> parameter is set to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<quote>obfuscated_password</quote>. Refer to <citerefentry> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<refentrytitle>sssd-ldap</refentrytitle> <manvolnum>5</manvolnum> </"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"citerefentry> for more details on these parameters."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le mot de passe en clair est lu dans l'entrée standard ou entré "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"interactivement. Les mots de passes chiffrés sont mis dans "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<quote>ldap_default_authtok</quote> pour un domaine SSSD donné et le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"paramètre <quote>ldap_default_authtok_type</quote> est défini à "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<quote>obfuscated_password</quote>. Cf. <citerefentry> <refentrytitle>sssd-"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ldap</refentrytitle> <manvolnum>5</manvolnum> </citerefentry> pour plus de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"détails sur ces paramètres."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that obfuscating the password provides <emphasis>no real "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"security benefit</emphasis> as it is still possible for an attacker to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"reverse-engineer the password back. Using better authentication mechanisms "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"such as client side certificates or GSSAPI is <emphasis>strongly</emphasis> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Veuillez noter que les mots de passe chiffrés ne fournissent <emphasis>aucun "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"réel bénéfice de sécurité</emphasis> étant donné qu'il est possible de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"retrouver le mot de passe par ingénierie-inverse. Utiliser un meilleur "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"mécanisme d'authentification tel que les certificats côté client ou GSSAPI "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"est <emphasis>très</emphasis> conseillé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-s</option>,<option>--stdin</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<option>-s</option>,<option>--stdin</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The password to obfuscate will be read from standard input."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Le mot de passe chiffré sera lu sur l'entrée standard."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
ea929f1b022fc2cb77dec89b0e12accef983ec85Jakub Hrozek#: sss_obfuscate.8.xml:74 sss_ssh_authorizedkeys.1.xml:79
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-d</option>,<option>--domain</option> <replaceable>DOMAIN</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-d</option>,<option>--domain</option> <replaceable>DOMAINE</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The SSSD domain to use the password in. The default name is <quote>default</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le domaine SSSD auquel est lié le mot de passe. Le nom par défaut est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<quote>default</quote>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-f</option>,<option>--file</option> <replaceable>FILE</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-f</option>,<option>--file</option> <replaceable>FICHIER</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Read the config file specified by the positional parameter."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Lit le fichier de configuration spécifié par le paramètre."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: <filename>/etc/sssd/sssd.conf</filename>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : <filename>/etc/sssd/sssd.conf</filename>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_useradd.8.xml:10 sss_useradd.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_useradd"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_useradd"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "create a new user"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "créer un utilisateur"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_useradd</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg> <arg choice='plain'><replaceable>UTILISATEUR</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable></arg>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_useradd</command> creates a new user account using the values "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"specified on the command line plus the default values from the system."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_useradd</command> crée un nouveau compte utilisateur en "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"utilisant les valeurs spécifiées en ligne de commande auquelles sont "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"ajoutées les valeurs par défaut du système."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-u</option>,<option>--uid</option> <replaceable>UID</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Set the UID of the user to the value of <replaceable>UID</replaceable>. If "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"not given, it is chosen automatically."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Définit l'UID de l'utilisateur à la valeur <replaceable>UID</replaceable>. "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Si non précisé, il est choisit automatiquement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:55 sss_usermod.8.xml:43 sss_seed.8.xml:100
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENT</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-c</option>,<option>--gecos</option> <replaceable>COMMENTAIRE</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:60 sss_usermod.8.xml:48 sss_seed.8.xml:105
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Any text string describing the user. Often used as the field for the user's "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Toute chaîne de caractère décrivant l'utilisateur. Souvent utilisé comme "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"champ pour le nom entier de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:67 sss_usermod.8.xml:55 sss_seed.8.xml:112
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-h</option>,<option>--home</option> <replaceable>HOME_DIR</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The home directory of the user account. The default is to append the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>LOGIN</replaceable> name to <filename>/home</filename> and use "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"that as the home directory. The base that is prepended before "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>LOGIN</replaceable> is tunable with <quote>user_defaults/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"baseDirectory</quote> setting in sssd.conf."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le répertoire personnel du compte utilisateur. Par défaut, on ajoute "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>LOGIN</replaceable> à <filename>/home</filename> et on utilise "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cela comme dossier personnel. La base précédent <replaceable>LOGIN</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> est modifiable avec le paramètre <quote>user_defaults/"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"baseDirectory</quote> de sssd.conf."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#: sss_useradd.8.xml:82 sss_usermod.8.xml:66 sss_seed.8.xml:124
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-s</option>,<option>--shell</option> <replaceable>SHELL</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The user's login shell. The default is currently <filename>/bin/bash</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"filename>. The default can be changed with <quote>user_defaults/"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"defaultShell</quote> setting in sssd.conf."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'interpréteur de commande de l'utilisateur. La valeur par défaut actuelle, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<filename>/bin/bash</filename>, peut être modifiée avec le paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>user_defaults/defaultShell</quote> dans sssd.conf."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-G</option>,<option>--groups</option> <replaceable>GROUPS</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-G</option>,<option>--groups</option> <replaceable>GROUPES</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "A list of existing groups this user is also a member of."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Une liste de groupes existants dont l'utilisateur est aussi membre."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-m</option>,<option>--create-home</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<option>-m</option>,<option>--create-home</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Create the user's home directory if it does not exist. The files and "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"directories contained in the skeleton directory (which can be defined with "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the -k option or in the config file) will be copied to the home directory."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Crée le répertoire personnel de l'utilisateur s'il n'existe pas. Les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fichiers et répertoires inclus dans le répertoire squelette (pouvant être "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"définis avec l'option -k ou dans le fichier de configuration) sont copiés "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"dans le dossier personnel."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-M</option>,<option>--no-create-home</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "<option>-M</option>,<option>--no-create-home</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Do not create the user's home directory. Overrides configuration settings."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Ne pas créer de dossier personnel pour l'utilisateur. Écrase les paramètres "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"de configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-k</option>,<option>--skel</option> <replaceable>SKELDIR</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The skeleton directory, which contains files and directories to be copied in "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the user's home directory, when the home directory is created by "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_useradd</command>."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le répertoire squelette, contenant les fichiers et répertoires à copier dans "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"le répertoire personnel de l'utilisateur, quand le répertoire personnel est "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"créé par <command>sss_useradd</command>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"Special files (block devices, character devices, named pipes and unix "
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek"sockets) will not be copied."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Les fichiers spéciaux (périphériques blocs, caractères, tubes nommés et "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"sockets unix) ne seront pas copiés."
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option is only valid if the <option>-m</option> (or <option>--create-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"home</option>) option is specified, or creation of home directories is set "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"to TRUE in the configuration."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'option n'est valide que si l'option <option>-m</option> (ou <option>--"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"create-home</option>) est utilisée ou si la création de répertoires "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"personnels est à TRUE dans la configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-Z</option>,<option>--selinux-user</option> "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>SELINUX_USER</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-Z</option>,<option>--selinux-user</option> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<replaceable>UTILISATEUR_SELINUX</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The SELinux user for the user's login. If not specified, the system default "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"will be used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"L'utilisateur SELinux pour la connexion utilisateur. Si non spécifié, la "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"valeur par défaut du système est utilisée."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sssd-krb5"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sssd-krb5"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This manual page describes the configuration of the Kerberos 5 "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication backend for <citerefentry> <refentrytitle>sssd</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle> <manvolnum>8</manvolnum> </citerefentry>. For a detailed "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"syntax reference, please refer to the <quote>FILE FORMAT</quote> section of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the <citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"manvolnum> </citerefentry> manual page."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Cette page de manuel décrit la configuration du moteur d'authentification de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Kerberos 5 pour <citerefentry> <refentrytitle>sssd</refentrytitle> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<manvolnum>8</manvolnum> </citerefentry>. Pour une référence détaillée sur "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"la syntaex, veuillez vous référer à la section <quote>FORMAT DE FICHIER</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"quote> du manuel de <citerefentry> <refentrytitle>sssd.conf</refentrytitle> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<manvolnum>5</manvolnum> </citerefentry>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The Kerberos 5 authentication backend contains auth and chpass providers. It "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"must be paired with an identity provider in order to function properly (for "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"example, id_provider = ldap). Some information required by the Kerberos 5 "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication backend must be provided by the identity provider, such as "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"the user's Kerberos Principal Name (UPN). The configuration of the identity "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"provider should have an entry to specify the UPN. Please refer to the man "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"page for the applicable identity provider for details on how to configure "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le moteur d'authentification Kerberos 5 contient les fournisseurs "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"d'authentification et de changement de mot de passe. Il doit être couplé "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"avec un fournisseur d'identité de manière à fonctionner proprement (par "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"exemple, id_provider = ldap). Plusieurs informations requises par le moteur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'authentification Kerberos 5 doivent être fournies par le fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identité, telles que le nom du principal de l'utilisateur Kerberos (UPN). "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La configuration du fournisseur d'identité doit avoir une entrée pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"spécifier l'UPN. Veuillez vous référer aux pages du manuel du fournisseur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identité ad-hoc pour pouvoir le configurer."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This backend also provides access control based on the .k5login file in the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"home directory of the user. See <citerefentry> <refentrytitle>.k5login</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"refentrytitle><manvolnum>5</manvolnum> </citerefentry> for more details. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please note that an empty .k5login file will deny all access to this user. "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"To activate this feature, use 'access_provider = krb5' in your SSSD "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuration."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Ce moteur fournit aussi un contrôle d'accès sur le fichier .k5login dans le "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"répertoire personnel de l'utilisateur. Voir <citerefentry> <refentrytitle>."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"k5login</refentrytitle><manvolnum>5</manvolnum> </citerefentry> pour plus de "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"détails. Veuillez noter qu'un fichier .k5login vide interdira tout accès "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"pour cet utilisateur. Pour activer cette option, utilisez « access_provider "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"= krb5 » dans votre configuration de SSSD."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"In the case where the UPN is not available in the identity backend, "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sssd</command> will construct a UPN using the format "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>username</replaceable>@<replaceable>krb5_realm</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Dans le cas où l'UPN n'est pas valide dans le moteur d'identité, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sssd</command> construira un UPN en utilisant le format "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<replaceable>utilisateur</replaceable>@<replaceable>krb5_realm</replaceable>."
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Specifies the comma-separated list of IP addresses or hostnames of the "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Kerberos servers to which SSSD should connect, in the order of preference. "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"For more information on failover and server redundancy, see the "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<quote>FAILOVER</quote> section. An optional port number (preceded by a "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"colon) may be appended to the addresses or hostnames. If empty, service "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"discovery is enabled; for more information, refer to the <quote>SERVICE "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"DISCOVERY</quote> section."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Spécifie la liste séparée par des virgules des adresses IP ou des noms de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"systèmes des serveurs Kerberos auquel SSSD doit se connecter, par ordre de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"préférence. Pour plus d'informations sur la redondance de basculement et le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"serveur, consultez la section de <quote>BASCULEMENT</quote>. Un numéro de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"port facultatif (précédé de deux-points) peut être ajouté aux adresses ou "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"aux noms de systèmes. Si vide, le service de découverte est activé - pour "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"plus d'informations, se reporter à la section <quote>DÉCOUVERTE DE SERVICE</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The name of the Kerberos realm. This option is required and must be "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Le nom du domaine Kerberos. Cette option est nécessaire et doit être "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "krb5_kpasswd, krb5_backup_kpasswd (string)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "krb5_kpasswd, krb5_backup_kpasswd (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"If the change password service is not running on the KDC, alternative "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"servers can be defined here. An optional port number (preceded by a colon) "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"may be appended to the addresses or hostnames."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si le service de changement de mot de passe ne fonctionne pas sur le KDC, "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"des serveurs de secours peuvent être définis ici. Un numéro de port "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"facultatif (précédé par un signe deux-points) peut-être être suffixé aux "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"adresses ou aux noms de systèmes."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For more information on failover and server redundancy, see the "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<quote>FAILOVER</quote> section. NOTE: Even if there are no more kpasswd "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"servers to try, the backend is not switched to operate offline if "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication against the KDC is still possible."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Pour plus d'information sur le basculement et la redondance de serveurs, "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"voir la section <quote>BASCULEMENT</quote>. Noter que même si il n'y a plus "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de serveurs kpasswd à essayer, le moteur ne passe pas en mode hors-ligne si "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"l'authentification KDC est toujours possible."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: Use the KDC"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : utiliser le KDC"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_ccachedir (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_ccachedir (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Directory to store credential caches. All the substitution sequences of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"krb5_ccname_template can be used here, too, except %d and %P. If the "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"directory does not exist, it will be created. If %u, %U, %p or %h are used, "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"a private directory belonging to the user is created. Otherwise, a public "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"directory with restricted deletion flag (aka sticky bit, as described in "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<citerefentry> <refentrytitle>chmod</refentrytitle> <manvolnum>1</manvolnum> "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"</citerefentry> for details) is created."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Répertoire pour stocker les caches crédits. Toutes les séquences de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"substitution de krb5_ccname_template peuvent être utilisée ici, hormis %d et "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"%P. Si le dossier n'existe pas, il sera créé. Si %u, %U, %p ou %h sont "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"utilisés, un répertoire privé appartenant à l'utilisateur est créé. Sinon un "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"répertoire public avec un drapeau de restriction à la suppression (aussi "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"appelé « sticky bit », cf. <citerefentry> <refentrytitle>chmod</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"refentrytitle> <manvolnum>1</manvolnum> </citerefentry> pour plus de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"détails) est créé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: /tmp"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : /tmp"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_ccname_template (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_ccname_template (chaîne)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:172 include/override_homedir.xml:11
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:173 include/override_homedir.xml:12
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "login name"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "identifiant de connexion"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:176 include/override_homedir.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "login UID"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "UID de l'utilisateur"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "principal name"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "nom du principal"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "realm name"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "nom de domaine"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "home directory"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "répertoire personnel"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:194 include/override_homedir.xml:19
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "value of krb5ccache_dir"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "valeur de krb5ccache_dir"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "the process ID of the SSSD client"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "l'ID de processus du client SSSD"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:206 include/override_homedir.xml:34
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:207 include/override_homedir.xml:35
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "a literal '%'"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "un « % » littéral"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "Location of the user's credential cache. Two credential cache types are "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "currently supported: <quote>FILE</quote> and <quote>DIR</quote>. The "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "cache can be specified either as <replaceable>TYPE:RESIDUAL</"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "replaceable>, or as an absolute path, which implies the <quote>FILE</"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "quote> type. In the template, the following sequences are substituted: "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "<placeholder type=\"variablelist\" id=\"0\"/> If the template ends with "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| "'XXXXXX' mkstemp(3) is used to create a unique filename in a safe way."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"Location of the user's credential cache. Three credential cache types are "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"currently supported: <quote>FILE</quote>, <quote>DIR</quote> and "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"<quote>KEYRING:persistent</quote>. The cache can be specified either as "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"<replaceable>TYPE:RESIDUAL</replaceable>, or as an absolute path, which "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"implies the <quote>FILE</quote> type. In the template, the following "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"sequences are substituted: <placeholder type=\"variablelist\" id=\"0\"/> If "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"the template ends with 'XXXXXX' mkstemp(3) is used to create a unique "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"filename in a safe way."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Emplacement du cache d'informations d'identification de l'utilisateur. Deux "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"types de cache sont actuellement pris en charge : <quote>FILE</quote> et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>DIR</quote>. Le cache peut soit être spécifié comme <replaceable>TYPE:"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"RESIDUAL</replaceable>, ou comme chemin d'accès absolu, ce qui implique le "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"type <quote>FILE</quote>. Dans le modèle, les séquences suivantes sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"substituées : <placeholder type=\"variablelist\" id=\"0\"/>. Si le modèle se "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"termine par « XXXXXX », mkstemp (3) est utilisé pour créer un nom de fichier "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"unique en toute sécurité."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"When using KEYRING types, the only supported mechanism is <quote>KEYRING:"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"persistent:%U</quote>, which uses the Linux kernel keyring to store "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"credentials on a per-UID basis. This is also the recommended choice, as it "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"is the most secure and predictable method."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"The default value for the credential cache name is sourced from the profile "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"stored in the system wide krb5.conf configuration file in the [libdefaults] "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"section. The option name is default_ccache_name. See krb5.conf(5)'s "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"PARAMETER EXPANSION paragraph for additional information on the expansion "
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek"format defined by krb5.conf."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#| msgid "Default: 0 (No limit)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgid "Default: (from libkrb5)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "Par défaut : 0 (pas de limite)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_auth_timeout (integer)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_auth_timeout (entier)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Timeout in seconds after an online authentication request or change password "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"request is aborted. If possible, the authentication request is continued "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Délai d'attente, en secondes, après l'annulation d'une requête "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"d'authentification en ligne ou de changement de mot de passe. La requête "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"d'authentification sera effectuée hors-ligne si cela est possible."
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Verify with the help of krb5_keytab that the TGT obtained has not been "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"spoofed. The keytab is checked for entries sequentially, and the first entry "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"with a matching realm is used for validation. If no entry matches the realm, "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"the last entry in the keytab is used. This process can be used to validate "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"environments using cross-realm trust by placing the appropriate keytab entry "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"as the last entry or the only entry in the keytab file."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Vérifie à l'aide de krb5_keytab que le TGT obtenu n'a pas été usurpé. Les "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"entrées d'un fichier keytab sont vérifiées dans l'ordre, et la première "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"entrée avec un domaine correspondant est utilisée pour la validation. Si "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"aucune entrée ne correspond au domaine, la dernière entrée dans le fichier "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"keytab est utilisée. Ce processus peut être utilisé pour valider des "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"environnements utilisant l'approbation entre domaines en plaçant l'entrée "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"keytab appropriée comme dernière ou comme seule entrée dans le fichier "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_keytab (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_keytab (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The location of the keytab to use when validating credentials obtained from "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'emplacement du fichier keytab à utiliser pour valider les données "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'identification obtenues à partir de KDC."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : /etc/krb5.keytab"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_store_password_if_offline (boolean)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_store_password_if_offline (booléen)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Store the password of the user if the provider is offline and use it to "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"request a TGT when the provider comes online again."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Stocke le mot de passe de l'utilisateur si le fournisseur est hors-ligne, "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"puis l'utilise pour obtenir un TGT lorsque le fournisseur redevient "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"disponible en ligne."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"NOTE: this feature is only available on Linux. Passwords stored in this way "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"are kept in plaintext in the kernel keyring and are potentially accessible "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"by the root user (with difficulty)."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE : cette fonctionnalité n'est actuellement disponible que sur les plates-"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"formes Linux. Les mots de passe stockés de cette manière sont conservés en "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"texte brut dans le trousseau de clés du noyau et sont potentiellement "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"accessibles à l'utilisateur root (avec difficulté)."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_renewable_lifetime (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_renewable_lifetime (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"Request a renewable ticket with a total lifetime, given as an integer "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"immediately followed by a time unit:"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Demande un ticket renouvelable avec une durée de vie totale, donnée par un "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"entier immédiatement suivi par une unité de temps :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:312 sssd-krb5.5.xml:346 sssd-krb5.5.xml:383
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "<emphasis>s</emphasis> for seconds"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "<emphasis>s</emphasis> pour secondes"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:315 sssd-krb5.5.xml:349 sssd-krb5.5.xml:386
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "<emphasis>m</emphasis> for minutes"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "<emphasis>m</emphasis> pour minutes"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:318 sssd-krb5.5.xml:352 sssd-krb5.5.xml:389
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "<emphasis>h</emphasis> for hours"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "<emphasis>h</emphasis> pour heures"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#: sssd-krb5.5.xml:321 sssd-krb5.5.xml:355 sssd-krb5.5.xml:392
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "<emphasis>d</emphasis> for days."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "<emphasis>d</emphasis> pour jours."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "If there is no unit given, <emphasis>s</emphasis> is assumed."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Si aucune unité n'est spécifiée, <emphasis>s</emphasis> est utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"NOTE: It is not possible to mix units. To set the renewable lifetime to one "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"and a half hours, use '90m' instead of '1h30m'."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE : il n'est pas possible de mélanger les unités. Pour indiquer une durée "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de vie renouvelable de une heure et trente minutes, utiliser « 90m » au lieu "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de « 1h30m »."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: not set, i.e. the TGT is not renewable"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Par défaut : non défini, c'est-à-dire que le TGT n'est pas renouvelable"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_lifetime (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_lifetime (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Request ticket with a lifetime, given as an integer immediately followed by "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"a time unit:"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Demande un ticket avec une durée de vie, donnée par un entier immédiatement "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"suivi par une unité de temps :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "If there is no unit given <emphasis>s</emphasis> is assumed."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Si aucune unité n'est spécifiée, <emphasis>s</emphasis> est utilisé."
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"NOTE: It is not possible to mix units. To set the lifetime to one and a "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"half hours please use '90m' instead of '1h30m'."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE : il n'est pas possible de mélanger les unités. Pour indiquer une durée "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"de vie de une heure et trente minutes, utiliser « 90m » au lieu de « 1h30m »."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Default: not set, i.e. the default ticket lifetime configured on the KDC."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Par défaut : non défini, c'est-à-dire la durée de vie par défaut configurée "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "krb5_renew_interval (string)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "krb5_renew_interval (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The time in seconds between two checks if the TGT should be renewed. TGTs "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"are renewed if about half of their lifetime is exceeded, given as an integer "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"immediately followed by a time unit:"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"La durée, en secondes, entre deux vérifications pour savoir si le TGT doit "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"être renouvelé. Les TGT sont renouvelés si environ la moitié de leur durée "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"de vie est dépassée. Indiquée par un entier immédiatement suivi d'une unité "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "If this option is not set or is 0 the automatic renewal is disabled."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si cette option n'est pas définie ou définie à 0, le renouvellement "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"automatique est désactivé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_use_fast (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_use_fast (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Enables flexible authentication secure tunneling (FAST) for Kerberos pre-"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"authentication. The following options are supported:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Active le flexible authentication secure tunneling (FAST) pour la pré-"
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"authentification Kerberos. Les options suivantes sont supportées :"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<emphasis>never</emphasis> use FAST. This is equivalent to not setting this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"option at all."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"ne <emphasis>jamais</emphasis> utiliser FAST. Ceci équivaut à ne pas définir "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"cette option."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<emphasis>try</emphasis> to use FAST. If the server does not support FAST, "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"continue the authentication without it."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>essayer</emphasis> d'utiliser FAST. Si le serveur ne prend pas en "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"charge FAST, continuer l'authentification sans."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<emphasis>demand</emphasis> to use FAST. The authentication fails if the "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"server does not require fast."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<emphasis>imposer</emphasis> d'utiliser FAST. L'authentification échoue si "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"le serveur ne requiert pas FAST."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Default: not set, i.e. FAST is not used."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Par défaut : non défini, i.e. FAST n'est pas utilisé."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozekmsgid "NOTE: a keytab is required to use FAST."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "NOTE : un fichier keytab est requis pour utiliser FAST."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"NOTE: SSSD supports FAST only with MIT Kerberos version 1.8 and later. If "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"SSSD is used with an older version of MIT Kerberos, using this option is a "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"configuration error."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"NOTE : SSSD prend en charge le paramètre FAST uniquement avec MIT Kerberos "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"version 1.8 et au-delà. L'utilisation de SSSD avec une version antérieure de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"MIT Kerberos avec cette option est une erreur de configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "krb5_fast_principal (string)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "krb5_fast_principal (chaîne)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Specifies the server principal to use for FAST."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Spécifie le principal de serveur afin d'utiliser FAST."
3a8abe04137d028b8ebd1cb33152aefa55893efbStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
bdd205037059e56484de3174951b22ff8f0f79f8Stephen Gallagher"Specifies if the host and user principal should be canonicalized. This "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"feature is available with MIT Kerberos 1.7 and later versions."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie si les principaux du système et de l'utilisateur doivent être "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"rendus canoniques. Cette fonctionnalité est disponible avec MIT Kerberos 1.7 "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"et versions suivantes."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: false (AD provide: true)"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "Par défaut : false (AD provide: true)"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"If the auth-module krb5 is used in an SSSD domain, the following options "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"must be used. See the <citerefentry> <refentrytitle>sssd.conf</"
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"refentrytitle> <manvolnum>5</manvolnum> </citerefentry> manual page, section "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"<quote>DOMAIN SECTIONS</quote>, for details on the configuration of an SSSD "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"domain. <placeholder type=\"variablelist\" id=\"0\"/>"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Si le module auth krb5 est utilisé dans un domaine SSSD, les options "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"suivantes doivent être utilisées. Cf. la page de manuel "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>, section <quote>SECTIONS DOMAINE</quote> pour plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de détails sur la configuration d'un domaine SSSD. <placeholder type="
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"\"variablelist\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The following example assumes that SSSD is correctly configured and FOO is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"one of the domains in the <replaceable>[sssd]</replaceable> section. This "
e5c33e0bd03a2deb8e5011deeb3ae93f960910eeJakub Hrozek"example shows only configuration of Kerberos authentication; it does not "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"include any identity provider."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'exemple suivant suppose que SSSD est correctement configuré et que FOO est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"l'un des domaines de la section <replaceable>[sssd]</replaceable>. Cet "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"exemple montre uniquement la configuration de l'authentification Kerberos, "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"et n'inclut aucun fournisseur d'identité."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" auth_provider = krb5\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" krb5_server = 192.168.1.1\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher" krb5_realm = EXAMPLE.COM\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" auth_provider = krb5\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher" krb5_server = 192.168.1.1\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek" krb5_realm = EXAMPLE.COM\n"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupadd.8.xml:10 sss_groupadd.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_groupadd"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_groupadd"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "create a new group"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Créer un nouveau groupe"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_groupadd</command> <arg choice='opt'> <replaceable>options</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUPE</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupadd</command> creates a new group. These groups are "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"compatible with POSIX groups, with the additional feature that they can "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"contain other groups as members."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_groupadd</command> crée un nouveau groupe. Ces groupes sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"compatibles avec les groupes POSIX, avec la caractéristique supplémentaire "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"qu'ils peuvent contenir d'autres groupes comme membres."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<option>-g</option>,<option>--gid</option> <replaceable>GID</replaceable>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Set the GID of the group to the value of <replaceable>GID</replaceable>. If "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"not given, it is chosen automatically."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Positionne le GID du groupe à la valeur <replaceable>GID</replaceable>. Si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"non spécifié, il est choisi automatiquement."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_userdel.8.xml:10 sss_userdel.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_userdel"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_userdel"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "delete a user account"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Supprimer un compte utilisateur"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_userdel</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_userdel</command> deletes a user identified by login name "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>LOGIN</replaceable> from the system."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_userdel</command> supprime du système un utilisateur identifié "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"par son identifiant de connexion <replaceable>LOGIN</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-r</option>,<option>--remove</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-r</option>,<option>--remove</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Files in the user's home directory will be removed along with the home "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"directory itself and the user's mail spool. Overrides the configuration."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les fichiers dans le répertoire ainsi que le répertoire lui-même de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur et sa messagerie seront supprimés. Outrepasse la configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-R</option>,<option>--no-remove</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-R</option>,<option>--no-remove</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Files in the user's home directory will NOT be removed along with the home "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"directory itself and the user's mail spool. Overrides the configuration."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les fichiers dans le répertoire ainsi que le répertoire lui-même de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur et sa messagerie ne seront PAS supprimés. Outrepasse la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"configuration."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-f</option>,<option>--force</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-f</option>,<option>--force</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"This option forces <command>sss_userdel</command> to remove the user's home "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"directory and mail spool, even if they are not owned by the specified user."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Cette option oblige <command>sss_userdel</command> à supprimer le répertoire "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"home de l'utilisateur et sa messagerie, même si ils ne sont pas détenus par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'utilisateur spécifié."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-k</option>,<option>--kick</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-k</option>,<option>--kick</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Before actually deleting the user, terminate all his processes."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Avant de réellement supprimer l'utilisateur, mettre fin à tous ses processus."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupdel.8.xml:10 sss_groupdel.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_groupdel"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_groupdel"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "delete a group"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "supprimer un groupe"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_groupdel</command> <arg choice='opt'> <replaceable>options</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUPE</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupdel</command> deletes a group identified by its name "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>GROUP</replaceable> from the system."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_groupdel</command> supprime du système un groupe identifié par "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"son nom de groupe <replaceable>GROUPE</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_groupshow.8.xml:10 sss_groupshow.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_groupshow"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_groupshow"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "print properties of a group"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "affiche les propriétés d'un groupe"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>GROUP</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupshow</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg> <arg choice='plain'><replaceable>GROUPE</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_groupshow</command> displays information about a group "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"identified by its name <replaceable>GROUP</replaceable>. The information "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"includes the group ID number, members of the group and the parent group."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_groupshow</command> affiche des informations sur un groupe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"identifié par son nom <replaceable>GROUPE</replaceable>. Les informations "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"incluent l'ID de groupe, les membres du groupe ainsi que le groupe parent."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-R</option>,<option>--recursive</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-R</option>,<option>--recursive</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Also print indirect group members in a tree-like hierarchy. Note that this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"also affects printing parent groups - without <option>R</option>, only the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"direct parent will be printed."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Affiche aussi les membres indirects de groupe dans une hiérarchie "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"arborescente. Noter que cela affecte également les affichages de groupes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"parents - sans l'option <option>R</option>, seul le parent direct sera "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#: sss_usermod.8.xml:10 sss_usermod.8.xml:15
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "sss_usermod"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "sss_usermod"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "modify a user account"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "modifier un compte utilisateur"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_usermod</command> <arg choice='opt'> <replaceable>options</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>LOGIN</replaceable></"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<command>sss_usermod</command> modifies the account specified by "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>LOGIN</replaceable> to reflect the changes that are specified "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"on the command line."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_usermod</command> modifie le compte défini par "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<replaceable>LOGIN</replaceable> pour refléter les modifications fournies en "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"ligne de commande."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The home directory of the user account."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Le répertoire personnel du compte utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The user's login shell."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "L'interpréteur de commandes de l'utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Append this user to groups specified by the <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> parameter. The <replaceable>GROUPS</replaceable> parameter is "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"a comma separated list of group names."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ajouter cet utilisateur aux groupes spécifiés par le paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>GROUPS</replaceable>. Le paramètre <replaceable>GROUPS</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> est une liste séparée par des virgules de noms de groupes."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Remove this user from groups specified by the <replaceable>GROUPS</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"replaceable> parameter."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Retirer cet utilisateur de groupes spécifiés par le paramètre "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>GROUPS</replaceable>."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-l</option>,<option>--lock</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-l</option>,<option>--lock</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Lock the user account. The user won't be able to log in."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Verrouiller le compte utilisateur. Il ne pourra plus se connecter."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<option>-u</option>,<option>--unlock</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<option>-u</option>,<option>--unlock</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Unlock the user account."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Déverrouiller le compte utilisateur."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The SELinux user for the user's login."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'utilisateur SELinux pour l'identifiant de connexion de l'utilisateur."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "sss_cache"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sss_cache"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "perform cache cleanup"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "effectue le nettoyage du cache"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable> </arg>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_cache</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_cache</command> invalidates records in SSSD cache. Invalidated "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"records are forced to be reloaded from server as soon as related SSSD "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"backend is online."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_cache</command> invalide les enregistrements en cache de SSSD. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les documents invalidés sont obligés d'être rechargés à partir de leur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"serveur d'origine dès que le moteur SSSD redevient disponible en ligne."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozekmsgid "<option>-E</option>,<option>--everything</option>"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "<option>-E</option>,<option>--everything</option>"
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozekmsgid "Invalidate all cached entries except for sudo rules."
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozekmsgstr "Invalider toutes les entrées en cache hors règles sudo."
d6d50c17e94dc0d3000345e8a933311c14bbb828Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-u</option>,<option>--user</option> <replaceable>login</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Invalidate specific user."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Invalider un utilisateur spécifique."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<option>-U</option>,<option>--users</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-U</option>,<option>--users</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Invalidate all user records. This option overrides invalidation of specific "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"user if it was also set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'annulation de tous les enregistrements d'utilisateur. Cette option prend "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le pas sur l'invalidation d'un utilisateur spécifique, si elle a été "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"également configuré."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-g</option>,<option>--group</option> <replaceable>group</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Invalidate specific group."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "L'annulation de groupe spécifique."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<option>-G</option>,<option>--groups</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-G</option>,<option>--groups</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Invalidate all group records. This option overrides invalidation of specific "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"group if it was also set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'annulation de tous les enregistrements de groupe. Cette option prend le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pas sur l'invalidation d'un groupe spécifique si elle a été également "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-n</option>,<option>--netgroup</option> <replaceable>netgroup</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Invalidate specific netgroup."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Invalide un netgroup spécifique."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<option>-N</option>,<option>--netgroups</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-N</option>,<option>--netgroups</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Invalidate all netgroup records. This option overrides invalidation of "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"specific netgroup if it was also set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Invalider tous les enregistrements de netgroup. Cette option prend le pas "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sur l'invalidation de netgroup spécifiques s'il a été également définie."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<option>-s</option>,<option>--service</option> <replaceable>service</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-s</option>,<option>--service</option> <replaceable>service</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Invalidate specific service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Invalider le service spécifique."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "<option>-S</option>,<option>--services</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-S</option>,<option>--services</option>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Invalidate all service records. This option overrides invalidation of "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"specific service if it was also set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Invalider tous les enregistrements de service. Cette option se substitue à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"l'invalidation de service spécifique s'elle a également été définie."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-a</option>,<option>--autofs-map</option> <replaceable>autofs-map</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Invalidate specific autofs maps."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Invalider des cartes autofs spécifiques."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "<option>-A</option>,<option>--autofs-maps</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-A</option>,<option>--autofs-maps</option>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Invalidate all autofs maps. This option overrides invalidation of specific "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"map if it was also set."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Invalider toutes les cartes autofs. Cette option remplace l'invalidation de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"carte spécifique s'elle a également été définie."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-d</option>,<option>--domain</option> <replaceable>domain</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Restrict invalidation process only to a particular domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Restreindre le processus d'invalidation à un domaine particulier."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#: sss_debuglevel.8.xml:10 sss_debuglevel.8.xml:15
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "sss_debuglevel"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sss_debuglevel"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "change debug level while SSSD is running"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "modifie le niveau de débogage pendant l'exécution de SSSD"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"replaceable></arg>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_debuglevel</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg> <arg choice='plain'><replaceable>NEW_DEBUG_LEVEL</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable></arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_debuglevel</command> changes debug level of SSSD monitor and "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"providers to <replaceable>NEW_DEBUG_LEVEL</replaceable> while SSSD is "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_debuglevel</command> positionne le niveau de débogage du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"moniteur et des fournisseurs SSSD à <replaceable>NEW_DEBUG_LEVEL</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> pendant l'exécution de SSSD."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<replaceable>NEW_DEBUG_LEVEL</replaceable>"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refnamediv><refname>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "sss_seed"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sss_seed"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refnamediv><refpurpose>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "seed the SSSD cache with a user"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "initialise le cache SSSD avec un utilisateur"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_seed</command> <arg choice='opt'> <replaceable>options</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> </arg> <arg choice='plain'>-D <replaceable>DOMAIN</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable></arg> <arg choice='plain'>-n <replaceable>USER</replaceable></"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<command>sss_seed</command> seeds the SSSD cache with a user entry and "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"temporary password. If a user entry is already present in the SSSD cache "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"then the entry is updated with the temporary password."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_seed</command> initialise le cache SSSD avec une entrée "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'utilisateur et le mot de passe temporaire. Si une entrée d'utilisateur est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"déjà présente dans le cache de SSSD, l'entrée est mise à jour avec le mot de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"passe temporaire."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-D</option>,<option>--domain</option> <replaceable>DOMAIN</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Provide the name of the domain in which the user is a member of. The domain "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"is also used to retrieve user information. The domain must be configured in "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"sssd.conf. The <replaceable>DOMAIN</replaceable> option must be provided. "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Information retrieved from the domain overrides what is provided in the "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Indique le nom de domaine duquel l'utilisateur est membre. Le domaine est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"également utilisé pour récupérer les informations sur l'utilisateur. Le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine doit être configuré dans sssd.conf. L'option <replaceable>DOMAIN</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> doit être fournie. Les informations récupérées depuis le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine prennent le pas sur ce qui est fourni dans les options."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<option>-n</option>,<option>--username</option> <replaceable>USER</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-n</option>,<option>--username</option> <replaceable>USER</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"The username of the entry to be created or modified in the cache. The "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<replaceable>USER</replaceable> option must be provided."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le nom d'utilisateur de l'entrée devant être créée ou modifiée dans le "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"cache. L'option <replaceable>USER</replaceable> doit être fournie."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Set the UID of the user to <replaceable>UID</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Définit l'UID de l'utilisateur à <replaceable>UID</replaceable>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Set the GID of the user to <replaceable>GID</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Définit le GID de l'utilisateur à <replaceable>GID</replaceable>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Set the home directory of the user to <replaceable>HOME_DIR</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit le répertoire de l'utilisateur à <replaceable>HOME_DIR</replaceable>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozekmsgid "Set the login shell of the user to <replaceable>SHELL</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Définit l'interpréteur de commande de l'utilisateur à <replaceable>SHELL</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Interactive mode for entering user information. This option will only prompt "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"for information not provided in the options or retrieved from the domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Mode interactif pour la saisie des informations de l'utilisateur. Cette "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"option invite uniquement à la saisir des renseignements non fournis dans les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"options ou non récupérés à partir du domaine."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-p</option>,<option>--password-file</option> <replaceable>PASS_FILE</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"Specify file to read user's password from. (if not specified password is "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"prompted for)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie le fichier dans lequel lire le mot de passe de l'utilisateur. (si "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"aucun mot de passe n'est spécifié, il sera demandé)"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"The length of the password (or the size of file specified with -p or --"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"password-file option) must be less than or equal to PASS_MAX bytes (64 bytes "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"on systems with no globally-defined PASS_MAX value)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La taille du mot de passe (ou la taille du fichier spécifié avec l'option -p "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ou --password-file) doit être inférieure ou égale à PASS_MAX octets (64 "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"octets sur les systèmes sans valeur globale définie de PASS_MAX)."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#: sss_ssh_authorizedkeys.1.xml:10 sss_ssh_authorizedkeys.1.xml:15
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "sss_ssh_authorizedkeys"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sss_ssh_authorizedkeys"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refmeta><manvolnum>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#: sss_ssh_authorizedkeys.1.xml:11 sss_ssh_knownhostsproxy.1.xml:11
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "get OpenSSH authorized keys"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "obtient les clés OpenSSH autorisées"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<replaceable>options</replaceable> </arg> <arg "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"choice='plain'><replaceable>USER</replaceable></arg>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_authorizedkeys</command> <arg choice='opt'> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>options</replaceable> </arg> <arg "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"choice='plain'><replaceable>USER</replaceable></arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_ssh_authorizedkeys</command> acquires SSH public keys for user "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<replaceable>USER</replaceable> and outputs them in OpenSSH authorized_keys "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"format (see the <quote>AUTHORIZED_KEYS FILE FORMAT</quote> section of "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> for more information)."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_authorizedkeys</command> acquiert les clés publiques SSH "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour <replaceable>USER</replaceable> et les renvoie dans le format "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"authorized_keys de OpenSSH (cf. la section <quote>FORMAT DE FICHIER "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"AUTHORIZED_KEYS</quote> de <citerefentry><refentrytitle>sshd</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>8</manvolnum></citerefentry> pour plus d'informations)."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> can be configured to use <command>sss_ssh_authorizedkeys</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"command> for public key user authentication if it is compiled with support "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"for either <quote>AuthorizedKeysCommand</quote> or <quote>PubkeyAgent</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"quote> <citerefentry> <refentrytitle>sshd_config</refentrytitle> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<manvolnum>5</manvolnum></citerefentry> options."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> peut être configuré pour utiliser "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_authorizedkeys</command> pour l'authentification "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'utilisateur par clé publique s'il est compilé avec la prise en compte des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"options <quote>AuthorizedKeysCommand</quote> ou <quote>PubkeyAgent</quote> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de <citerefentry><refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "AuthorizedKeysCommand /usr/bin/sss_ssh_authorizedkeys\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"If <quote>AuthorizedKeysCommand</quote> is supported, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> can be configured to use it by putting the following directive "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"in <citerefentry> <refentrytitle>sshd_config</refentrytitle> <manvolnum>5</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"manvolnum></citerefentry>: <placeholder type=\"programlisting\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si <quote>AuthorizedKeysCommand</quote> est pris en charge, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> peut être configuré pour l'utiliser en mettant la directive "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"suivante dans <citerefentry><refentrytitle>sshd_config</refentrytitle> "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<manvolnum>5</manvolnum></citerefentry> : <placeholder type=\"programlisting"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"\" id=\"0\"/>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "PubKeyAgent /usr/bin/sss_ssh_authorizedkeys %u\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"If <quote>PubkeyAgent</quote> is supported, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> can be configured to use it by using the following directive "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"for <citerefentry> <refentrytitle>sshd</refentrytitle> <manvolnum>8</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"manvolnum></citerefentry> configuration: <placeholder type=\"programlisting"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si <quote>PubkeyAgent</quote> est pris en charge, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> peut être configuré pour l'utiliser en utilisant la directive "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"suivante de la configuration de <citerefentry><refentrytitle>sshd</"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"refentrytitle> <manvolnum>8</manvolnum></citerefentry> : <placeholder type="
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"\"programlisting\" id=\"0\"/>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Search for user public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Rechercher des clés publiques dans le domaine SSSD <replaceable>DOMAIN</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable>."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><title>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#: sss_ssh_authorizedkeys.1.xml:93 sss_ssh_knownhostsproxy.1.xml:92
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "EXIT STATUS"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "CODE RETOUR"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <reference><refentry><refsect1><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#: sss_ssh_authorizedkeys.1.xml:95 sss_ssh_knownhostsproxy.1.xml:94
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"In case of success, an exit value of 0 is returned. Otherwise, 1 is returned."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"Dans le cas d'un opération achevée avec succès, une valeur de retour de 0 "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"est renvoyée. Dans le cas contraire, 1 est renvoyé."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refname>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#: sss_ssh_knownhostsproxy.1.xml:10 sss_ssh_knownhostsproxy.1.xml:15
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "sss_ssh_knownhostsproxy"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "sss_ssh_knownhostsproxy"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refnamediv><refpurpose>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "get OpenSSH host keys"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "obtenir les clés d'hôtes OpenSSH"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsynopsisdiv><cmdsynopsis>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<replaceable>options</replaceable> </arg> <arg "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_knownhostsproxy</command> <arg choice='opt'> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<replaceable>options</replaceable> </arg> <arg "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"choice='plain'><replaceable>HOST</replaceable></arg> <arg "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"choice='opt'><replaceable>PROXY_COMMAND</replaceable></arg>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<command>sss_ssh_knownhostsproxy</command> acquires SSH host public keys for "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"host <replaceable>HOST</replaceable>, stores them in a custom OpenSSH "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"known_hosts file (see the <quote>SSH_KNOWN_HOSTS FILE FORMAT</quote> section "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"of <citerefentry><refentrytitle>sshd</refentrytitle> <manvolnum>8</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"manvolnum></citerefentry> for more information) <filename>/var/lib/sss/"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"pubconf/known_hosts</filename> and estabilishes connection to the host."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_knownhostsproxy</command> récupère les clés publiques pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le système <replaceable>HOST</replaceable>, les stocke dans un fichier "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"OpenSSH known_hosts spécifique (cf. la section <quote>FORMAT DU FICHIER "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"SSH_KNOWN_HOSTS</quote> de <citerefentry><refentrytitle>sshd</refentrytitle> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<manvolnum>8</manvolnum></citerefentry> pour plus d'informations) "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<filename>/var/lib/sss/pubconf/known_hosts</filename> puis établit la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"connexion vers le système."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"If <replaceable>PROXY_COMMAND</replaceable> is specified, it is used to "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"create the connection to the host instead of opening a socket."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si <replaceable>PROXY_COMMAND</replaceable> est indiqué, elle est alors "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisée pour établier la connexion vers le système au lieu d'ouvrir une "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para><programlisting>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
dd3ba5c5b7d2a9d109963ae9e6c94fff34872221Stephen Gallagher"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ProxyCommand /usr/bin/sss_ssh_knownhostsproxy -p %p %h\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"GlobalKnownHostsFile /var/lib/sss/pubconf/known_hosts\n"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> can be configured to use <command>sss_ssh_knownhostsproxy</"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"command> for host key authentication by using the following directives for "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"citerefentry> configuration: <placeholder type=\"programlisting\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry> peut être configuré pour utiliser "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<command>sss_ssh_knownhostsproxy</command> pour l'authentication par clés en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"utilisant les directives suivantes pour la configuration de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry><refentrytitle>ssh</refentrytitle> <manvolnum>1</manvolnum></"
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"citerefentry> : <placeholder type=\"programlisting\" id=\"0\"/>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><term>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<option>-p</option>,<option>--port</option> <replaceable>PORT</replaceable>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Use port <replaceable>PORT</replaceable> to connect to the host. By "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"default, port 22 is used."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"Utiliser le port <replaceable>PORT</replaceable> pour se connecter au "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"système. Par défaut, le port 22 est utilisé."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <reference><refentry><refsect1><variablelist><varlistentry><listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Search for host public keys in SSSD domain <replaceable>DOMAIN</replaceable>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Rechercher les clés publiques dans le domaine SSSD <replaceable>DOMAINE</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"replaceable> hôte."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "SERVICE DISCOVERY"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "DÉCOUVERTE DE SERVICE"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The service discovery feature allows back ends to automatically find the "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"appropriate servers to connect to using a special DNS query. This feature is "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"not supported for backup servers."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La fonctionnalité de découverte de services permet aux moteurs de trouver "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"automatiquement les serveurs appropriés auxquels se connecter à l'aide d'une "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"requête DNS spéciale. Cette fonctionnalité n'est pas pris en charge pour sur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les serveurs secondaires."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#: include/service_discovery.xml:9 include/ldap_id_mapping.xml:57
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Configuration"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Configuration"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If no servers are specified, the back end automatically uses service "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"discovery to try to find a server. Optionally, the user may choose to use "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"both fixed server addresses and service discovery by inserting a special "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"keyword, <quote>_srv_</quote>, in the list of servers. The order of "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"preference is maintained. This feature is useful if, for example, the user "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"prefers to use service discovery whenever possible, and fall back to a "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"specific server when no servers can be discovered using DNS."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Si aucun serveur n'est spécifié, le moteur utilise automatiquement la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"découverte de services pour tenter de trouver un serveur. L'utilisateur peut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"aussi choisir d'utiliser des adresses de serveur et de découverte de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"services fixes en insérant un mot-clé spécial, <quote>_srv_</quote>, dans la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"liste des serveurs. L'ordre de préférence est maintenu. Cette fonctionnalité "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"est utile si, par exemple, l'utilisateur préfère utiliser la découverte de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"services chaque fois que possible et se replier vers un serveur spécifique "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"lorsqu'aucun serveur ne peut être découvert à l'aide du DNS."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The domain name"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Le nom de domaine"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Please refer to the <quote>dns_discovery_domain</quote> parameter in the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"<citerefentry> <refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"manvolnum> </citerefentry> manual page for more details."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Se reporter au paramètre <quote>dns_discovery_domain</quote> dans la page de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"manuel <citerefentry><refentrytitle>sssd.conf</refentrytitle> <manvolnum>5</"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"manvolnum></citerefentry> pour plus de détails."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The protocol"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Le protocole"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The queries usually specify _tcp as the protocol. Exceptions are documented "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"in respective option description."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les requêtes spécifient généralement _tcp comme protocole. Les exceptions "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sont documentées dans les descriptions respectives des options."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "See Also"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Voir aussi"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"For more information on the service discovery mechanism, refer to RFC 2782."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour plus d'informations sur le mécanisme de découverte de services, se "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"reporter à la RFC 2782."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: outside any tag (error?)
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "<placeholder type=\"refentryinfo\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "<placeholder type=\"refentryinfo\" id=\"0\"/>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "FAILOVER"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "BASCULEMENT"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The failover feature allows back ends to automatically switch to a different "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"server if the current server fails."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La fonctionnalité de basculement autorise le moteur à basculer "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"automatiquement sur un serveur différent si le serveur actuel est défaillant."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Failover Syntax"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Syntaxe de basculement"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The list of servers is given as a comma-separated list; any number of spaces "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"is allowed around the comma. The servers are listed in order of preference. "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The list can contain any number of servers."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La liste des serveurs est donnée sous forme de liste séparée par des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"virgules ; un nombre quelconque d'espaces est autorisé autour de la virgule. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les serveurs sont répertoriés par ordre de préférence. La liste peut "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"contenir un nombre quelconque de serveurs."
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek#. type: Content of: <refsect1><refsect2><para>
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"For each failover-enabled config option, two variants exist: "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<emphasis>primary</emphasis> and <emphasis>backup</emphasis>. The idea is "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"that servers in the primary list are preferred and backup servers are only "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"searched if no primary servers can be reached. If a backup server is "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"selected, a timeout of 31 seconds is set. After this timeout SSSD will "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"periodically try to reconnect to one of the primary servers. If it succeeds, "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"it will replace the current active (backup) server."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour chaque option de configuration alors que le basculement est activé, il "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"existe deux variantes : <emphasis>primary</emphasis> et <emphasis>backup</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"emphasis>. L'idée est que les serveurs dans la liste principale sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"préférés et les serveurs de secours sont interrogés uniquement si aucun "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"serveur primaire ne peut être atteint. Si un serveur de secours est "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"sélectionné, un délai d'attente de 31 secondes est défini. Après ce délai "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'attente, SSSD tentera périodiquement de se reconnecter à un des serveurs "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"primaires. S'il réussit, il remplacera l'actuel serveur (de secours) actif."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><title>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "The Failover Mechanism"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgstr "Mécanisme de basculement"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"The failover mechanism distinguishes between a machine and a service. The "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"back end first tries to resolve the hostname of a given machine; if this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"resolution attempt fails, the machine is considered offline. No further "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"attempts are made to connect to this machine for any other service. If the "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"resolution attempt succeeds, the back end tries to connect to a service on "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"this machine. If the service connection attempt fails, then only this "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"particular service is considered offline and the back end automatically "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"switches over to the next service. The machine is still considered online "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"and might still be tried for another service."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Le mécanisme de basculement fait la distinction entre une machine et d'un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"service. Le moteur tente d'abord de résoudre le nom d'hôte d'un ordinateur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"donné ; en cas d'échec de cette tentative de résolution, la machine est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"considérée comme hors ligne. Aucune autre tentative n'est faite pour se "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"connecter à cette machine pour tout autre service. Si la tentative de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"résolution réussit, le serveur principal tente de se connecter à un service "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sur cette machine. Si la tentative de connexion de service échoue, alors ce "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"seul service est considéré comme hors ligne et le moteur passe "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"automatiquement au service suivant. La machine est toujours considérée en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ligne et peut toujours être considérée pour une tentative d'accès à un autre "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"Further connection attempts are made to machines or services marked as "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"offline after a specified period of time; this is currently hard coded to 30 "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Les tentatives de connexion ultérieures sont faites vers des machines ou des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"services marqués comme hors connexion après un délai spécifié ; ce délai est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"actuellement spécifié en dur à 30 secondes."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <refsect1><refsect2><para>
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"If there are no more machines to try, the back end as a whole switches to "
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher"offline mode, and then attempts to reconnect every 30 seconds."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"S'il n'y a plus aucune machine à essayer, le moteur dans son ensemble "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"bascule dans le mode hors connexion et tente ensuite de se reconnecter "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"toutes les 30 secondes."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ID MAPPING"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "CORRESPONDANCE D'IDENTIFIANTS"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The ID-mapping feature allows SSSD to act as a client of Active Directory "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"without requiring administrators to extend user attributes to support POSIX "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"attributes for user and group identifiers."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La fonctionnalité de correspondance d'ID permet à SSSD d'agir comme un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"client de Active Directory sans demander aux administrateurs d'étendre les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"attributs utilisateur pour prendre en charge les attributs POSIX pour les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"identifiants d'utilisateur et de groupe."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"NOTE: When ID-mapping is enabled, the uidNumber and gidNumber attributes are "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"ignored. This is to avoid the possibility of conflicts between automatically-"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"assigned and manually-assigned values. If you need to use manually-assigned "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"values, ALL values must be manually-assigned."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : Lorsque la mise en correspondance des ID est activée, les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"attributs uidNumber et gidNumber sont ignorés. Ceci afin d'éviter les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"risques de conflit entre les valeurs attribuées automatiquement et assignées "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manuellement. Si vous avez besoin d'utiliser des valeurs attribuées "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manuellement, TOUTES les valeurs doivent être assignées manuellement."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Mapping Algorithm"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Algorithme de correspondance"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Active Directory provides an objectSID for every user and group object in "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"the directory. This objectSID can be broken up into components that "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"represent the Active Directory domain identity and the relative identifier "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"(RID) of the user or group object."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Active Directory fournit un objectSID pour chaque objet d'utilisateur et de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"groupe dans l'annuaire. Cet objectSID peut être divisé en composants qui "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"représentent l'identité de domaine Active Directory et l'identificateur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"relatif (RID) de l'objet utilisateur ou groupe."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The SSSD ID-mapping algorithm takes a range of available UIDs and divides it "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"into equally-sized component sections - called \"slices\"-. Each slice "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"represents the space available to an Active Directory domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'algorithme de mise en correspondance des ID de SSSD tient un éventail "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'uid disponibles et le divise en sections de même taille, appelées « "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"tranches ». Chaque tranche représente l'espace disponible dans un domaine "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"When a user or group entry for a particular domain is encountered for the "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"first time, the SSSD allocates one of the available slices for that domain. "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"In order to make this slice-assignment repeatable on different client "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"machines, we select the slice based on the following algorithm:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsqu'une entrée d'utilisateur ou de groupe pour un domaine particulier est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"rencontrée pour la première fois, SSSD alloue une des plages disponibles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour ce domaine. Afin de rendre cette affectation de plage reproductible sur "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"les ordinateurs clients différents, l'algorithme de sélection de plage "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"suivant est utilisé :"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The SID string is passed through the murmurhash3 algorithm to convert it to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"a 32-bit hashed value. We then take the modulus of this value with the total "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"number of available slices to pick the slice."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La chaîne du SID est passée par l'intermédiaire de l'algorithme murmurhash3 "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour le convertir en une valeur de hachage de 32 bits. Nous prenons ensuite "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le modulo de cette valeur avec le nombre total des tranches disponibles pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"prendre la tranche."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"NOTE: It is possible to encounter collisions in the hash and subsequent "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"modulus. In these situations, we will select the next available slice, but "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"it may not be possible to reproduce the same exact set of slices on other "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"machines (since the order that they are encountered will determine their "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"slice). In this situation, it is recommended to either switch to using "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"explicit POSIX attributes in Active Directory (disabling ID-mapping) or "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"configure a default domain to guarantee that at least one is always "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"consistent. See <quote>Configuration</quote> for details."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : Il est possible de rencontrer les collisions dans le hachage et "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le modulo en découlant. Dans ces situations, la tranche suivante disponible "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sera sélectionnée, mais il n'est pas possible de reproduire le même jeu "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"exact des tranches sur d'autres machines (puisque l'ordre dans lequel elles "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"sont rencontrées déterminera leur tranche). Dans ce cas, il est recommandé "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de passer à l'utilisation des attributs POSIX explicites dans Active "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Directory (en désactivant la correspondance d'ID) ou configurer un domaine "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"par défaut afin de garantir qu'au moins un est toujours cohérent. Pour plus "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'informations, voir <quote>Configuration</quote>."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Minimum configuration (in the <quote>[domain/DOMAINNAME]</quote> section):"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Configuration minimale (dans la section <quote>[domain/DOMAINNAME]</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para><programlisting>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"ldap_id_mapping = True\n"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"ldap_schema = ad\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_id_mapping = True\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"ldap_schema = ad\n"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The default configuration results in configuring 10,000 slices, each capable "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"of holding up to 200,000 IDs, starting from 10,001 and going up to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"2,000,100,000. This should be sufficient for most deployments."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La configuration par défaut active 10 000 tranches, chacune pouvant contenir "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"jusqu'à 200 000 identifiants, démarrant à 10 001 et allant jusqu'à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"2 000 100 000. Cela devrait être suffisant pour la plupart des déploiements."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Advanced Configuration"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Configuration avancée"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_range_min (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_idmap_range_min (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specifies the lower bound of the range of POSIX IDs to use for mapping "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Active Directory user and group SIDs."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la limite inférieure de la plage d'ID POSIX à utiliser pour la mise "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"en correspondance d'identifiants utilisateurs et groupes Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"NOTE: This option is different from <quote>min_id</quote> in that "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<quote>min_id</quote> acts to filter the output of requests to this domain, "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"whereas this option controls the range of ID assignment. This is a subtle "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"distinction, but the good general advice would be to have <quote>min_id</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"quote> be less-than or equal to <quote>ldap_idmap_range_min</quote>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"NOTE : Cette option est différente de <quote>min_id</quote> en ce sens que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>min_id</quote> agit comme filtre sur le résultat des requêtes vers ce "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine, alors que cette option contrôle les plages de correspondance d'ID. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Il s'agit d'une distinction subtile, mais les bonnes pratiques conseillent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'avoir <quote>min_id</quote> inférieur ou égal à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap_idmap_range_min</quote>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#: include/ldap_id_mapping.xml:95 include/ldap_id_mapping.xml:131
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "Default: 200000"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Par défaut : 200000"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_range_max (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_idmap_range_max (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specifies the upper bound of the range of POSIX IDs to use for mapping "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Active Directory user and group SIDs."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie la limite supérieure de la plage d'ID POSIX à utiliser pour la mise "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"en correspondance d'identifiants utilisateurs et groupes Active Directory."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"NOTE: This option is different from <quote>max_id</quote> in that "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"<quote>max_id</quote> acts to filter the output of requests to this domain, "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"whereas this option controls the range of ID assignment. This is a subtle "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"distinction, but the good general advice would be to have <quote>max_id</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"quote> be greater-than or equal to <quote>ldap_idmap_range_max</quote>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"NOTE : Cette option est différente de <quote>max_id</quote> en ce sens que "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>max_id</quote> agit comme filtre sur le résultat des requêtes vers ce "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine, alors que cette option contrôle les plages de correspondance d'ID. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Il s'agit d'une distinction subtile, mais les bonnes pratiques conseillent "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'avoir <quote>max_id</quote> supérieur ou égal à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap_idmap_range_max</quote>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "Default: 2000200000"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Par défaut : 2000200000"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_range_size (integer)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_idmap_range_size (integer)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specifies the number of IDs available for each slice. If the range size "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"does not divide evenly into the min and max values, it will create as many "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"complete slices as it can."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifie le nombre d'identifiants pour chaque tranche. Si la taille de la "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"plage ne divise pas uniformément dans les valeurs minimale et maximale, des "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"tranches complètes seront créées autant que possible."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_default_domain_sid (string)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "ldap_idmap_default_domain_sid (chaîne)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Specify the domain SID of the default domain. This will guarantee that this "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"domain will always be assigned to slice zero in the ID map, bypassing the "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"murmurhash algorithm described above."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Spécifier le SID de domaine du domaine par défaut. Cela garantira que ce "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine est toujours affecté à la tranche zéro dans la carte d'ID, sans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"passer par l'algorithme murmurhash décrit ci-dessus."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_default_domain (string)"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "ldap_idmap_default_domain (chaîne)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "Specify the name of the default domain."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgstr "Spécifier le nom de domaine par défaut."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><term>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "ldap_idmap_autorid_compat (boolean)"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "ldap_idmap_autorid_compat (boolean)"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"Changes the behavior of the ID-mapping algorithm to behave more similarly to "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"winbind's <quote>idmap_autorid</quote> algorithm."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Modifie le comportement de l'algorithme de mise en correspondance des ID "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"afin qu'il se comporte de manière identique à celui <quote>idmap_autorid</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"quote> de winbind."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"When this option is configured, domains will be allocated starting with "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"slice zero and increasing monatomically with each additional domain."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Lorsque cette option est configurée, les domaines seront alloués en "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"commençant par la tranche zéro et augmentant de manière monotone pour chaque "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine supplémentaire."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><refsect2><refsect3><variablelist><varlistentry><listitem><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"NOTE: This algorithm is non-deterministic (it depends on the order that "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"users and groups are requested). If this mode is required for compatibility "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"with machines running winbind, it is recommended to also use the "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<quote>ldap_idmap_default_domain_sid</quote> option to guarantee that at "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"least one domain is consistently allocated to slice zero."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Remarque : Cet algorithme n'est pas déterministe (il dépend de l'ordre dans "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"lequel utilisateurs et groupes sont invités). Si ce mode est nécessaire pour "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"assurer la compatibilité avec les ordinateurs qui utilisent winbind, il est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"recommandé d'utiliser également l'option "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<quote>ldap_idmap_default_domain_sid</quote> pour garantir qu'au moins un "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"domaine est systématiquement alloué à la tranche zéro."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <varlistentry><term>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "<option>-?</option>,<option>--help</option>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "<option>-?</option>,<option>--help</option>"
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallagher#. type: Content of: <varlistentry><listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#: include/param_help.xml:7 include/param_help_py.xml:7
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgid "Display help message and exit."
52261fe16203dec6e6f69177c6d0a810b47d073fStephen Gallaghermsgstr "Affiche l'aide et quitte."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <varlistentry><term>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgid "<option>-h</option>,<option>--help</option>"
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozekmsgstr "<option>-h</option>,<option>--help</option>"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"Bit mask that indicates which debug levels will be visible. 0x0010 is the "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"default value as well as the lowest allowed value, 0xFFF0 is the most "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"verbose mode. This setting overrides the settings from config file."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Un masque de bits qui indique quels niveaux de débogage seront visibles. 0 x "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"0010 est la valeur par défaut ainsi que la plus basse autorisée, 0xFFF0 est "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"le mode le plus détaillé. Ce paramètre prend le pas sur les paramètres du "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fichier de configuration."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "Currently supported debug levels:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "Niveaux de débogage actuellement pris en charge :"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x0010</emphasis>: Fatal failures. Anything that would prevent "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"SSSD from starting up or causes it to cease running."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x0010</emphasis> : défaillances fatales. Tout ce qui empêcherait "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"SSSD de démarrer ou provoquerait son arrêt."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x0020</emphasis>: Critical failures. An error that doesn't kill "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"the SSSD, but one that indicates that at least one major feature is not "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"going to work properly."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x0020</emphasis> : échecs critiques. Une erreur qui ne tue pas "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"SSSD, mais qui indique qu'au moins une caractéristique majeure ne pourra pas "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"fonctionner correctement."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x0040</emphasis>: Serious failures. An error announcing that a "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"particular request or operation has failed."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x0040</emphasis> : défaillances graves. Une erreur qui annonce "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"qu'une requête particulière ou une opération a échoué."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x0080</emphasis>: Minor failures. These are the errors that would "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"percolate down to cause the operation failure of 2."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x0080</emphasis> : erreurs mineures. Ce sont les erreurs qui "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"seraient susceptibles d'empirer pour provoquer l'erreur en 2."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<emphasis>0x0100</emphasis>: Configuration settings."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "<emphasis>0x0100</emphasis> : paramètres de configuration."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<emphasis>0x0200</emphasis>: Function data."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "<emphasis>0x0200</emphasis> : données de fonctionnement."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<emphasis>0x0400</emphasis>: Trace messages for operation functions."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "<emphasis>0x0400</emphasis> : traçage des fonctions opérationnelles."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x1000</emphasis>: Trace messages for internal control functions."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x1000</emphasis> : traçage des fonctions de contrôles internes."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>0x2000</emphasis>: Contents of function-internal variables that "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"may be interesting."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>0x2000</emphasis> : contenu des variables internes de fonctions "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"pouvent être intéressantes."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallaghermsgid "<emphasis>0x4000</emphasis>: Extremely low-level tracing information."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozekmsgstr "<emphasis>0x4000</emphasis> : informations de traçage de bas niveau."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"To log required debug levels, simply add their numbers together as shown in "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"following examples:"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour activer les niveaux de débogage requis, il suffit de faire la somme de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"l'ensemble des numéros tel qu'illustré dans les exemples suivants :"
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>Example</emphasis>: To log fatal failures, critical failures, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"serious failures and function data use 0x0270."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>Exemple</emphasis> : pour suivre erreurs fatales, critiques, "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"graves et les données de fonction, utiliser 0x0270."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>Example</emphasis>: To log fatal failures, configuration settings, "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"function data, trace messages for internal control functions use 0x1310."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>Exemple</emphasis> : pour consigner les erreurs fatales, les "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"paramètres de configuration, les données de fonction, les messages de trace "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour les fonctions de contrôle interne, utiliser 0x1310."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: <listitem><para>
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis>Note</emphasis>: This is new format of debug levels introduced in "
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"1.7.0. Older format (numbers from 0-10) is compatible but deprecated."
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"<emphasis>Note</emphasis> : il s'agit d'un nouveau format des niveaux de "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"débogage introduit dans la version 1.7.0. L'ancien format (nombres de 0 à "
b20208b80e99abb79c00d5ec526caa9465859c52Jakub Hrozek"10) est compatible mais déconseillé et voué à disparaître."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher#. type: Content of: outside any tag (error?)
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"<emphasis> This is an experimental feature, please use http://fedorahosted."
2ea6196484055397cc4bc011c5960f790431fa9dStephen Gallagher"org/sssd to report any issues. </emphasis>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<emphasis>Il s'agit d'une fonctionnalité expérimentale, utiliser http://"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"fedorahosted.org/sssd pour signaler les problèmes.</emphasis>"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><title>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallaghermsgid "THE LOCAL DOMAIN"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "LE DOMAINE LOCAL"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"In order to function correctly, a domain with <quote>id_provider=local</"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"quote> must be created and the SSSD must be running."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour fonctionner correctement, un domaine avec <quote>id_provider = local</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"quote> doit être créé et SSSD doit s'exécuter."
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher#. type: Content of: <refsect1><para>
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"The administrator might want to use the SSSD local users instead of "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"traditional UNIX users in cases where the group nesting (see <citerefentry> "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</manvolnum> </"
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"citerefentry>) is needed. The local users are also useful for testing and "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"development of the SSSD without having to deploy a full remote server. The "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"<command>sss_user*</command> and <command>sss_group*</command> tools use a "
e59e09b5010f262228bbdeb92a79b733bf5854b3Stephen Gallagher"local LDB storage to store users and groups."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"L'administrateur peut vouloir utiliser les utilisateurs locaux SSSD au lieu "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"des utilisateurs UNIX traditionnels dans les cas où l'imbrication de groupes "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"(cf. <citerefentry><refentrytitle>sss_groupadd</refentrytitle> <manvolnum>8</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum></citerefentry>) est nécessaire. Les utilisateurs locaux sont "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"également utiles pour les tests et le développement de SSSD sans avoir à "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"déployer un serveur distant complet. Les outils <command>sss_user *</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"command> et <command>sss_group *</command> utilisent alors un stockage local "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de type LDB pour les utilisateurs et les groupes."
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <refsect1><title>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgid "SEE ALSO"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozekmsgstr "VOIR AUSSI"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek#. type: Content of: <refsect1><para>
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
64a424ec1b268427822c646f7781e26e56c197f6Jakub Hrozek"manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
65a9065538fd85e6ead925d344e6b421900eb8c2Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<citerefentry> <refentrytitle>sssd</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd.conf</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd-ldap</refentrytitle><manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd-krb5</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd-simple</refentrytitle><manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sssd-ipa</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>5</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd-ad</refentrytitle><manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <phrase condition=\"with_sudo\"> <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd-sudo</refentrytitle> <manvolnum>5</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, </phrase> <citerefentry> <refentrytitle>sss_cache</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_debuglevel</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_groupadd</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_groupdel</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_groupshow</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_groupmod</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_useradd</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_userdel</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_usermod</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_obfuscate</refentrytitle><manvolnum>8</manvolnum> </"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"citerefentry>, <citerefentry> <refentrytitle>sss_seed</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>, <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sssd_krb5_locator_plugin</refentrytitle><manvolnum>8</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry>, <phrase condition=\"with_ssh\"> <citerefentry> "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"<refentrytitle>sss_ssh_authorizedkeys</refentrytitle> <manvolnum>8</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry>, <citerefentry> "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<refentrytitle>sss_ssh_knownhostsproxy</refentrytitle> <manvolnum>8</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"manvolnum> </citerefentry>, </phrase> <citerefentry> <refentrytitle>pam_sss</"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"refentrytitle><manvolnum>8</manvolnum> </citerefentry>."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"An optional base DN, search scope and LDAP filter to restrict LDAP searches "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"for this attribute type."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Un DN de base facultatif, une étendue de recherche et un filtre LDAP afin de "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"restreindre les recherches LDAP pour ce type d'attribut."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para><programlisting>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "search_base[?scope?[filter][?search_base?scope?[filter]]*]\n"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozekmsgid "syntax: <placeholder type=\"programlisting\" id=\"0\"/>"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozekmsgstr "syntaxe : <placeholder type=\"programlisting\" id=\"0\"/>"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#: include/ldap_search_bases_experimental.xml:13
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"The scope can be one of \"base\", \"onelevel\" or \"subtree\". The filter "
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"must be a valid LDAP search filter as specified by http://www.ietf.org/rfc/"
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"La portée peut être « base », un « onelevel » ou « subtree ». Le filtre doit "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"être un filtre de recherche LDAP valide tel que spécifié par http://www.ietf."
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#. type: Content of: <listitem><para>
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek#: include/ldap_search_bases_experimental.xml:19
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"For examples of this syntax, please refer to the <quote>ldap_search_base</"
7a14e8f66c0e932fe2954d792614a3b61d444bd1Jakub Hrozek"quote> examples section."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Pour obtenir des exemples de cette syntaxe, reportez-vous à la section "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"d'exemples <quote>ldap_search_base</quote>."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <listitem><para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#: include/ldap_search_bases_experimental.xml:27
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"Please note that specifying scope or filter is not supported for searches "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"against an Active Directory Server that might yield a large number of "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"results and trigger the Range Retrieval extension in the response."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Noter que la spécification de portée ou de filtre n'est pas prise en charge "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"pour les recherches sur un serveur Active Directory qui serait susceptible "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"de produire un grand nombre de résultats et de déclencher l'extension Range "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Retrieval dans sa réponse."
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek#. type: Content of: <para>
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"Please note that the automounter only reads the master map on startup, so if "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"any autofs-related changes are made to the sssd.conf, you typically also "
524ceecc11f3d458eb3c1cf1489c3ff6ccb22226Jakub Hrozek"need to restart the automounter daemon after restarting the SSSD."
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Veuillez noter que l'automounter ne lit que la carte maîtresse au démarrage. "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"Ainsi, si des modifications liées à autofs sont apportées à sssd.conf, vous "
6463ed1dcdd45416468b3fa178bd856b5a9ed2c3Jakub Hrozek"devrez généralement redémarrer le démon automounter après le redémarrage de "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "override_homedir (string)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "override_homedir (chaîne)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "UID number"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "numéro d'UID"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "domain name"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "nom de domaine"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "fully qualified user name (user@domain)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "nom d'utilisateur pleinement qualifié (utilisateur@domaine)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><term>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><variablelist><varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "The original home directory retrieved from the identity provider."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Le répertoire utilisateur original provenant du fournisseur d'identité."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Override the user's home directory. You can either provide an absolute value "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"or a template. In the template, the following sequences are substituted: "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"<placeholder type=\"variablelist\" id=\"0\"/>"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"Réécrit le répertoire personnel de l'utilisateur. Il est possible de fournir "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"une valeur absolue ou un patron. Dans le cas d'un patron, les séquences "
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"suivantes sont substituées :<placeholder type=\"variablelist\" id=\"0\"/>"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "This option can also be set per-domain."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Cette option peut aussi être définie pour chaque domaine."
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para><programlisting>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"override_homedir = /home/%u\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek"override_homedir = /home/%u\n"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozek#. type: Content of: <varlistentry><listitem><para>
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgid "Default: Not set (SSSD will use the value retrieved from LDAP)"
2cb6f28b3a12bb714bf14494d31eb6b6fff64b8bJakub Hrozekmsgstr "Par défaut : Indéfini (SSSD utilisera la valeur récupérée de LDAP)"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#~ msgid "Default: FILE:%d/krb5cc_%U_XXXXXX"
a9228ebcce14888b3123bdf46e610e0900bcd2ccJakub Hrozek#~ msgstr "Par défaut : FICHIER:%d/krb5cc_%U_XXXXXX"