diff --git a/SOURCES/0048-pot-update-pot-files.patch b/SOURCES/0048-pot-update-pot-files.patch
new file mode 100644
index 0000000..8e1141a
--- /dev/null
+++ b/SOURCES/0048-pot-update-pot-files.patch
@@ -0,0 +1,2230 @@
+From 6add2ef311815a25598e1ec90d28119636976e21 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
+Date: Fri, 5 Feb 2021 11:59:35 +0100
+Subject: [PATCH] pot: update pot files
+
+---
+ po/sssd.pot | 860 ++++++++++++++++++++++++++--------------------------
+ 1 file changed, 436 insertions(+), 424 deletions(-)
+
+diff --git a/po/sssd.pot b/po/sssd.pot
+index 669c22846..19f6994ff 100644
+--- a/po/sssd.pot
++++ b/po/sssd.pot
+@@ -8,7 +8,7 @@ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+-"POT-Creation-Date: 2020-10-12 12:21+0200\n"
++"POT-Creation-Date: 2021-02-05 11:58+0100\n"
+ "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+ "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+ "Language-Team: LANGUAGE <LL@li.org>\n"
+@@ -153,7 +153,7 @@ msgid "Entry cache background update timeout length (seconds)"
+ msgstr ""
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+-#: src/config/SSSDConfig/sssdoptions.py:115
++#: src/config/SSSDConfig/sssdoptions.py:117
+ msgid "Negative cache timeout length (seconds)"
+ msgstr ""
+ 
+@@ -329,1653 +329,1665 @@ msgstr ""
+ msgid "When shall the PAM responder force an initgroups request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:109
++#: src/config/SSSDConfig/sssdoptions.py:107
++msgid "List of PAM services that are allowed to authenticate with GSSAPI."
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:108
++msgid "Whether to match authenticated UPN with target user"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:110
++#: src/config/SSSDConfig/sssdoptions.py:112
+ msgid "If true, SSSD will switch back to lower-wins ordering logic"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:111
++#: src/config/SSSDConfig/sssdoptions.py:113
+ msgid ""
+ "Maximum number of rules that can be refreshed at once. If this is exceeded, "
+ "full refresh is performed."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:118
++#: src/config/SSSDConfig/sssdoptions.py:120
+ msgid "Whether to hash host names and addresses in the known_hosts file"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:119
++#: src/config/SSSDConfig/sssdoptions.py:121
+ msgid ""
+ "How many seconds to keep a host in the known_hosts file after its host keys "
+ "were requested"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:121
++#: src/config/SSSDConfig/sssdoptions.py:123
+ msgid "Path to storage of trusted CA certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:122
++#: src/config/SSSDConfig/sssdoptions.py:124
+ msgid "Allow to generate ssh-keys from certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:123
++#: src/config/SSSDConfig/sssdoptions.py:125
+ msgid ""
+ "Use the following matching rules to filter the certificates for ssh-key "
+ "generation"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:127
++#: src/config/SSSDConfig/sssdoptions.py:129
+ msgid "List of UIDs or user names allowed to access the PAC responder"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:128
++#: src/config/SSSDConfig/sssdoptions.py:130
+ msgid "How long the PAC data is considered valid"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:131
++#: src/config/SSSDConfig/sssdoptions.py:133
+ msgid "List of user attributes the InfoPipe is allowed to publish"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:134
++#: src/config/SSSDConfig/sssdoptions.py:136
+ msgid "The provider where the secrets will be stored in"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:135
++#: src/config/SSSDConfig/sssdoptions.py:137
+ msgid "The maximum allowed number of nested containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:136
++#: src/config/SSSDConfig/sssdoptions.py:138
+ msgid "The maximum number of secrets that can be stored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:137
++#: src/config/SSSDConfig/sssdoptions.py:139
+ msgid "The maximum number of secrets that can be stored per UID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:138
++#: src/config/SSSDConfig/sssdoptions.py:140
+ msgid "The maximum payload size of a secret in kilobytes"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:140
++#: src/config/SSSDConfig/sssdoptions.py:142
+ msgid "The URL Custodia server is listening on"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:141
++#: src/config/SSSDConfig/sssdoptions.py:143
+ msgid "The method to use when authenticating to a Custodia server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:142
++#: src/config/SSSDConfig/sssdoptions.py:144
+ msgid ""
+ "The name of the headers that will be added into a HTTP request with the "
+ "value defined in auth_header_value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:144
++#: src/config/SSSDConfig/sssdoptions.py:146
+ msgid "The value sssd-secrets would use for auth_header_name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:145
++#: src/config/SSSDConfig/sssdoptions.py:147
+ msgid ""
+ "The list of the headers to forward to the Custodia server together with the "
+ "request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:146
++#: src/config/SSSDConfig/sssdoptions.py:148
+ msgid ""
+ "The username to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:147
++#: src/config/SSSDConfig/sssdoptions.py:149
+ msgid ""
+ "The password to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:148
++#: src/config/SSSDConfig/sssdoptions.py:150
+ msgid "If true peer's certificate is verified if proxy_url uses https protocol"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:149
++#: src/config/SSSDConfig/sssdoptions.py:151
+ msgid ""
+ "If false peer's certificate may contain different hostname than proxy_url "
+ "when https protocol is used"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:151
++#: src/config/SSSDConfig/sssdoptions.py:153
+ msgid "Path to directory where certificate authority certificates are stored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:152
++#: src/config/SSSDConfig/sssdoptions.py:154
+ msgid "Path to file containing server's CA certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:153
++#: src/config/SSSDConfig/sssdoptions.py:155
+ msgid "Path to file containing client's certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:154
++#: src/config/SSSDConfig/sssdoptions.py:156
+ msgid "Path to file containing client's private key"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:157
++#: src/config/SSSDConfig/sssdoptions.py:159
+ msgid ""
+ "One of the following strings specifying the scope of session recording: none "
+ "- No users are recorded. some - Users/groups specified by users and groups "
+ "options are recorded. all - All users are recorded."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:160
++#: src/config/SSSDConfig/sssdoptions.py:162
+ msgid ""
+ "A comma-separated list of users which should have session recording enabled. "
+ "Matches user names as returned by NSS. I.e. after the possible space "
+ "replacement, case changes, etc."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:162
++#: src/config/SSSDConfig/sssdoptions.py:164
+ msgid ""
+ "A comma-separated list of groups, members of which should have session "
+ "recording enabled. Matches group names as returned by NSS. I.e. after the "
+ "possible space replacement, case changes, etc."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:165
++#: src/config/SSSDConfig/sssdoptions.py:167
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:166
++#: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:170
++#: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:171
++#: src/config/SSSDConfig/sssdoptions.py:173
+ msgid "Authentication provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:172
++#: src/config/SSSDConfig/sssdoptions.py:174
+ msgid "Access control provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:173
++#: src/config/SSSDConfig/sssdoptions.py:175
+ msgid "Password change provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:174
++#: src/config/SSSDConfig/sssdoptions.py:176
+ msgid "SUDO provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:175
++#: src/config/SSSDConfig/sssdoptions.py:177
+ msgid "Autofs provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:176
++#: src/config/SSSDConfig/sssdoptions.py:178
+ msgid "Host identity provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:177
++#: src/config/SSSDConfig/sssdoptions.py:179
+ msgid "SELinux provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:178
++#: src/config/SSSDConfig/sssdoptions.py:180
+ msgid "Session management provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:179
++#: src/config/SSSDConfig/sssdoptions.py:181
+ msgid "Resolver provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:182
++#: src/config/SSSDConfig/sssdoptions.py:184
+ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:183
++#: src/config/SSSDConfig/sssdoptions.py:185
+ msgid "Enable or disable the domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:184
++#: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:185
++#: src/config/SSSDConfig/sssdoptions.py:187
+ msgid "Maximum user ID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:186
++#: src/config/SSSDConfig/sssdoptions.py:188
+ msgid "Enable enumerating all users/groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:187
++#: src/config/SSSDConfig/sssdoptions.py:189
+ msgid "Cache credentials for offline login"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:188
++#: src/config/SSSDConfig/sssdoptions.py:190
+ msgid "Display users/groups in fully-qualified form"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:189
++#: src/config/SSSDConfig/sssdoptions.py:191
+ msgid "Don't include group members in group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:190
+-#: src/config/SSSDConfig/sssdoptions.py:200
+-#: src/config/SSSDConfig/sssdoptions.py:201
++#: src/config/SSSDConfig/sssdoptions.py:192
+ #: src/config/SSSDConfig/sssdoptions.py:202
+ #: src/config/SSSDConfig/sssdoptions.py:203
+ #: src/config/SSSDConfig/sssdoptions.py:204
+ #: src/config/SSSDConfig/sssdoptions.py:205
+ #: src/config/SSSDConfig/sssdoptions.py:206
++#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:208
+ msgid "Entry cache timeout length (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:191
++#: src/config/SSSDConfig/sssdoptions.py:193
+ msgid ""
+ "Restrict or prefer a specific address family when performing DNS lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:192
++#: src/config/SSSDConfig/sssdoptions.py:194
+ msgid "How long to keep cached entries after last successful login (days)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:193
++#: src/config/SSSDConfig/sssdoptions.py:195
+ msgid ""
+ "How long should SSSD talk to single DNS server before trying next server "
+ "(miliseconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:195
++#: src/config/SSSDConfig/sssdoptions.py:197
+ msgid "How long should keep trying to resolve single DNS query (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:196
++#: src/config/SSSDConfig/sssdoptions.py:198
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:197
++#: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "The domain part of service discovery DNS query"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:198
++#: src/config/SSSDConfig/sssdoptions.py:200
+ msgid "Override GID value from the identity provider with this value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:199
++#: src/config/SSSDConfig/sssdoptions.py:201
+ msgid "Treat usernames as case sensitive"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:209
+ msgid "How often should expired entries be refreshed in background"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:208
++#: src/config/SSSDConfig/sssdoptions.py:210
+ msgid "Whether to automatically update the client's DNS entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:209
+-#: src/config/SSSDConfig/sssdoptions.py:239
++#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:241
+ msgid "The TTL to apply to the client's DNS entry after updating it"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:210
+-#: src/config/SSSDConfig/sssdoptions.py:240
++#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:242
+ msgid "The interface whose IP should be used for dynamic DNS updates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:213
+ msgid "How often to periodically update the client's DNS entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:214
+ msgid "Whether the provider should explicitly update the PTR record as well"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:215
+ msgid "Whether the nsupdate utility should default to using TCP"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:216
+ msgid "What kind of authentication should be used to perform the DNS update"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:215
++#: src/config/SSSDConfig/sssdoptions.py:217
+ msgid "Override the DNS server used to perform the DNS update"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:216
++#: src/config/SSSDConfig/sssdoptions.py:218
+ msgid "Control enumeration of trusted domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:217
++#: src/config/SSSDConfig/sssdoptions.py:219
+ msgid "How often should subdomains list be refreshed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:218
++#: src/config/SSSDConfig/sssdoptions.py:220
+ msgid "List of options that should be inherited into a subdomain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:219
++#: src/config/SSSDConfig/sssdoptions.py:221
+ msgid "Default subdomain homedir value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:220
++#: src/config/SSSDConfig/sssdoptions.py:222
+ msgid "How long can cached credentials be used for cached authentication"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:221
++#: src/config/SSSDConfig/sssdoptions.py:223
+ msgid "Whether to automatically create private groups for users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:222
++#: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "Display a warning N days before the password expires."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:223
++#: src/config/SSSDConfig/sssdoptions.py:225
+ msgid ""
+ "Various tags stored by the realmd configuration service for this domain."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:224
++#: src/config/SSSDConfig/sssdoptions.py:226
+ msgid ""
+ "The provider which should handle fetching of subdomains. This value should "
+ "be always the same as id_provider."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:226
++#: src/config/SSSDConfig/sssdoptions.py:228
+ msgid ""
+ "How many seconds to keep a host ssh key after refresh. IE how long to cache "
+ "the host key for."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:228
++#: src/config/SSSDConfig/sssdoptions.py:230
+ msgid ""
+ "If 2-Factor-Authentication (2FA) is used and credentials should be saved "
+ "this value determines the minimal length the first authentication factor "
+ "(long term password) must have to be saved as SHA512 hash into the cache."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:234
++#: src/config/SSSDConfig/sssdoptions.py:236
+ msgid "IPA domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:235
++#: src/config/SSSDConfig/sssdoptions.py:237
+ msgid "IPA server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:236
++#: src/config/SSSDConfig/sssdoptions.py:238
+ msgid "Address of backup IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:237
++#: src/config/SSSDConfig/sssdoptions.py:239
+ msgid "IPA client hostname"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:238
++#: src/config/SSSDConfig/sssdoptions.py:240
+ msgid "Whether to automatically update the client's DNS entry in FreeIPA"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:241
++#: src/config/SSSDConfig/sssdoptions.py:243
+ msgid "Search base for HBAC related objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:242
++#: src/config/SSSDConfig/sssdoptions.py:244
+ msgid ""
+ "The amount of time between lookups of the HBAC rules against the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:243
++#: src/config/SSSDConfig/sssdoptions.py:245
+ msgid ""
+ "The amount of time in seconds between lookups of the SELinux maps against "
+ "the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:245
++#: src/config/SSSDConfig/sssdoptions.py:247
+ msgid "If set to false, host argument given by PAM will be ignored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:246
++#: src/config/SSSDConfig/sssdoptions.py:248
+ msgid "The automounter location this IPA client is using"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:247
++#: src/config/SSSDConfig/sssdoptions.py:249
+ msgid "Search base for object containing info about IPA domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:248
++#: src/config/SSSDConfig/sssdoptions.py:250
+ msgid "Search base for objects containing info about ID ranges"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:249
+-#: src/config/SSSDConfig/sssdoptions.py:303
++#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:305
+ msgid "Enable DNS sites - location based service discovery"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:250
++#: src/config/SSSDConfig/sssdoptions.py:252
+ msgid "Search base for view containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:253
+ msgid "Objectclass for view containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:252
++#: src/config/SSSDConfig/sssdoptions.py:254
+ msgid "Attribute with the name of the view"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:255
+ msgid "Objectclass for override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:254
++#: src/config/SSSDConfig/sssdoptions.py:256
+ msgid "Attribute with the reference to the original object"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:255
++#: src/config/SSSDConfig/sssdoptions.py:257
+ msgid "Objectclass for user override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:256
++#: src/config/SSSDConfig/sssdoptions.py:258
+ msgid "Objectclass for group override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:257
++#: src/config/SSSDConfig/sssdoptions.py:259
+ msgid "Search base for Desktop Profile related objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:258
++#: src/config/SSSDConfig/sssdoptions.py:260
+ msgid ""
+ "The amount of time in seconds between lookups of the Desktop Profile rules "
+ "against the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:260
++#: src/config/SSSDConfig/sssdoptions.py:262
+ msgid ""
+ "The amount of time in minutes between lookups of Desktop Profiles rules "
+ "against the IPA server when the last request did not find any rule"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:263
++#: src/config/SSSDConfig/sssdoptions.py:265
+ msgid "The LDAP attribute that contains FQDN of the host."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:264
+-#: src/config/SSSDConfig/sssdoptions.py:287
++#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:289
+ msgid "The object class of a host entry in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:265
++#: src/config/SSSDConfig/sssdoptions.py:267
+ msgid "Use the given string as search base for host objects."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:268
+ msgid "The LDAP attribute that contains the host's SSH public keys."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:267
++#: src/config/SSSDConfig/sssdoptions.py:269
+ msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:269
++#: src/config/SSSDConfig/sssdoptions.py:271
+ msgid ""
+ "The LDAP attribute that lists FQDNs of hosts and host groups that are "
+ "members of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:271
++#: src/config/SSSDConfig/sssdoptions.py:273
+ msgid ""
+ "The LDAP attribute that lists hosts and host groups that are direct members "
+ "of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:273
++#: src/config/SSSDConfig/sssdoptions.py:275
+ msgid "The LDAP attribute that lists netgroup's memberships."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:274
++#: src/config/SSSDConfig/sssdoptions.py:276
+ msgid ""
+ "The LDAP attribute that lists system users and groups that are direct "
+ "members of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:276
++#: src/config/SSSDConfig/sssdoptions.py:278
+ msgid "The LDAP attribute that corresponds to the netgroup name."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:277
++#: src/config/SSSDConfig/sssdoptions.py:279
+ msgid "The object class of a netgroup entry in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:278
++#: src/config/SSSDConfig/sssdoptions.py:280
+ msgid ""
+ "The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:279
++#: src/config/SSSDConfig/sssdoptions.py:281
+ msgid ""
+ "The LDAP attribute that contains whether or not is user map enabled for "
+ "usage."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:281
++#: src/config/SSSDConfig/sssdoptions.py:283
+ msgid "The LDAP attribute that contains host category such as 'all'."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:282
++#: src/config/SSSDConfig/sssdoptions.py:284
+ msgid ""
+ "The LDAP attribute that contains all hosts / hostgroups this rule match "
+ "against."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:284
++#: src/config/SSSDConfig/sssdoptions.py:286
+ msgid ""
+ "The LDAP attribute that contains all users / groups this rule match against."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:286
++#: src/config/SSSDConfig/sssdoptions.py:288
+ msgid "The LDAP attribute that contains the name of SELinux usermap."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:288
++#: src/config/SSSDConfig/sssdoptions.py:290
+ msgid ""
+ "The LDAP attribute that contains DN of HBAC rule which can be used for "
+ "matching instead of memberUser and memberHost."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:290
++#: src/config/SSSDConfig/sssdoptions.py:292
+ msgid "The LDAP attribute that contains SELinux user string itself."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:291
++#: src/config/SSSDConfig/sssdoptions.py:293
+ msgid "The LDAP attribute that contains user category such as 'all'."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:292
++#: src/config/SSSDConfig/sssdoptions.py:294
+ msgid "The LDAP attribute that contains unique ID of the user map."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:293
++#: src/config/SSSDConfig/sssdoptions.py:295
+ msgid ""
+ "The option denotes that the SSSD is running on IPA server and should perform "
+ "lookups of users and groups from trusted domains differently."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:295
++#: src/config/SSSDConfig/sssdoptions.py:297
+ msgid "Use the given string as search base for trusted domains."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:298
++#: src/config/SSSDConfig/sssdoptions.py:300
+ msgid "Active Directory domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:299
++#: src/config/SSSDConfig/sssdoptions.py:301
+ msgid "Enabled Active Directory domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:300
++#: src/config/SSSDConfig/sssdoptions.py:302
+ msgid "Active Directory server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:301
++#: src/config/SSSDConfig/sssdoptions.py:303
+ msgid "Active Directory backup server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:302
++#: src/config/SSSDConfig/sssdoptions.py:304
+ msgid "Active Directory client hostname"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:304
+-#: src/config/SSSDConfig/sssdoptions.py:497
++#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:500
+ msgid "LDAP filter to determine access privileges"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:305
++#: src/config/SSSDConfig/sssdoptions.py:307
+ msgid "Whether to use the Global Catalog for lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:308
+ msgid "Operation mode for GPO-based access control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:307
++#: src/config/SSSDConfig/sssdoptions.py:309
+ msgid ""
+ "The amount of time between lookups of the GPO policy files against the AD "
+ "server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:310
+ msgid ""
+ "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy "
+ "settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:310
++#: src/config/SSSDConfig/sssdoptions.py:312
+ msgid ""
+ "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight "
+ "policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:312
++#: src/config/SSSDConfig/sssdoptions.py:314
+ msgid ""
+ "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:313
++#: src/config/SSSDConfig/sssdoptions.py:315
+ msgid ""
+ "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:314
++#: src/config/SSSDConfig/sssdoptions.py:316
+ msgid ""
+ "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:315
++#: src/config/SSSDConfig/sssdoptions.py:317
+ msgid "PAM service names for which GPO-based access is always granted"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:316
++#: src/config/SSSDConfig/sssdoptions.py:318
+ msgid "PAM service names for which GPO-based access is always denied"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:317
++#: src/config/SSSDConfig/sssdoptions.py:319
+ msgid ""
+ "Default logon right (or permit/deny) to use for unmapped PAM service names"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:318
++#: src/config/SSSDConfig/sssdoptions.py:320
+ msgid "a particular site to be used by the client"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:319
++#: src/config/SSSDConfig/sssdoptions.py:321
+ msgid ""
+ "Maximum age in days before the machine account password should be renewed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:321
++#: src/config/SSSDConfig/sssdoptions.py:323
+ msgid "Option for tuning the machine account renewal task"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:322
++#: src/config/SSSDConfig/sssdoptions.py:324
+ msgid "Whether to update the machine account password in the Samba database"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:324
++#: src/config/SSSDConfig/sssdoptions.py:326
+ msgid "Use LDAPS port for LDAP and Global Catalog requests"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:325
++#: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:328
+-#: src/config/SSSDConfig/sssdoptions.py:329
++#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:331
+ msgid "Kerberos server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:332
+ msgid "Kerberos backup server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:331
++#: src/config/SSSDConfig/sssdoptions.py:333
+ msgid "Kerberos realm"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:334
+ msgid "Authentication timeout"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:333
++#: src/config/SSSDConfig/sssdoptions.py:335
+ msgid "Whether to create kdcinfo files"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:334
++#: src/config/SSSDConfig/sssdoptions.py:336
+ msgid "Where to drop krb5 config snippets"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:337
++#: src/config/SSSDConfig/sssdoptions.py:339
+ msgid "Directory to store credential caches"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:338
++#: src/config/SSSDConfig/sssdoptions.py:340
+ msgid "Location of the user's credential cache"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:339
++#: src/config/SSSDConfig/sssdoptions.py:341
+ msgid "Location of the keytab to validate credentials"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:340
++#: src/config/SSSDConfig/sssdoptions.py:342
+ msgid "Enable credential validation"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:341
++#: src/config/SSSDConfig/sssdoptions.py:343
+ msgid "Store password if offline for later online authentication"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:342
++#: src/config/SSSDConfig/sssdoptions.py:344
+ msgid "Renewable lifetime of the TGT"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:343
++#: src/config/SSSDConfig/sssdoptions.py:345
+ msgid "Lifetime of the TGT"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:344
++#: src/config/SSSDConfig/sssdoptions.py:346
+ msgid "Time between two checks for renewal"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:345
++#: src/config/SSSDConfig/sssdoptions.py:347
+ msgid "Enables FAST"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:346
++#: src/config/SSSDConfig/sssdoptions.py:348
+ msgid "Selects the principal to use for FAST"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:347
++#: src/config/SSSDConfig/sssdoptions.py:349
+ msgid "Enables principal canonicalization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:348
++#: src/config/SSSDConfig/sssdoptions.py:350
+ msgid "Enables enterprise principals"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:349
+-msgid "A mapping from user names to Kerberos principal names"
++#: src/config/SSSDConfig/sssdoptions.py:351
++msgid "Enables using of subdomains realms for authentication"
+ msgstr ""
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:352
+-#: src/config/SSSDConfig/sssdoptions.py:353
+-msgid "Server where the change password service is running if not on the KDC"
++msgid "A mapping from user names to Kerberos principal names"
+ msgstr ""
+ 
++#: src/config/SSSDConfig/sssdoptions.py:355
+ #: src/config/SSSDConfig/sssdoptions.py:356
++msgid "Server where the change password service is running if not on the KDC"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:359
+ msgid "ldap_uri, The URI of the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:357
++#: src/config/SSSDConfig/sssdoptions.py:360
+ msgid "ldap_backup_uri, The URI of the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:358
++#: src/config/SSSDConfig/sssdoptions.py:361
+ msgid "The default base DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:359
++#: src/config/SSSDConfig/sssdoptions.py:362
+ msgid "The Schema Type in use on the LDAP server, rfc2307"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:360
++#: src/config/SSSDConfig/sssdoptions.py:363
+ msgid "Mode used to change user password"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:361
++#: src/config/SSSDConfig/sssdoptions.py:364
+ msgid "The default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:362
++#: src/config/SSSDConfig/sssdoptions.py:365
+ msgid "The type of the authentication token of the default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:363
++#: src/config/SSSDConfig/sssdoptions.py:366
+ msgid "The authentication token of the default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:364
++#: src/config/SSSDConfig/sssdoptions.py:367
+ msgid "Length of time to attempt connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:365
++#: src/config/SSSDConfig/sssdoptions.py:368
+ msgid "Length of time to attempt synchronous LDAP operations"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:366
++#: src/config/SSSDConfig/sssdoptions.py:369
+ msgid "Length of time between attempts to reconnect while offline"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:367
++#: src/config/SSSDConfig/sssdoptions.py:370
+ msgid "Use only the upper case for realm names"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:368
++#: src/config/SSSDConfig/sssdoptions.py:371
+ msgid "File that contains CA certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:369
++#: src/config/SSSDConfig/sssdoptions.py:372
+ msgid "Path to CA certificate directory"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:370
++#: src/config/SSSDConfig/sssdoptions.py:373
+ msgid "File that contains the client certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:371
++#: src/config/SSSDConfig/sssdoptions.py:374
+ msgid "File that contains the client key"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:372
++#: src/config/SSSDConfig/sssdoptions.py:375
+ msgid "List of possible ciphers suites"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:373
++#: src/config/SSSDConfig/sssdoptions.py:376
+ msgid "Require TLS certificate verification"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:374
++#: src/config/SSSDConfig/sssdoptions.py:377
+ msgid "Specify the sasl mechanism to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:375
++#: src/config/SSSDConfig/sssdoptions.py:378
+ msgid "Specify the sasl authorization id to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:376
++#: src/config/SSSDConfig/sssdoptions.py:379
+ msgid "Specify the sasl authorization realm to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:377
++#: src/config/SSSDConfig/sssdoptions.py:380
+ msgid "Specify the minimal SSF for LDAP sasl authorization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:378
++#: src/config/SSSDConfig/sssdoptions.py:381
+ msgid "Specify the maximal SSF for LDAP sasl authorization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:379
++#: src/config/SSSDConfig/sssdoptions.py:382
+ msgid "Kerberos service keytab"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:380
++#: src/config/SSSDConfig/sssdoptions.py:383
+ msgid "Use Kerberos auth for LDAP connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:381
++#: src/config/SSSDConfig/sssdoptions.py:384
+ msgid "Follow LDAP referrals"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:382
++#: src/config/SSSDConfig/sssdoptions.py:385
+ msgid "Lifetime of TGT for LDAP connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:383
++#: src/config/SSSDConfig/sssdoptions.py:386
+ msgid "How to dereference aliases"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:384
++#: src/config/SSSDConfig/sssdoptions.py:387
+ msgid "Service name for DNS service lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:385
++#: src/config/SSSDConfig/sssdoptions.py:388
+ msgid "The number of records to retrieve in a single LDAP query"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:386
++#: src/config/SSSDConfig/sssdoptions.py:389
+ msgid "The number of members that must be missing to trigger a full deref"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:387
++#: src/config/SSSDConfig/sssdoptions.py:390
+ msgid ""
+ "Whether the LDAP library should perform a reverse lookup to canonicalize the "
+ "host name during a SASL bind"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:389
++#: src/config/SSSDConfig/sssdoptions.py:392
+ msgid ""
+ "Allows to retain local users as members of an LDAP group for servers that "
+ "use the RFC2307 schema."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:392
++#: src/config/SSSDConfig/sssdoptions.py:395
+ msgid "entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:393
++#: src/config/SSSDConfig/sssdoptions.py:396
+ msgid "lastUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:395
++#: src/config/SSSDConfig/sssdoptions.py:398
+ msgid "How long to retain a connection to the LDAP server before disconnecting"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:398
++#: src/config/SSSDConfig/sssdoptions.py:401
+ msgid "Disable the LDAP paging control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:399
++#: src/config/SSSDConfig/sssdoptions.py:402
+ msgid "Disable Active Directory range retrieval"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:402
++#: src/config/SSSDConfig/sssdoptions.py:405
+ msgid "Length of time to wait for a search request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:403
++#: src/config/SSSDConfig/sssdoptions.py:406
+ msgid "Length of time to wait for a enumeration request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:404
++#: src/config/SSSDConfig/sssdoptions.py:407
+ msgid "Length of time between enumeration updates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:405
++#: src/config/SSSDConfig/sssdoptions.py:408
+ msgid "Length of time between cache cleanups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:406
++#: src/config/SSSDConfig/sssdoptions.py:409
+ msgid "Require TLS for ID lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:407
++#: src/config/SSSDConfig/sssdoptions.py:410
+ msgid "Use ID-mapping of objectSID instead of pre-set IDs"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:408
++#: src/config/SSSDConfig/sssdoptions.py:411
+ msgid "Base DN for user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:409
++#: src/config/SSSDConfig/sssdoptions.py:412
+ msgid "Scope of user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:410
++#: src/config/SSSDConfig/sssdoptions.py:413
+ msgid "Filter for user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:411
++#: src/config/SSSDConfig/sssdoptions.py:414
+ msgid "Objectclass for users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:412
++#: src/config/SSSDConfig/sssdoptions.py:415
+ msgid "Username attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:413
++#: src/config/SSSDConfig/sssdoptions.py:416
+ msgid "UID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:414
++#: src/config/SSSDConfig/sssdoptions.py:417
+ msgid "Primary GID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:415
++#: src/config/SSSDConfig/sssdoptions.py:418
+ msgid "GECOS attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:416
++#: src/config/SSSDConfig/sssdoptions.py:419
+ msgid "Home directory attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:417
++#: src/config/SSSDConfig/sssdoptions.py:420
+ msgid "Shell attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:418
++#: src/config/SSSDConfig/sssdoptions.py:421
+ msgid "UUID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:419
+-#: src/config/SSSDConfig/sssdoptions.py:457
++#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:460
+ msgid "objectSID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:420
++#: src/config/SSSDConfig/sssdoptions.py:423
+ msgid "Active Directory primary group attribute for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:421
++#: src/config/SSSDConfig/sssdoptions.py:424
+ msgid "User principal attribute (for Kerberos)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Full Name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:423
++#: src/config/SSSDConfig/sssdoptions.py:426
+ msgid "memberOf attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:427
+ msgid "Modification time attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:425
++#: src/config/SSSDConfig/sssdoptions.py:428
+ msgid "shadowLastChange attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:426
++#: src/config/SSSDConfig/sssdoptions.py:429
+ msgid "shadowMin attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:427
++#: src/config/SSSDConfig/sssdoptions.py:430
+ msgid "shadowMax attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:428
++#: src/config/SSSDConfig/sssdoptions.py:431
+ msgid "shadowWarning attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:429
++#: src/config/SSSDConfig/sssdoptions.py:432
+ msgid "shadowInactive attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:430
++#: src/config/SSSDConfig/sssdoptions.py:433
+ msgid "shadowExpire attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:431
++#: src/config/SSSDConfig/sssdoptions.py:434
+ msgid "shadowFlag attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:432
++#: src/config/SSSDConfig/sssdoptions.py:435
+ msgid "Attribute listing authorized PAM services"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:433
++#: src/config/SSSDConfig/sssdoptions.py:436
+ msgid "Attribute listing authorized server hosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:434
++#: src/config/SSSDConfig/sssdoptions.py:437
+ msgid "Attribute listing authorized server rhosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:435
++#: src/config/SSSDConfig/sssdoptions.py:438
+ msgid "krbLastPwdChange attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:436
++#: src/config/SSSDConfig/sssdoptions.py:439
+ msgid "krbPasswordExpiration attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:437
++#: src/config/SSSDConfig/sssdoptions.py:440
+ msgid "Attribute indicating that server side password policies are active"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:438
++#: src/config/SSSDConfig/sssdoptions.py:441
+ msgid "accountExpires attribute of AD"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:439
++#: src/config/SSSDConfig/sssdoptions.py:442
+ msgid "userAccountControl attribute of AD"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:440
++#: src/config/SSSDConfig/sssdoptions.py:443
+ msgid "nsAccountLock attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:441
++#: src/config/SSSDConfig/sssdoptions.py:444
+ msgid "loginDisabled attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:442
++#: src/config/SSSDConfig/sssdoptions.py:445
+ msgid "loginExpirationTime attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:443
++#: src/config/SSSDConfig/sssdoptions.py:446
+ msgid "loginAllowedTimeMap attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:444
++#: src/config/SSSDConfig/sssdoptions.py:447
+ msgid "SSH public key attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:445
++#: src/config/SSSDConfig/sssdoptions.py:448
+ msgid "attribute listing allowed authentication types for a user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:446
++#: src/config/SSSDConfig/sssdoptions.py:449
+ msgid "attribute containing the X509 certificate of the user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:447
++#: src/config/SSSDConfig/sssdoptions.py:450
+ msgid "attribute containing the email address of the user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:448
++#: src/config/SSSDConfig/sssdoptions.py:451
+ msgid "A list of extra attributes to download along with the user entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:450
++#: src/config/SSSDConfig/sssdoptions.py:453
+ msgid "Base DN for group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:451
++#: src/config/SSSDConfig/sssdoptions.py:454
+ msgid "Objectclass for groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:452
++#: src/config/SSSDConfig/sssdoptions.py:455
+ msgid "Group name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:453
++#: src/config/SSSDConfig/sssdoptions.py:456
+ msgid "Group password"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:454
++#: src/config/SSSDConfig/sssdoptions.py:457
+ msgid "GID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:455
++#: src/config/SSSDConfig/sssdoptions.py:458
+ msgid "Group member attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:456
++#: src/config/SSSDConfig/sssdoptions.py:459
+ msgid "Group UUID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:458
++#: src/config/SSSDConfig/sssdoptions.py:461
+ msgid "Modification time attribute for groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:459
++#: src/config/SSSDConfig/sssdoptions.py:462
+ msgid "Type of the group and other flags"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:460
++#: src/config/SSSDConfig/sssdoptions.py:463
+ msgid "The LDAP group external member attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:461
++#: src/config/SSSDConfig/sssdoptions.py:464
+ msgid "Maximum nesting level SSSD will follow"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:462
++#: src/config/SSSDConfig/sssdoptions.py:465
+ msgid "Filter for group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:463
++#: src/config/SSSDConfig/sssdoptions.py:466
+ msgid "Scope of group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:465
++#: src/config/SSSDConfig/sssdoptions.py:468
+ msgid "Base DN for netgroup lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:466
++#: src/config/SSSDConfig/sssdoptions.py:469
+ msgid "Objectclass for netgroups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:467
++#: src/config/SSSDConfig/sssdoptions.py:470
+ msgid "Netgroup name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:468
++#: src/config/SSSDConfig/sssdoptions.py:471
+ msgid "Netgroups members attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:469
++#: src/config/SSSDConfig/sssdoptions.py:472
+ msgid "Netgroup triple attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:470
++#: src/config/SSSDConfig/sssdoptions.py:473
+ msgid "Modification time attribute for netgroups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:472
++#: src/config/SSSDConfig/sssdoptions.py:475
+ msgid "Base DN for service lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:473
++#: src/config/SSSDConfig/sssdoptions.py:476
+ msgid "Objectclass for services"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:474
++#: src/config/SSSDConfig/sssdoptions.py:477
+ msgid "Service name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:475
++#: src/config/SSSDConfig/sssdoptions.py:478
+ msgid "Service port attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:476
++#: src/config/SSSDConfig/sssdoptions.py:479
+ msgid "Service protocol attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:478
++#: src/config/SSSDConfig/sssdoptions.py:481
+ msgid "Lower bound for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:479
++#: src/config/SSSDConfig/sssdoptions.py:482
+ msgid "Upper bound for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:480
++#: src/config/SSSDConfig/sssdoptions.py:483
+ msgid "Number of IDs for each slice when ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:481
++#: src/config/SSSDConfig/sssdoptions.py:484
+ msgid "Use autorid-compatible algorithm for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:482
++#: src/config/SSSDConfig/sssdoptions.py:485
+ msgid "Name of the default domain for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:483
++#: src/config/SSSDConfig/sssdoptions.py:486
+ msgid "SID of the default domain for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:484
++#: src/config/SSSDConfig/sssdoptions.py:487
+ msgid "Number of secondary slices"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:486
++#: src/config/SSSDConfig/sssdoptions.py:489
+ msgid "Whether to use Token-Groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:487
++#: src/config/SSSDConfig/sssdoptions.py:490
+ msgid "Set lower boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:488
++#: src/config/SSSDConfig/sssdoptions.py:491
+ msgid "Set upper boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:489
++#: src/config/SSSDConfig/sssdoptions.py:492
+ msgid "DN for ppolicy queries"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:490
++#: src/config/SSSDConfig/sssdoptions.py:493
+ msgid "How many maximum entries to fetch during a wildcard request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:491
++#: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:494
++#: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:498
++#: src/config/SSSDConfig/sssdoptions.py:501
+ msgid "Which attributes shall be used to evaluate if an account is expired"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:499
++#: src/config/SSSDConfig/sssdoptions.py:502
+ msgid "Which rules should be used to evaluate access control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:502
++#: src/config/SSSDConfig/sssdoptions.py:505
+ msgid "URI of an LDAP server where password changes are allowed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:503
++#: src/config/SSSDConfig/sssdoptions.py:506
+ msgid "URI of a backup LDAP server where password changes are allowed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:504
++#: src/config/SSSDConfig/sssdoptions.py:507
+ msgid "DNS service name for LDAP password change server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:505
++#: src/config/SSSDConfig/sssdoptions.py:508
+ msgid ""
+ "Whether to update the ldap_user_shadow_last_change attribute after a "
+ "password change"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:509
++#: src/config/SSSDConfig/sssdoptions.py:512
+ msgid "Base DN for sudo rules lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:510
++#: src/config/SSSDConfig/sssdoptions.py:513
+ msgid "Automatic full refresh period"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:511
++#: src/config/SSSDConfig/sssdoptions.py:514
+ msgid "Automatic smart refresh period"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:512
++#: src/config/SSSDConfig/sssdoptions.py:515
+ msgid "Whether to filter rules by hostname, IP addresses and network"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:513
++#: src/config/SSSDConfig/sssdoptions.py:516
+ msgid ""
+ "Hostnames and/or fully qualified domain names of this machine to filter sudo "
+ "rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:514
++#: src/config/SSSDConfig/sssdoptions.py:517
+ msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:515
++#: src/config/SSSDConfig/sssdoptions.py:518
+ msgid "Whether to include rules that contains netgroup in host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:516
++#: src/config/SSSDConfig/sssdoptions.py:519
+ msgid ""
+ "Whether to include rules that contains regular expression in host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:517
++#: src/config/SSSDConfig/sssdoptions.py:520
+ msgid "Object class for sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:518
++#: src/config/SSSDConfig/sssdoptions.py:521
+ msgid "Name of attribute that is used as object class for sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:519
++#: src/config/SSSDConfig/sssdoptions.py:522
+ msgid "Sudo rule name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:520
++#: src/config/SSSDConfig/sssdoptions.py:523
+ msgid "Sudo rule command attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:521
++#: src/config/SSSDConfig/sssdoptions.py:524
+ msgid "Sudo rule host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:522
++#: src/config/SSSDConfig/sssdoptions.py:525
+ msgid "Sudo rule user attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:523
++#: src/config/SSSDConfig/sssdoptions.py:526
+ msgid "Sudo rule option attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:524
++#: src/config/SSSDConfig/sssdoptions.py:527
+ msgid "Sudo rule runas attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:525
++#: src/config/SSSDConfig/sssdoptions.py:528
+ msgid "Sudo rule runasuser attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:526
++#: src/config/SSSDConfig/sssdoptions.py:529
+ msgid "Sudo rule runasgroup attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:527
++#: src/config/SSSDConfig/sssdoptions.py:530
+ msgid "Sudo rule notbefore attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:528
++#: src/config/SSSDConfig/sssdoptions.py:531
+ msgid "Sudo rule notafter attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:529
++#: src/config/SSSDConfig/sssdoptions.py:532
+ msgid "Sudo rule order attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:532
++#: src/config/SSSDConfig/sssdoptions.py:535
+ msgid "Object class for automounter maps"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:533
++#: src/config/SSSDConfig/sssdoptions.py:536
+ msgid "Automounter map name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:534
++#: src/config/SSSDConfig/sssdoptions.py:537
+ msgid "Object class for automounter map entries"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:535
++#: src/config/SSSDConfig/sssdoptions.py:538
+ msgid "Automounter map entry key attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:536
++#: src/config/SSSDConfig/sssdoptions.py:539
+ msgid "Automounter map entry value attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:537
++#: src/config/SSSDConfig/sssdoptions.py:540
+ msgid "Base DN for automounter map lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:538
++#: src/config/SSSDConfig/sssdoptions.py:541
+ msgid "The name of the automount master map in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:541
++#: src/config/SSSDConfig/sssdoptions.py:544
+ msgid "Base DN for IP hosts lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:542
++#: src/config/SSSDConfig/sssdoptions.py:545
+ msgid "Object class for IP hosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:543
++#: src/config/SSSDConfig/sssdoptions.py:546
+ msgid "IP host name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:544
++#: src/config/SSSDConfig/sssdoptions.py:547
+ msgid "IP host number (address) attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:545
++#: src/config/SSSDConfig/sssdoptions.py:548
+ msgid "IP host entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:546
++#: src/config/SSSDConfig/sssdoptions.py:549
+ msgid "Base DN for IP networks lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:547
++#: src/config/SSSDConfig/sssdoptions.py:550
+ msgid "Object class for IP networks"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:548
++#: src/config/SSSDConfig/sssdoptions.py:551
+ msgid "IP network name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:549
++#: src/config/SSSDConfig/sssdoptions.py:552
+ msgid "IP network number (address) attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:550
++#: src/config/SSSDConfig/sssdoptions.py:553
+ msgid "IP network entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:553
++#: src/config/SSSDConfig/sssdoptions.py:556
+ msgid "Comma separated list of allowed users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:554
++#: src/config/SSSDConfig/sssdoptions.py:557
+ msgid "Comma separated list of prohibited users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:555
++#: src/config/SSSDConfig/sssdoptions.py:558
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:557
++#: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+ "Comma separated list of groups that are explicitly denied access. This "
+ "applies only to groups within this SSSD domain. Local groups are not "
+ "evaluated."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:561
++#: src/config/SSSDConfig/sssdoptions.py:564
+ msgid "Base for home directories"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:562
++#: src/config/SSSDConfig/sssdoptions.py:565
+ msgid "Indicate if a home directory should be created for new users."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:563
++#: src/config/SSSDConfig/sssdoptions.py:566
+ msgid "Indicate if a home directory should be removed for deleted users."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:564
++#: src/config/SSSDConfig/sssdoptions.py:567
+ msgid "Specify the default permissions on a newly created home directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:565
++#: src/config/SSSDConfig/sssdoptions.py:568
+ msgid "The skeleton directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:566
++#: src/config/SSSDConfig/sssdoptions.py:569
+ msgid "The mail spool directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:567
++#: src/config/SSSDConfig/sssdoptions.py:570
+ msgid "The command that is run after a user is removed."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:570
++#: src/config/SSSDConfig/sssdoptions.py:573
+ msgid "The number of preforked proxy children."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:573
++#: src/config/SSSDConfig/sssdoptions.py:576
+ msgid "The name of the NSS library to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:574
++#: src/config/SSSDConfig/sssdoptions.py:577
+ msgid "The name of the NSS library to use for hosts and networks lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:575
++#: src/config/SSSDConfig/sssdoptions.py:578
+ msgid "Whether to look up canonical group name from cache if possible"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:578
++#: src/config/SSSDConfig/sssdoptions.py:581
+ msgid "PAM stack to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:581
++#: src/config/SSSDConfig/sssdoptions.py:584
+ msgid "Path of passwd file sources."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:582
++#: src/config/SSSDConfig/sssdoptions.py:585
+ msgid "Path of group file sources."
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2376
++#: src/monitor/monitor.c:2381
+ msgid "Become a daemon (default)"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2378
++#: src/monitor/monitor.c:2383
+ msgid "Run interactive (not a daemon)"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2381
++#: src/monitor/monitor.c:2386
+ msgid "Disable netlink interface"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2383 src/tools/sssctl/sssctl_config.c:77
++#: src/monitor/monitor.c:2388 src/tools/sssctl/sssctl_config.c:77
+ #: src/tools/sssctl/sssctl_logs.c:310
+ msgid "Specify a non-default config file"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2385
++#: src/monitor/monitor.c:2390
+ msgid "Refresh the configuration database, then exit"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2388
++#: src/monitor/monitor.c:2393
+ msgid "Similar to --genconf, but only refreshes the given section"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2391
++#: src/monitor/monitor.c:2396
+ msgid "Print version number and exit"
+ msgstr ""
+ 
+-#: src/monitor/monitor.c:2537
++#: src/monitor/monitor.c:2542
+ msgid "SSSD is already running\n"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3260 src/providers/ldap/ldap_child.c:638
++#: src/providers/krb5/krb5_child.c:3274 src/providers/ldap/ldap_child.c:638
+ msgid "Debug level"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3262 src/providers/ldap/ldap_child.c:640
++#: src/providers/krb5/krb5_child.c:3276 src/providers/ldap/ldap_child.c:640
+ msgid "Add debug timestamps"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3264 src/providers/ldap/ldap_child.c:642
++#: src/providers/krb5/krb5_child.c:3278 src/providers/ldap/ldap_child.c:642
+ msgid "Show timestamps with microseconds"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3266 src/providers/ldap/ldap_child.c:644
++#: src/providers/krb5/krb5_child.c:3280 src/providers/ldap/ldap_child.c:644
+ msgid "An open file descriptor for the debug logs"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3269 src/providers/ldap/ldap_child.c:646
++#: src/providers/krb5/krb5_child.c:3283 src/providers/ldap/ldap_child.c:646
+ msgid "Send the debug output to stderr directly."
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3272
++#: src/providers/krb5/krb5_child.c:3286
+ msgid "The user to create FAST ccache as"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3274
++#: src/providers/krb5/krb5_child.c:3288
+ msgid "The group to create FAST ccache as"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3276
++#: src/providers/krb5/krb5_child.c:3290
+ msgid "Kerberos realm to use"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3278
++#: src/providers/krb5/krb5_child.c:3292
+ msgid "Requested lifetime of the ticket"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3280
++#: src/providers/krb5/krb5_child.c:3294
+ msgid "Requested renewable lifetime of the ticket"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3282
++#: src/providers/krb5/krb5_child.c:3296
+ msgid "FAST options ('never', 'try', 'demand')"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3285
++#: src/providers/krb5/krb5_child.c:3299
+ msgid "Specifies the server principal to use for FAST"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3287
++#: src/providers/krb5/krb5_child.c:3301
+ msgid "Requests canonicalization of the principal name"
+ msgstr ""
+ 
+-#: src/providers/krb5/krb5_child.c:3289
++#: src/providers/krb5/krb5_child.c:3303
+ msgid "Use custom version of krb5_get_init_creds_password"
+ msgstr ""
+ 
+-#: src/providers/data_provider_be.c:699
++#: src/providers/data_provider_be.c:711
+ msgid "Domain of the information provider (mandatory)"
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1079
++#: src/sss_client/common.c:1088
+ msgid "Privileged socket has wrong ownership or permissions."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1082
++#: src/sss_client/common.c:1091
+ msgid "Public socket has wrong ownership or permissions."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1085
++#: src/sss_client/common.c:1094
+ msgid "Unexpected format of the server credential message."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1088
++#: src/sss_client/common.c:1097
+ msgid "SSSD is not run by root."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1091
++#: src/sss_client/common.c:1100
+ msgid "SSSD socket does not exist."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1094
++#: src/sss_client/common.c:1103
+ msgid "Cannot get stat of SSSD socket."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1099
++#: src/sss_client/common.c:1108
+ msgid "An error occurred, but no description can be found."
+ msgstr ""
+ 
+-#: src/sss_client/common.c:1105
++#: src/sss_client/common.c:1114
+ msgid "Unexpected error while looking for an error description"
+ msgstr ""
+ 
+@@ -1983,88 +1995,88 @@ msgstr ""
+ msgid "Permission denied. "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:781
+-#: src/sss_client/pam_sss.c:792
++#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:785
++#: src/sss_client/pam_sss.c:796
+ msgid "Server message: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:299
++#: src/sss_client/pam_sss.c:303
+ msgid "Passwords do not match"
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:487
++#: src/sss_client/pam_sss.c:491
+ msgid "Password reset by root is not supported."
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:528
++#: src/sss_client/pam_sss.c:532
+ msgid "Authenticated with cached credentials"
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:529
++#: src/sss_client/pam_sss.c:533
+ msgid ", your cached password will expire at: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:559
++#: src/sss_client/pam_sss.c:563
+ #, c-format
+ msgid "Your password has expired. You have %1$d grace login(s) remaining."
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:605
++#: src/sss_client/pam_sss.c:609
+ #, c-format
+ msgid "Your password will expire in %1$d %2$s."
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:654
++#: src/sss_client/pam_sss.c:658
+ msgid "Authentication is denied until: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:675
++#: src/sss_client/pam_sss.c:679
+ msgid "System is offline, password change not possible"
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:690
++#: src/sss_client/pam_sss.c:694
+ msgid ""
+ "After changing the OTP password, you need to log out and back in order to "
+ "acquire a ticket"
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:778 src/sss_client/pam_sss.c:791
++#: src/sss_client/pam_sss.c:782 src/sss_client/pam_sss.c:795
+ msgid "Password change failed. "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2015
++#: src/sss_client/pam_sss.c:2044
+ msgid "New Password: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2016
++#: src/sss_client/pam_sss.c:2045
+ msgid "Reenter new Password: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2178 src/sss_client/pam_sss.c:2181
++#: src/sss_client/pam_sss.c:2207 src/sss_client/pam_sss.c:2210
+ msgid "First Factor: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2179 src/sss_client/pam_sss.c:2353
++#: src/sss_client/pam_sss.c:2208 src/sss_client/pam_sss.c:2382
+ msgid "Second Factor (optional): "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2182 src/sss_client/pam_sss.c:2356
++#: src/sss_client/pam_sss.c:2211 src/sss_client/pam_sss.c:2385
+ msgid "Second Factor: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2200
++#: src/sss_client/pam_sss.c:2229
+ msgid "Password: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2352 src/sss_client/pam_sss.c:2355
++#: src/sss_client/pam_sss.c:2381 src/sss_client/pam_sss.c:2384
+ msgid "First Factor (Current Password): "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2359
++#: src/sss_client/pam_sss.c:2388
+ msgid "Current Password: "
+ msgstr ""
+ 
+-#: src/sss_client/pam_sss.c:2716
++#: src/sss_client/pam_sss.c:2745
+ msgid "Password expired. Change your password now."
+ msgstr ""
+ 
+@@ -3181,18 +3193,18 @@ msgstr ""
+ msgid " - no env -\n"
+ msgstr ""
+ 
+-#: src/util/util.h:82
++#: src/util/util.h:86
+ msgid "The user ID to run the server as"
+ msgstr ""
+ 
+-#: src/util/util.h:84
++#: src/util/util.h:88
+ msgid "The group ID to run the server as"
+ msgstr ""
+ 
+-#: src/util/util.h:92
++#: src/util/util.h:96
+ msgid "Informs that the responder has been socket-activated"
+ msgstr ""
+ 
+-#: src/util/util.h:94
++#: src/util/util.h:98
+ msgid "Informs that the responder has been dbus-activated"
+ msgstr ""
+-- 
+2.21.3
+
diff --git a/SOURCES/0049-Update-the-translations-for-the-2.4.1-release.patch b/SOURCES/0049-Update-the-translations-for-the-2.4.1-release.patch
new file mode 100644
index 0000000..8e6c364
--- /dev/null
+++ b/SOURCES/0049-Update-the-translations-for-the-2.4.1-release.patch
@@ -0,0 +1,6893 @@
+From b38701b9ebdfe1291e0d9f7aa6ff814f9b42b51a Mon Sep 17 00:00:00 2001
+From: Weblate <noreply@weblate.org>
+Date: Fri, 5 Feb 2021 12:01:46 +0100
+Subject: [PATCH] Update the translations for the 2.4.1 release
+
+---
+ po/fr.po    | 860 ++++++++++++++++++++++++++--------------------------
+ po/ja.po    | 860 ++++++++++++++++++++++++++--------------------------
+ po/zh_CN.po | 860 ++++++++++++++++++++++++++--------------------------
+ 3 files changed, 1308 insertions(+), 1272 deletions(-)
+
+diff --git a/po/fr.po b/po/fr.po
+index eded3659c..e2e906d35 100644
+--- a/po/fr.po
++++ b/po/fr.po
+@@ -15,7 +15,7 @@ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+-"POT-Creation-Date: 2020-10-12 12:21+0200\n"
++"POT-Creation-Date: 2021-02-05 11:58+0100\n"
+ "PO-Revision-Date: 2020-08-04 05:55+0000\n"
+ "Last-Translator: Jean-Baptiste Holcroft <jean-baptiste@holcroft.fr>\n"
+ "Language-Team: French <https://translate.fedoraproject.org/projects/sssd/"
+@@ -186,7 +186,7 @@ msgstr ""
+ "secondes)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+-#: src/config/SSSDConfig/sssdoptions.py:115
++#: src/config/SSSDConfig/sssdoptions.py:117
+ msgid "Negative cache timeout length (seconds)"
+ msgstr "Délai d'attente du cache négatif (en secondes)"
+ 
+@@ -393,15 +393,23 @@ msgstr ""
+ msgid "When shall the PAM responder force an initgroups request"
+ msgstr "Quand le répondeur de PAM doit-il forcer une demande d'initgroupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:109
++#: src/config/SSSDConfig/sssdoptions.py:107
++msgid "List of PAM services that are allowed to authenticate with GSSAPI."
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:108
++msgid "Whether to match authenticated UPN with target user"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+ msgstr "Faut-il évaluer les attributs dépendants du temps dans les règles sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:110
++#: src/config/SSSDConfig/sssdoptions.py:112
+ msgid "If true, SSSD will switch back to lower-wins ordering logic"
+ msgstr "Si sur true, SSSD repasse en logique de commande à faible gain"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:111
++#: src/config/SSSDConfig/sssdoptions.py:113
+ msgid ""
+ "Maximum number of rules that can be refreshed at once. If this is exceeded, "
+ "full refresh is performed."
+@@ -409,12 +417,12 @@ msgstr ""
+ "Nombre maximum de règles pouvant être rafraîchies en même temps. En cas de "
+ "dépassement, un rafraîchissement complet est effectué."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:118
++#: src/config/SSSDConfig/sssdoptions.py:120
+ msgid "Whether to hash host names and addresses in the known_hosts file"
+ msgstr ""
+ "Condenser ou non les noms de systèmes et adresses du fichier known_hosts"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:119
++#: src/config/SSSDConfig/sssdoptions.py:121
+ msgid ""
+ "How many seconds to keep a host in the known_hosts file after its host keys "
+ "were requested"
+@@ -422,15 +430,15 @@ msgstr ""
+ "Le nombre de secondes pour garder un hôte dans le fichier known_hosts après "
+ "que ses clés d'hôte ont été demandées"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:121
++#: src/config/SSSDConfig/sssdoptions.py:123
+ msgid "Path to storage of trusted CA certificates"
+ msgstr "Chemin d'accès au stockage des certificats d'AC de confiance"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:122
++#: src/config/SSSDConfig/sssdoptions.py:124
+ msgid "Allow to generate ssh-keys from certificates"
+ msgstr "Permet de générer des ssh-keys à partir de certificats"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:123
++#: src/config/SSSDConfig/sssdoptions.py:125
+ msgid ""
+ "Use the following matching rules to filter the certificates for ssh-key "
+ "generation"
+@@ -438,49 +446,49 @@ msgstr ""
+ "Utilisez les règles de correspondance suivantes pour filtrer les certificats "
+ "pour la génération de clés ssh"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:127
++#: src/config/SSSDConfig/sssdoptions.py:129
+ msgid "List of UIDs or user names allowed to access the PAC responder"
+ msgstr ""
+ "Listes des UID ou nom d'utilisateurs autorisés à accéder le répondeur PAC"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:128
++#: src/config/SSSDConfig/sssdoptions.py:130
+ msgid "How long the PAC data is considered valid"
+ msgstr "Durée de validité des données du PAC"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:131
++#: src/config/SSSDConfig/sssdoptions.py:133
+ msgid "List of user attributes the InfoPipe is allowed to publish"
+ msgstr "Liste des attributs utilisateur que l'InfoPipe est autorisé à publier"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:134
++#: src/config/SSSDConfig/sssdoptions.py:136
+ msgid "The provider where the secrets will be stored in"
+ msgstr "Le fournisseur où les secrets seront stockés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:135
++#: src/config/SSSDConfig/sssdoptions.py:137
+ msgid "The maximum allowed number of nested containers"
+ msgstr "Le nombre maximal de conteneurs imbriqués autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:136
++#: src/config/SSSDConfig/sssdoptions.py:138
+ msgid "The maximum number of secrets that can be stored"
+ msgstr "Le nombre maximum de secrets qui peuvent être stockés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:137
++#: src/config/SSSDConfig/sssdoptions.py:139
+ msgid "The maximum number of secrets that can be stored per UID"
+ msgstr "Le nombre maximum de secrets qui peuvent être stockés par UID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:138
++#: src/config/SSSDConfig/sssdoptions.py:140
+ msgid "The maximum payload size of a secret in kilobytes"
+ msgstr "La taille maximale de la charge utile d'un secret en kilo-octets"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:140
++#: src/config/SSSDConfig/sssdoptions.py:142
+ msgid "The URL Custodia server is listening on"
+ msgstr "L'URL du serveur Custodia est en écoute sur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:141
++#: src/config/SSSDConfig/sssdoptions.py:143
+ msgid "The method to use when authenticating to a Custodia server"
+ msgstr ""
+ "La méthode à utiliser lors de l'authentification via un serveur Custodia"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:142
++#: src/config/SSSDConfig/sssdoptions.py:144
+ msgid ""
+ "The name of the headers that will be added into a HTTP request with the "
+ "value defined in auth_header_value"
+@@ -488,37 +496,37 @@ msgstr ""
+ "Le nom des en-têtes qui seront ajoutés dans une requête HTTP avec la valeur "
+ "définie dans auth_header_value"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:144
++#: src/config/SSSDConfig/sssdoptions.py:146
+ msgid "The value sssd-secrets would use for auth_header_name"
+ msgstr "La valeur que sssd-secrets utiliseraient pour auth_header_name"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:145
++#: src/config/SSSDConfig/sssdoptions.py:147
+ msgid ""
+ "The list of the headers to forward to the Custodia server together with the "
+ "request"
+ msgstr ""
+ "La liste des en-têtes à transmettre au serveur Custodia avec la requête"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:146
++#: src/config/SSSDConfig/sssdoptions.py:148
+ msgid ""
+ "The username to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ "La méthode à utiliser lors de l'authentification via un serveur Custodia "
+ "utilisant basic_auth"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:147
++#: src/config/SSSDConfig/sssdoptions.py:149
+ msgid ""
+ "The password to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ "La méthode à utiliser lors de l'authentification via un serveur Custodia "
+ "utilisant basic_auth"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:148
++#: src/config/SSSDConfig/sssdoptions.py:150
+ msgid "If true peer's certificate is verified if proxy_url uses https protocol"
+ msgstr ""
+ "Le certificat pair true est vérifié si proxy_url utilise le protocole https"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:149
++#: src/config/SSSDConfig/sssdoptions.py:151
+ msgid ""
+ "If false peer's certificate may contain different hostname than proxy_url "
+ "when https protocol is used"
+@@ -526,23 +534,23 @@ msgstr ""
+ "Le certificat pair false peut contenir un nom d'hôte différent de proxy_url "
+ "lorsque le protocole https est utilisé"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:151
++#: src/config/SSSDConfig/sssdoptions.py:153
+ msgid "Path to directory where certificate authority certificates are stored"
+ msgstr "Chemin d'accès au répertoire où sont stockés les certificats CA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:152
++#: src/config/SSSDConfig/sssdoptions.py:154
+ msgid "Path to file containing server's CA certificate"
+ msgstr "Chemin d'accès au fichier contenant le certificat CA du serveur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:153
++#: src/config/SSSDConfig/sssdoptions.py:155
+ msgid "Path to file containing client's certificate"
+ msgstr "Chemin d'accès au fichier contenant le certificat du client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:154
++#: src/config/SSSDConfig/sssdoptions.py:156
+ msgid "Path to file containing client's private key"
+ msgstr "Chemin d'accès au fichier contenant la clé privée du client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:157
++#: src/config/SSSDConfig/sssdoptions.py:159
+ msgid ""
+ "One of the following strings specifying the scope of session recording: none "
+ "- No users are recorded. some - Users/groups specified by users and groups "
+@@ -553,7 +561,7 @@ msgstr ""
+ "groupes spécifiés par les options des utilisateurs et des groupes sont "
+ "enregistrés. all - Tous les utilisateurs sont enregistrés."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:160
++#: src/config/SSSDConfig/sssdoptions.py:162
+ msgid ""
+ "A comma-separated list of users which should have session recording enabled. "
+ "Matches user names as returned by NSS. I.e. after the possible space "
+@@ -564,7 +572,7 @@ msgstr ""
+ "le NSS. C'est-à-dire après le remplacement éventuel de l'espace, les "
+ "changements de casse, etc."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:162
++#: src/config/SSSDConfig/sssdoptions.py:164
+ msgid ""
+ "A comma-separated list of groups, members of which should have session "
+ "recording enabled. Matches group names as returned by NSS. I.e. after the "
+@@ -575,114 +583,114 @@ msgstr ""
+ "renvoyés par le NSS, c-à-d après le remplacement éventuel de l'espace, les "
+ "changements de cas, etc."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:165
++#: src/config/SSSDConfig/sssdoptions.py:167
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:166
++#: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:170
++#: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+ msgstr "Fournisseur d'identité"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:171
++#: src/config/SSSDConfig/sssdoptions.py:173
+ msgid "Authentication provider"
+ msgstr "Fournisseur d'authentification"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:172
++#: src/config/SSSDConfig/sssdoptions.py:174
+ msgid "Access control provider"
+ msgstr "Fournisseur de contrôle d'accès"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:173
++#: src/config/SSSDConfig/sssdoptions.py:175
+ msgid "Password change provider"
+ msgstr "Fournisseur de changement de mot de passe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:174
++#: src/config/SSSDConfig/sssdoptions.py:176
+ msgid "SUDO provider"
+ msgstr "Fournisseur SUDO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:175
++#: src/config/SSSDConfig/sssdoptions.py:177
+ msgid "Autofs provider"
+ msgstr "Fournisseur autofs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:176
++#: src/config/SSSDConfig/sssdoptions.py:178
+ msgid "Host identity provider"
+ msgstr "Fournisseur d'identité de l'hôte"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:177
++#: src/config/SSSDConfig/sssdoptions.py:179
+ msgid "SELinux provider"
+ msgstr "Fournisseur SELinux"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:178
++#: src/config/SSSDConfig/sssdoptions.py:180
+ msgid "Session management provider"
+ msgstr "Fournisseur de gestion de session"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:179
++#: src/config/SSSDConfig/sssdoptions.py:181
+ msgid "Resolver provider"
+ msgstr "Fournisseur de résolveurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:182
++#: src/config/SSSDConfig/sssdoptions.py:184
+ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "Si le domaine est utilisable par l'OS ou par des applications"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:183
++#: src/config/SSSDConfig/sssdoptions.py:185
+ #, fuzzy
+ msgid "Enable or disable the domain"
+ msgstr "Activer ou désactiver le domaine des fichiers implicites"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:184
++#: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+ msgstr "Identifiant utilisateur minimum"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:185
++#: src/config/SSSDConfig/sssdoptions.py:187
+ msgid "Maximum user ID"
+ msgstr "Identifiant utilisateur maximum"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:186
++#: src/config/SSSDConfig/sssdoptions.py:188
+ msgid "Enable enumerating all users/groups"
+ msgstr "Activer l'énumération de tous les utilisateurs/groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:187
++#: src/config/SSSDConfig/sssdoptions.py:189
+ msgid "Cache credentials for offline login"
+ msgstr "Mettre en cache les crédits pour une connexion hors-ligne"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:188
++#: src/config/SSSDConfig/sssdoptions.py:190
+ msgid "Display users/groups in fully-qualified form"
+ msgstr "Afficher les utilisateurs/groupes dans un format complétement qualifié"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:189
++#: src/config/SSSDConfig/sssdoptions.py:191
+ msgid "Don't include group members in group lookups"
+ msgstr "Ne pas inclure les membres des groupes dans les recherches de groupes."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:190
+-#: src/config/SSSDConfig/sssdoptions.py:200
+-#: src/config/SSSDConfig/sssdoptions.py:201
++#: src/config/SSSDConfig/sssdoptions.py:192
+ #: src/config/SSSDConfig/sssdoptions.py:202
+ #: src/config/SSSDConfig/sssdoptions.py:203
+ #: src/config/SSSDConfig/sssdoptions.py:204
+ #: src/config/SSSDConfig/sssdoptions.py:205
+ #: src/config/SSSDConfig/sssdoptions.py:206
++#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:208
+ msgid "Entry cache timeout length (seconds)"
+ msgstr "Durée de validité des entrées en cache (en secondes)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:191
++#: src/config/SSSDConfig/sssdoptions.py:193
+ msgid ""
+ "Restrict or prefer a specific address family when performing DNS lookups"
+ msgstr "Restreindre ou préférer une famille d'adresses lors des recherches DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:192
++#: src/config/SSSDConfig/sssdoptions.py:194
+ msgid "How long to keep cached entries after last successful login (days)"
+ msgstr ""
+ "Durée de validité des entrées en cache après la dernière connexion réussie "
+ "(en jours)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:193
++#: src/config/SSSDConfig/sssdoptions.py:195
+ msgid ""
+ "How long should SSSD talk to single DNS server before trying next server "
+ "(miliseconds)"
+@@ -690,113 +698,113 @@ msgstr ""
+ "Combien de temps le SSSD doit-il parler à un seul serveur DNS avant "
+ "d'essayer le serveur suivant (en millisecondes)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:195
++#: src/config/SSSDConfig/sssdoptions.py:197
+ msgid "How long should keep trying to resolve single DNS query (seconds)"
+ msgstr ""
+ "Combien de temps faut-il continuer à essayer de résoudre une seule requête "
+ "DNS (en secondes)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:196
++#: src/config/SSSDConfig/sssdoptions.py:198
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+ msgstr ""
+ "Délai d'attente des réponses du DNS lors de la résolution des serveurs (en "
+ "secondes)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:197
++#: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "The domain part of service discovery DNS query"
+ msgstr "La partie domaine de la requête de découverte de service DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:198
++#: src/config/SSSDConfig/sssdoptions.py:200
+ msgid "Override GID value from the identity provider with this value"
+ msgstr "Écraser la valeur du GID du fournisseur d'identité avec cette valeur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:199
++#: src/config/SSSDConfig/sssdoptions.py:201
+ msgid "Treat usernames as case sensitive"
+ msgstr "Considère les noms d'utilisateur comme casse dépendant"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:209
+ msgid "How often should expired entries be refreshed in background"
+ msgstr "Fréquence de rafraîchissement en arrière plan des entrées expirées"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:208
++#: src/config/SSSDConfig/sssdoptions.py:210
+ msgid "Whether to automatically update the client's DNS entry"
+ msgstr "Choisir de mettre à jour automatiquement l'entrée DNS du client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:209
+-#: src/config/SSSDConfig/sssdoptions.py:239
++#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:241
+ msgid "The TTL to apply to the client's DNS entry after updating it"
+ msgstr "Le TTL à appliquer à l'entrée DNS du client après modification"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:210
+-#: src/config/SSSDConfig/sssdoptions.py:240
++#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:242
+ msgid "The interface whose IP should be used for dynamic DNS updates"
+ msgstr ""
+ "L'interface dont l'adresse IP doit être utilisée pour les mises à jour "
+ "dynamiques du DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:213
+ msgid "How often to periodically update the client's DNS entry"
+ msgstr "Fréquence de mise à jour automatique de l'entrée DNS du client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:214
+ msgid "Whether the provider should explicitly update the PTR record as well"
+ msgstr ""
+ "Selon que le fournisseur doit aussi ou non mettre à jour explicitement "
+ "l'enregistrement PTR"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:215
+ msgid "Whether the nsupdate utility should default to using TCP"
+ msgstr "Selon que l'utilitaire nsupdate doit utiliser TCP par défaut"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:216
+ msgid "What kind of authentication should be used to perform the DNS update"
+ msgstr ""
+ "Quel type d'authentification doit être utilisée pour effectuer la mise à "
+ "jour DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:215
++#: src/config/SSSDConfig/sssdoptions.py:217
+ msgid "Override the DNS server used to perform the DNS update"
+ msgstr "Remplace le serveur DNS utilisé pour effectuer la mise à jour du DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:216
++#: src/config/SSSDConfig/sssdoptions.py:218
+ msgid "Control enumeration of trusted domains"
+ msgstr "Contrôle l'énumération des domaines approuvés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:217
++#: src/config/SSSDConfig/sssdoptions.py:219
+ msgid "How often should subdomains list be refreshed"
+ msgstr "Fréquence de rafraîchissement des sous-domaines"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:218
++#: src/config/SSSDConfig/sssdoptions.py:220
+ msgid "List of options that should be inherited into a subdomain"
+ msgstr "Listes des options qui doivent être héritées dans le sous-domaine"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:219
++#: src/config/SSSDConfig/sssdoptions.py:221
+ msgid "Default subdomain homedir value"
+ msgstr "Valeur par défaut du sous-domaine homedir"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:220
++#: src/config/SSSDConfig/sssdoptions.py:222
+ msgid "How long can cached credentials be used for cached authentication"
+ msgstr ""
+ "Combien de temps les informations d'identification en cache peuvent-elles "
+ "être utilisées pour l'authentification en cache"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:221
++#: src/config/SSSDConfig/sssdoptions.py:223
+ msgid "Whether to automatically create private groups for users"
+ msgstr ""
+ "S'il faut créer automatiquement des groupes privés pour les utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:222
++#: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "Display a warning N days before the password expires."
+ msgstr "Afficher une alerte N jours avant l'expiration du mot de passe."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:223
++#: src/config/SSSDConfig/sssdoptions.py:225
+ msgid ""
+ "Various tags stored by the realmd configuration service for this domain."
+ msgstr ""
+ "Étiquettes diverses stockées par le service de configuration de realmd pour "
+ "ce domaine."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:224
++#: src/config/SSSDConfig/sssdoptions.py:226
+ msgid ""
+ "The provider which should handle fetching of subdomains. This value should "
+ "be always the same as id_provider."
+@@ -804,7 +812,7 @@ msgstr ""
+ "Le fournisseur doit être capable de gérer la récupération des sous-domaines. "
+ "Cette valeur doit être toujours identique à id_provider."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:226
++#: src/config/SSSDConfig/sssdoptions.py:228
+ msgid ""
+ "How many seconds to keep a host ssh key after refresh. IE how long to cache "
+ "the host key for."
+@@ -812,7 +820,7 @@ msgstr ""
+ "La durée en secondes pendant laquelle conserver une clé ssh d'hôte après "
+ "rafraichissement. I.e. combien de temps mettre la clé en cache."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:228
++#: src/config/SSSDConfig/sssdoptions.py:230
+ msgid ""
+ "If 2-Factor-Authentication (2FA) is used and credentials should be saved "
+ "this value determines the minimal length the first authentication factor "
+@@ -824,101 +832,101 @@ msgstr ""
+ "passe à long terme) doit être sauvegardé en tant que hachage SHA512 dans le "
+ "cache."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:234
++#: src/config/SSSDConfig/sssdoptions.py:236
+ msgid "IPA domain"
+ msgstr "Domaine IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:235
++#: src/config/SSSDConfig/sssdoptions.py:237
+ msgid "IPA server address"
+ msgstr "Adresse du serveur IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:236
++#: src/config/SSSDConfig/sssdoptions.py:238
+ msgid "Address of backup IPA server"
+ msgstr "Adresse du serveur IPA de secours"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:237
++#: src/config/SSSDConfig/sssdoptions.py:239
+ msgid "IPA client hostname"
+ msgstr "Nom de système du client IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:238
++#: src/config/SSSDConfig/sssdoptions.py:240
+ msgid "Whether to automatically update the client's DNS entry in FreeIPA"
+ msgstr ""
+ "Choisir de mettre à jour automatiquement l'entrée DNS du client dans FreeIPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:241
++#: src/config/SSSDConfig/sssdoptions.py:243
+ msgid "Search base for HBAC related objects"
+ msgstr "Base de recherche pour les objets HBAC"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:242
++#: src/config/SSSDConfig/sssdoptions.py:244
+ msgid ""
+ "The amount of time between lookups of the HBAC rules against the IPA server"
+ msgstr "Délai entre les recherches de règles HBAC sur le serveur IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:243
++#: src/config/SSSDConfig/sssdoptions.py:245
+ msgid ""
+ "The amount of time in seconds between lookups of the SELinux maps against "
+ "the IPA server"
+ msgstr "Délai entre les recherches de cartes SELinux sur le serveur IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:245
++#: src/config/SSSDConfig/sssdoptions.py:247
+ msgid "If set to false, host argument given by PAM will be ignored"
+ msgstr "Si mit à false, l’argument de l'hôte donné par PAM est ignoré"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:246
++#: src/config/SSSDConfig/sssdoptions.py:248
+ msgid "The automounter location this IPA client is using"
+ msgstr ""
+ "L'emplacement de la carte de montage automatique utilisée par le client IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:247
++#: src/config/SSSDConfig/sssdoptions.py:249
+ msgid "Search base for object containing info about IPA domain"
+ msgstr ""
+ "Base de recherche pour l'objet contenant les informations de base à propos "
+ "du domaine IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:248
++#: src/config/SSSDConfig/sssdoptions.py:250
+ msgid "Search base for objects containing info about ID ranges"
+ msgstr ""
+ "Base de recherche pour les objets contenant les informations à propos des "
+ "plages d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:249
+-#: src/config/SSSDConfig/sssdoptions.py:303
++#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:305
+ msgid "Enable DNS sites - location based service discovery"
+ msgstr "Activer les sites DNS - découverte de service basée sur l'emplacement"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:250
++#: src/config/SSSDConfig/sssdoptions.py:252
+ msgid "Search base for view containers"
+ msgstr "Base de recherche des conteneurs de vues"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:253
+ msgid "Objectclass for view containers"
+ msgstr "Classe d'objet pour les conteneurs de vues"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:252
++#: src/config/SSSDConfig/sssdoptions.py:254
+ msgid "Attribute with the name of the view"
+ msgstr "Attribut avec le nom de la vue"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:255
+ msgid "Objectclass for override objects"
+ msgstr "Classe d'objet surchargeant les objets"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:254
++#: src/config/SSSDConfig/sssdoptions.py:256
+ msgid "Attribute with the reference to the original object"
+ msgstr "Attribut faisant référence à l'objet originel "
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:255
++#: src/config/SSSDConfig/sssdoptions.py:257
+ msgid "Objectclass for user override objects"
+ msgstr "Classe d'objet surchargeant les utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:256
++#: src/config/SSSDConfig/sssdoptions.py:258
+ msgid "Objectclass for group override objects"
+ msgstr "Classe d'objet surchargeant les groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:257
++#: src/config/SSSDConfig/sssdoptions.py:259
+ msgid "Search base for Desktop Profile related objects"
+ msgstr "Base de recherche pour les objets liés au Profil du Bureau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:258
++#: src/config/SSSDConfig/sssdoptions.py:260
+ msgid ""
+ "The amount of time in seconds between lookups of the Desktop Profile rules "
+ "against the IPA server"
+@@ -926,7 +934,7 @@ msgstr ""
+ "Le temps, en secondes, entre les consultations des règles du profil du "
+ "bureau sur le serveur IPA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:260
++#: src/config/SSSDConfig/sssdoptions.py:262
+ msgid ""
+ "The amount of time in minutes between lookups of Desktop Profiles rules "
+ "against the IPA server when the last request did not find any rule"
+@@ -934,33 +942,33 @@ msgstr ""
+ "Le temps en minutes entre les consultations des règles de profile de bureau "
+ "sur le serveur IPA lorsque la dernière requête n'a trouvé aucune règle"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:263
++#: src/config/SSSDConfig/sssdoptions.py:265
+ msgid "The LDAP attribute that contains FQDN of the host."
+ msgstr "L'attribut LDAP qui contient le FQDN de l'hôte."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:264
+-#: src/config/SSSDConfig/sssdoptions.py:287
++#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:289
+ msgid "The object class of a host entry in LDAP."
+ msgstr "La classe d'objet d'une entrée utilisateur dans LDAP."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:265
++#: src/config/SSSDConfig/sssdoptions.py:267
+ msgid "Use the given string as search base for host objects."
+ msgstr ""
+ "Utiliser la chaîne donnée comme base de recherche pour héberger des objets."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:268
+ msgid "The LDAP attribute that contains the host's SSH public keys."
+ msgstr "L'attribut LDAP qui contient les clés publiques SSH de l'hôte."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:267
++#: src/config/SSSDConfig/sssdoptions.py:269
+ msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+ msgstr "L'attribut LDAP qui contient le nom de domaine NIS du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+ msgstr "L'attribut LDAP contenant les noms des membres du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:269
++#: src/config/SSSDConfig/sssdoptions.py:271
+ msgid ""
+ "The LDAP attribute that lists FQDNs of hosts and host groups that are "
+ "members of the netgroup."
+@@ -968,7 +976,7 @@ msgstr ""
+ "L'attribut LDAP qui répertorie les FQDN des hôtes et des groupes d'hôtes qui "
+ "sont membres du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:271
++#: src/config/SSSDConfig/sssdoptions.py:273
+ msgid ""
+ "The LDAP attribute that lists hosts and host groups that are direct members "
+ "of the netgroup."
+@@ -976,11 +984,11 @@ msgstr ""
+ "L'attribut LDAP qui répertorie les hôtes et les groupes d'hôtes qui sont des "
+ "membres directs du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:273
++#: src/config/SSSDConfig/sssdoptions.py:275
+ msgid "The LDAP attribute that lists netgroup's memberships."
+ msgstr "L'attribut LDAP qui répertorie les adhésions au netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:274
++#: src/config/SSSDConfig/sssdoptions.py:276
+ msgid ""
+ "The LDAP attribute that lists system users and groups that are direct "
+ "members of the netgroup."
+@@ -988,20 +996,20 @@ msgstr ""
+ "L'attribut LDAP qui répertorie les utilisateurs du système et les groupes "
+ "qui sont des membres directs du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:276
++#: src/config/SSSDConfig/sssdoptions.py:278
+ msgid "The LDAP attribute that corresponds to the netgroup name."
+ msgstr "L'attribut LDAP correspondant au nom du netgroup."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:277
++#: src/config/SSSDConfig/sssdoptions.py:279
+ msgid "The object class of a netgroup entry in LDAP."
+ msgstr "La classe d'objet d'une entrée de netgroup dans LDAP."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:278
++#: src/config/SSSDConfig/sssdoptions.py:280
+ msgid ""
+ "The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+ msgstr "L'attribut LDAP qui contient l'UUID/GUID d'un objet de netgroup LDAP."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:279
++#: src/config/SSSDConfig/sssdoptions.py:281
+ msgid ""
+ "The LDAP attribute that contains whether or not is user map enabled for "
+ "usage."
+@@ -1009,11 +1017,11 @@ msgstr ""
+ "L'attribut LDAP qui contient l’information de savoir si la carte "
+ "d'utilisateur est activée ou non pour l'utilisation."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:281
++#: src/config/SSSDConfig/sssdoptions.py:283
+ msgid "The LDAP attribute that contains host category such as 'all'."
+ msgstr "L'attribut LDAP qui contient la catégorie d'hôte telle que \"all\"."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:282
++#: src/config/SSSDConfig/sssdoptions.py:284
+ msgid ""
+ "The LDAP attribute that contains all hosts / hostgroups this rule match "
+ "against."
+@@ -1021,18 +1029,18 @@ msgstr ""
+ "L'attribut LDAP qui contient tous les hôtes / groupes d'hôtes auxquels cette "
+ "règle correspond."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:284
++#: src/config/SSSDConfig/sssdoptions.py:286
+ msgid ""
+ "The LDAP attribute that contains all users / groups this rule match against."
+ msgstr ""
+ "L'attribut LDAP qui contient tous les utilisateurs / groupes auxquels cette "
+ "règle correspond."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:286
++#: src/config/SSSDConfig/sssdoptions.py:288
+ msgid "The LDAP attribute that contains the name of SELinux usermap."
+ msgstr "L'attribut LDAP qui contient le nom de la carte d'utilisateur SELinux."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:288
++#: src/config/SSSDConfig/sssdoptions.py:290
+ msgid ""
+ "The LDAP attribute that contains DN of HBAC rule which can be used for "
+ "matching instead of memberUser and memberHost."
+@@ -1040,21 +1048,21 @@ msgstr ""
+ "L'attribut LDAP qui contient le DN de la règle HBAC qui peut être utilisé "
+ "pour la correspondance au lieu de memberUser et memberHost."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:290
++#: src/config/SSSDConfig/sssdoptions.py:292
+ msgid "The LDAP attribute that contains SELinux user string itself."
+ msgstr ""
+ "L'attribut LDAP qui contient la chaîne d'utilisateur SELinux elle-même."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:291
++#: src/config/SSSDConfig/sssdoptions.py:293
+ msgid "The LDAP attribute that contains user category such as 'all'."
+ msgstr ""
+ "L'attribut LDAP qui contient la catégorie d'utilisateur telle que \"all\"."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:292
++#: src/config/SSSDConfig/sssdoptions.py:294
+ msgid "The LDAP attribute that contains unique ID of the user map."
+ msgstr "L'attribut LDAP qui contient l'ID unique de la carte de l'utilisateur."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:293
++#: src/config/SSSDConfig/sssdoptions.py:295
+ msgid ""
+ "The option denotes that the SSSD is running on IPA server and should perform "
+ "lookups of users and groups from trusted domains differently."
+@@ -1063,46 +1071,46 @@ msgstr ""
+ "effectuer différemment les recherches des utilisateurs et des groupes des "
+ "domaines approuvés."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:295
++#: src/config/SSSDConfig/sssdoptions.py:297
+ msgid "Use the given string as search base for trusted domains."
+ msgstr ""
+ "Utiliser la chaîne donnée comme base de recherche pour les domaines "
+ "approuvés."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:298
++#: src/config/SSSDConfig/sssdoptions.py:300
+ msgid "Active Directory domain"
+ msgstr "Domaine Active Directory"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:299
++#: src/config/SSSDConfig/sssdoptions.py:301
+ msgid "Enabled Active Directory domains"
+ msgstr "Domaine d’Active Directory activés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:300
++#: src/config/SSSDConfig/sssdoptions.py:302
+ msgid "Active Directory server address"
+ msgstr "Adresse du serveur Active Directory"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:301
++#: src/config/SSSDConfig/sssdoptions.py:303
+ msgid "Active Directory backup server address"
+ msgstr "Adresse du serveur Active Directory de secours"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:302
++#: src/config/SSSDConfig/sssdoptions.py:304
+ msgid "Active Directory client hostname"
+ msgstr "Nom de système du client Active Directory"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:304
+-#: src/config/SSSDConfig/sssdoptions.py:497
++#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:500
+ msgid "LDAP filter to determine access privileges"
+ msgstr "Filtre LDAP pour déterminer les autorisations d'accès"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:305
++#: src/config/SSSDConfig/sssdoptions.py:307
+ msgid "Whether to use the Global Catalog for lookups"
+ msgstr "Choisir d'utiliser ou non le catalogue global pour les recherches"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:308
+ msgid "Operation mode for GPO-based access control"
+ msgstr "Mode opératoire pour les contrôles d'accès basé sur les GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:307
++#: src/config/SSSDConfig/sssdoptions.py:309
+ msgid ""
+ "The amount of time between lookups of the GPO policy files against the AD "
+ "server"
+@@ -1110,7 +1118,7 @@ msgstr ""
+ "Durée entre les recherches de fichiers de politiques de GPO dans le serveur "
+ "AD"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:310
+ msgid ""
+ "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy "
+ "settings"
+@@ -1118,7 +1126,7 @@ msgstr ""
+ "Noms de services PAM correspondant à la configuration de la politique "
+ "(Deny)InteractiveLogonRight de la GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:310
++#: src/config/SSSDConfig/sssdoptions.py:312
+ msgid ""
+ "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight "
+ "policy settings"
+@@ -1126,289 +1134,293 @@ msgstr ""
+ "Noms de services PAM correspondant à la configuration de la politique "
+ "(Deny)RemoteInteractiveLogonRight de la GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:312
++#: src/config/SSSDConfig/sssdoptions.py:314
+ msgid ""
+ "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings"
+ msgstr ""
+ "Noms de services PAM correspondant à la configuration de la politique "
+ "(Deny)NetworkLogonRight de la GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:313
++#: src/config/SSSDConfig/sssdoptions.py:315
+ msgid ""
+ "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings"
+ msgstr ""
+ "Noms de services PAM correspondant à la configuration de la politique "
+ "(Deny)BatchLogonRight de la GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:314
++#: src/config/SSSDConfig/sssdoptions.py:316
+ msgid ""
+ "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings"
+ msgstr ""
+ "Noms de services PAM correspondant à la configuration de la politique "
+ "(Deny)ServiceLogonRight de la GPO"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:315
++#: src/config/SSSDConfig/sssdoptions.py:317
+ msgid "PAM service names for which GPO-based access is always granted"
+ msgstr ""
+ "Noms de services PAM pour lesquels les accès s'appuyant sur la GPO sont "
+ "toujours autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:316
++#: src/config/SSSDConfig/sssdoptions.py:318
+ msgid "PAM service names for which GPO-based access is always denied"
+ msgstr ""
+ "Noms de services PAM pour lesquels les accès s'appuyant sur la GPO sont "
+ "toujours interdits"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:317
++#: src/config/SSSDConfig/sssdoptions.py:319
+ msgid ""
+ "Default logon right (or permit/deny) to use for unmapped PAM service names"
+ msgstr ""
+ "Droit de connexion par défaut (ou permission/interdiction) à utiliser pour "
+ "les noms de services sans correspondance"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:318
++#: src/config/SSSDConfig/sssdoptions.py:320
+ msgid "a particular site to be used by the client"
+ msgstr "un site particulier utilisé par le client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:319
++#: src/config/SSSDConfig/sssdoptions.py:321
+ msgid ""
+ "Maximum age in days before the machine account password should be renewed"
+ msgstr ""
+ "Âge maximum en jours avant que le mot de passe du compte de la machine ne "
+ "soit renouvelé"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:321
++#: src/config/SSSDConfig/sssdoptions.py:323
+ msgid "Option for tuning the machine account renewal task"
+ msgstr "Option de réglage de la tâche de renouvellement du compte machine"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:322
++#: src/config/SSSDConfig/sssdoptions.py:324
+ msgid "Whether to update the machine account password in the Samba database"
+ msgstr ""
+ "Indique s'il faut mettre à jour le mot de passe du compte de la machine dans "
+ "la base de données Samba"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:324
++#: src/config/SSSDConfig/sssdoptions.py:326
+ msgid "Use LDAPS port for LDAP and Global Catalog requests"
+ msgstr "Utiliser le port LDAPS pour les requêtes LDAP et Catalogue global"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:325
++#: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:328
+-#: src/config/SSSDConfig/sssdoptions.py:329
++#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:331
+ msgid "Kerberos server address"
+ msgstr "Adresse du serveur Kerberos"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:332
+ msgid "Kerberos backup server address"
+ msgstr "Adresse du serveur Kerberos de secours"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:331
++#: src/config/SSSDConfig/sssdoptions.py:333
+ msgid "Kerberos realm"
+ msgstr "Domaine Kerberos"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:334
+ msgid "Authentication timeout"
+ msgstr "Délai avant expiration de l'authentification"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:333
++#: src/config/SSSDConfig/sssdoptions.py:335
+ msgid "Whether to create kdcinfo files"
+ msgstr "Choisir de créer ou non les fichiers kdcinfo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:334
++#: src/config/SSSDConfig/sssdoptions.py:336
+ msgid "Where to drop krb5 config snippets"
+ msgstr "Où déposer les extraits de configuration krb5"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:337
++#: src/config/SSSDConfig/sssdoptions.py:339
+ msgid "Directory to store credential caches"
+ msgstr "Répertoire pour stocker les caches de crédits"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:338
++#: src/config/SSSDConfig/sssdoptions.py:340
+ msgid "Location of the user's credential cache"
+ msgstr "Emplacement du cache de crédits de l'utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:339
++#: src/config/SSSDConfig/sssdoptions.py:341
+ msgid "Location of the keytab to validate credentials"
+ msgstr "Emplacement du fichier keytab de validation des crédits"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:340
++#: src/config/SSSDConfig/sssdoptions.py:342
+ msgid "Enable credential validation"
+ msgstr "Activer la validation des crédits"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:341
++#: src/config/SSSDConfig/sssdoptions.py:343
+ msgid "Store password if offline for later online authentication"
+ msgstr ""
+ "Stocker le mot de passe, si hors-ligne, pour une authentification ultérieure "
+ "en ligne"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:342
++#: src/config/SSSDConfig/sssdoptions.py:344
+ msgid "Renewable lifetime of the TGT"
+ msgstr "Durée de vie renouvelable du TGT"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:343
++#: src/config/SSSDConfig/sssdoptions.py:345
+ msgid "Lifetime of the TGT"
+ msgstr "Durée de vie du TGT"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:344
++#: src/config/SSSDConfig/sssdoptions.py:346
+ msgid "Time between two checks for renewal"
+ msgstr "Durée entre deux vérifications pour le renouvellement"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:345
++#: src/config/SSSDConfig/sssdoptions.py:347
+ msgid "Enables FAST"
+ msgstr "Active FAST"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:346
++#: src/config/SSSDConfig/sssdoptions.py:348
+ msgid "Selects the principal to use for FAST"
+ msgstr "Sélectionne le principal à utiliser avec FAST"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:347
++#: src/config/SSSDConfig/sssdoptions.py:349
+ msgid "Enables principal canonicalization"
+ msgstr "Active la canonisation du principal"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:348
++#: src/config/SSSDConfig/sssdoptions.py:350
+ msgid "Enables enterprise principals"
+ msgstr "Active les principals d'entreprise"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:349
++#: src/config/SSSDConfig/sssdoptions.py:351
++msgid "Enables using of subdomains realms for authentication"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+ msgstr ""
+ "Un mappage des noms d'utilisateurs vers les noms de principaux Kerberos"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:352
+-#: src/config/SSSDConfig/sssdoptions.py:353
++#: src/config/SSSDConfig/sssdoptions.py:355
++#: src/config/SSSDConfig/sssdoptions.py:356
+ msgid "Server where the change password service is running if not on the KDC"
+ msgstr ""
+ "Serveur où tourne le service de changement de mot de passe s'il n'est pas "
+ "sur le KDC"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:356
++#: src/config/SSSDConfig/sssdoptions.py:359
+ msgid "ldap_uri, The URI of the LDAP server"
+ msgstr "ldap_uri, l'adresse du serveur LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:357
++#: src/config/SSSDConfig/sssdoptions.py:360
+ msgid "ldap_backup_uri, The URI of the LDAP server"
+ msgstr "ldap_backup_uri, l'URI du serveur LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:358
++#: src/config/SSSDConfig/sssdoptions.py:361
+ msgid "The default base DN"
+ msgstr "La base DN par défaut"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:359
++#: src/config/SSSDConfig/sssdoptions.py:362
+ msgid "The Schema Type in use on the LDAP server, rfc2307"
+ msgstr "Le type de schéma utilisé sur le serveur LDAP, rfc2307"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:360
++#: src/config/SSSDConfig/sssdoptions.py:363
+ msgid "Mode used to change user password"
+ msgstr "Mode utilisé pour modifier le mot de passe utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:361
++#: src/config/SSSDConfig/sssdoptions.py:364
+ msgid "The default bind DN"
+ msgstr "Le DN de connexion par défaut"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:362
++#: src/config/SSSDConfig/sssdoptions.py:365
+ msgid "The type of the authentication token of the default bind DN"
+ msgstr "Le type de jeton d'authentification du DN de connexion par défaut"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:363
++#: src/config/SSSDConfig/sssdoptions.py:366
+ msgid "The authentication token of the default bind DN"
+ msgstr "Le jeton d'authentification du DN de connexion par défaut"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:364
++#: src/config/SSSDConfig/sssdoptions.py:367
+ msgid "Length of time to attempt connection"
+ msgstr "Durée pendant laquelle il sera tenté d'établir la connexion"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:365
++#: src/config/SSSDConfig/sssdoptions.py:368
+ msgid "Length of time to attempt synchronous LDAP operations"
+ msgstr "Durée pendant laquelle il sera tenté des opérations LDAP synchrones"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:366
++#: src/config/SSSDConfig/sssdoptions.py:369
+ msgid "Length of time between attempts to reconnect while offline"
+ msgstr "Durée d'attente entre deux essais de reconnexion en mode hors-ligne"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:367
++#: src/config/SSSDConfig/sssdoptions.py:370
+ msgid "Use only the upper case for realm names"
+ msgstr "N'utiliser que des majuscules pour les noms de domaine"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:368
++#: src/config/SSSDConfig/sssdoptions.py:371
+ msgid "File that contains CA certificates"
+ msgstr "Fichier contenant les certificats des CA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:369
++#: src/config/SSSDConfig/sssdoptions.py:372
+ msgid "Path to CA certificate directory"
+ msgstr "Chemin vers le répertoire de certificats des CA"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:370
++#: src/config/SSSDConfig/sssdoptions.py:373
+ msgid "File that contains the client certificate"
+ msgstr "Fichier contenant le certificat client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:371
++#: src/config/SSSDConfig/sssdoptions.py:374
+ msgid "File that contains the client key"
+ msgstr "Fichier contenant la clé du client"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:372
++#: src/config/SSSDConfig/sssdoptions.py:375
+ msgid "List of possible ciphers suites"
+ msgstr "Liste des suites de chiffrement possibles"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:373
++#: src/config/SSSDConfig/sssdoptions.py:376
+ msgid "Require TLS certificate verification"
+ msgstr "Requiert une vérification de certificat TLS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:374
++#: src/config/SSSDConfig/sssdoptions.py:377
+ msgid "Specify the sasl mechanism to use"
+ msgstr "Spécifier le mécanisme SASL à utiliser"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:375
++#: src/config/SSSDConfig/sssdoptions.py:378
+ msgid "Specify the sasl authorization id to use"
+ msgstr "Spécifier l'identité d'authorisation SASL à utiliser"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:376
++#: src/config/SSSDConfig/sssdoptions.py:379
+ msgid "Specify the sasl authorization realm to use"
+ msgstr "Spécifier le domaine d'authorisation SASL à utiliser"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:377
++#: src/config/SSSDConfig/sssdoptions.py:380
+ msgid "Specify the minimal SSF for LDAP sasl authorization"
+ msgstr "Spécifie le minimum SSF pour l'autorisation sasl LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:378
++#: src/config/SSSDConfig/sssdoptions.py:381
+ msgid "Specify the maximal SSF for LDAP sasl authorization"
+ msgstr "Spécifie le SFF maximal pour l'autorisation sasl LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:379
++#: src/config/SSSDConfig/sssdoptions.py:382
+ msgid "Kerberos service keytab"
+ msgstr "Service du fichier keytab de Kerberos"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:380
++#: src/config/SSSDConfig/sssdoptions.py:383
+ msgid "Use Kerberos auth for LDAP connection"
+ msgstr "Utiliser l'authentification Kerberos pour la connexion LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:381
++#: src/config/SSSDConfig/sssdoptions.py:384
+ msgid "Follow LDAP referrals"
+ msgstr "Suivre les référents LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:382
++#: src/config/SSSDConfig/sssdoptions.py:385
+ msgid "Lifetime of TGT for LDAP connection"
+ msgstr "Durée de vie du TGT pour la connexion LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:383
++#: src/config/SSSDConfig/sssdoptions.py:386
+ msgid "How to dereference aliases"
+ msgstr "Comment déréférencer les alias"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:384
++#: src/config/SSSDConfig/sssdoptions.py:387
+ msgid "Service name for DNS service lookups"
+ msgstr "Nom du service pour les recherches DNS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:385
++#: src/config/SSSDConfig/sssdoptions.py:388
+ msgid "The number of records to retrieve in a single LDAP query"
+ msgstr "Le nombre d'enregistrements à récupérer dans une requête LDAP unique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:386
++#: src/config/SSSDConfig/sssdoptions.py:389
+ msgid "The number of members that must be missing to trigger a full deref"
+ msgstr ""
+ "Nombre de membres qui doivent être manquants pour activer un déréférencement "
+ "complet"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:387
++#: src/config/SSSDConfig/sssdoptions.py:390
+ msgid ""
+ "Whether the LDAP library should perform a reverse lookup to canonicalize the "
+ "host name during a SASL bind"
+@@ -1416,7 +1428,7 @@ msgstr ""
+ "Est-ce que la bibliothèque LDAP doit effectuer une requête pour canoniser le "
+ "nom d'hôte pendant une connexion SASL ?"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:389
++#: src/config/SSSDConfig/sssdoptions.py:392
+ msgid ""
+ "Allows to retain local users as members of an LDAP group for servers that "
+ "use the RFC2307 schema."
+@@ -1424,401 +1436,401 @@ msgstr ""
+ "Permet de conserver les utilisateurs locaux en tant que membres d'un groupe "
+ "LDAP pour les serveurs qui utilisent le schéma RFC2307."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:392
++#: src/config/SSSDConfig/sssdoptions.py:395
+ msgid "entryUSN attribute"
+ msgstr "attribut entryUSN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:393
++#: src/config/SSSDConfig/sssdoptions.py:396
+ msgid "lastUSN attribute"
+ msgstr "attribut lastUSN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:395
++#: src/config/SSSDConfig/sssdoptions.py:398
+ msgid "How long to retain a connection to the LDAP server before disconnecting"
+ msgstr ""
+ "Combien de temps conserver la connexion au serveur LDAP avant de se "
+ "déconnecter"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:398
++#: src/config/SSSDConfig/sssdoptions.py:401
+ msgid "Disable the LDAP paging control"
+ msgstr "Désactiver le contrôle des pages LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:399
++#: src/config/SSSDConfig/sssdoptions.py:402
+ msgid "Disable Active Directory range retrieval"
+ msgstr "Désactiver la récupération de plage Active Directory."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:402
++#: src/config/SSSDConfig/sssdoptions.py:405
+ msgid "Length of time to wait for a search request"
+ msgstr "Durée d'attente pour une requête de recherche"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:403
++#: src/config/SSSDConfig/sssdoptions.py:406
+ msgid "Length of time to wait for a enumeration request"
+ msgstr "Durée d'attente pour une requête d'énumération"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:404
++#: src/config/SSSDConfig/sssdoptions.py:407
+ msgid "Length of time between enumeration updates"
+ msgstr "Durée entre deux mises à jour d'énumération"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:405
++#: src/config/SSSDConfig/sssdoptions.py:408
+ msgid "Length of time between cache cleanups"
+ msgstr "Durée entre les nettoyages de cache"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:406
++#: src/config/SSSDConfig/sssdoptions.py:409
+ msgid "Require TLS for ID lookups"
+ msgstr "TLS est requis pour les recherches d'identifiants"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:407
++#: src/config/SSSDConfig/sssdoptions.py:410
+ msgid "Use ID-mapping of objectSID instead of pre-set IDs"
+ msgstr ""
+ "Utilisation de la correspondance d'ID pour les objectSID au lieu d'ID pré-"
+ "établis"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:408
++#: src/config/SSSDConfig/sssdoptions.py:411
+ msgid "Base DN for user lookups"
+ msgstr "Base DN pour les recherches  d'utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:409
++#: src/config/SSSDConfig/sssdoptions.py:412
+ msgid "Scope of user lookups"
+ msgstr "Scope des recherches d'utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:410
++#: src/config/SSSDConfig/sssdoptions.py:413
+ msgid "Filter for user lookups"
+ msgstr "Filtre pour les recherches d'utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:411
++#: src/config/SSSDConfig/sssdoptions.py:414
+ msgid "Objectclass for users"
+ msgstr "Classe d'objet pour les utilisateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:412
++#: src/config/SSSDConfig/sssdoptions.py:415
+ msgid "Username attribute"
+ msgstr "Attribut de nom d'utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:413
++#: src/config/SSSDConfig/sssdoptions.py:416
+ msgid "UID attribute"
+ msgstr "Attribut UID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:414
++#: src/config/SSSDConfig/sssdoptions.py:417
+ msgid "Primary GID attribute"
+ msgstr "Attribut de GID primaire"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:415
++#: src/config/SSSDConfig/sssdoptions.py:418
+ msgid "GECOS attribute"
+ msgstr "Attribut GECOS"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:416
++#: src/config/SSSDConfig/sssdoptions.py:419
+ msgid "Home directory attribute"
+ msgstr "Attribut de répertoire utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:417
++#: src/config/SSSDConfig/sssdoptions.py:420
+ msgid "Shell attribute"
+ msgstr "Attribut d'interpréteur de commandes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:418
++#: src/config/SSSDConfig/sssdoptions.py:421
+ msgid "UUID attribute"
+ msgstr "attribut UUID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:419
+-#: src/config/SSSDConfig/sssdoptions.py:457
++#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:460
+ msgid "objectSID attribute"
+ msgstr "attribut objectSID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:420
++#: src/config/SSSDConfig/sssdoptions.py:423
+ msgid "Active Directory primary group attribute for ID-mapping"
+ msgstr "Groupe primaire Active Directory pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:421
++#: src/config/SSSDConfig/sssdoptions.py:424
+ msgid "User principal attribute (for Kerberos)"
+ msgstr "Attribut d'utilisateur principal (pour Kerberos)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Full Name"
+ msgstr "Nom complet"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:423
++#: src/config/SSSDConfig/sssdoptions.py:426
+ msgid "memberOf attribute"
+ msgstr "Attribut memberOf"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:427
+ msgid "Modification time attribute"
+ msgstr "Attribut de date de modification"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:425
++#: src/config/SSSDConfig/sssdoptions.py:428
+ msgid "shadowLastChange attribute"
+ msgstr "Attribut shadowLastChange"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:426
++#: src/config/SSSDConfig/sssdoptions.py:429
+ msgid "shadowMin attribute"
+ msgstr "Attribut shadowMin"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:427
++#: src/config/SSSDConfig/sssdoptions.py:430
+ msgid "shadowMax attribute"
+ msgstr "Attribut shadowMax"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:428
++#: src/config/SSSDConfig/sssdoptions.py:431
+ msgid "shadowWarning attribute"
+ msgstr "Attribut shadowWarning"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:429
++#: src/config/SSSDConfig/sssdoptions.py:432
+ msgid "shadowInactive attribute"
+ msgstr "Attribut shadowInactive"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:430
++#: src/config/SSSDConfig/sssdoptions.py:433
+ msgid "shadowExpire attribute"
+ msgstr "Attribut shadowExpire"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:431
++#: src/config/SSSDConfig/sssdoptions.py:434
+ msgid "shadowFlag attribute"
+ msgstr "Attribut shadowFlag"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:432
++#: src/config/SSSDConfig/sssdoptions.py:435
+ msgid "Attribute listing authorized PAM services"
+ msgstr "Attribut listant les services PAM autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:433
++#: src/config/SSSDConfig/sssdoptions.py:436
+ msgid "Attribute listing authorized server hosts"
+ msgstr "Attribut listant les hôtes de serveurs autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:434
++#: src/config/SSSDConfig/sssdoptions.py:437
+ msgid "Attribute listing authorized server rhosts"
+ msgstr "Attribut listant les rhosts de serveurs autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:435
++#: src/config/SSSDConfig/sssdoptions.py:438
+ msgid "krbLastPwdChange attribute"
+ msgstr "Attribut krbLastPwdChange"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:436
++#: src/config/SSSDConfig/sssdoptions.py:439
+ msgid "krbPasswordExpiration attribute"
+ msgstr "Attribut krbPasswordExpiration"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:437
++#: src/config/SSSDConfig/sssdoptions.py:440
+ msgid "Attribute indicating that server side password policies are active"
+ msgstr ""
+ "Attribut indiquant que la stratégie de mot de passe du serveur est active"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:438
++#: src/config/SSSDConfig/sssdoptions.py:441
+ msgid "accountExpires attribute of AD"
+ msgstr "Attribut AD accountExpires"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:439
++#: src/config/SSSDConfig/sssdoptions.py:442
+ msgid "userAccountControl attribute of AD"
+ msgstr "Attribut AD userAccountControl"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:440
++#: src/config/SSSDConfig/sssdoptions.py:443
+ msgid "nsAccountLock attribute"
+ msgstr "Attribut nsAccountLock"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:441
++#: src/config/SSSDConfig/sssdoptions.py:444
+ msgid "loginDisabled attribute of NDS"
+ msgstr "Attribut NDS loginDisabled"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:442
++#: src/config/SSSDConfig/sssdoptions.py:445
+ msgid "loginExpirationTime attribute of NDS"
+ msgstr "Attribut NDS loginExpirationTime"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:443
++#: src/config/SSSDConfig/sssdoptions.py:446
+ msgid "loginAllowedTimeMap attribute of NDS"
+ msgstr "Attribut NDS loginAllowedTimeMap"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:444
++#: src/config/SSSDConfig/sssdoptions.py:447
+ msgid "SSH public key attribute"
+ msgstr "Attribut de clé public SSH"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:445
++#: src/config/SSSDConfig/sssdoptions.py:448
+ msgid "attribute listing allowed authentication types for a user"
+ msgstr ""
+ "attribut énumérant les types d'authentification autorisés pour un utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:446
++#: src/config/SSSDConfig/sssdoptions.py:449
+ msgid "attribute containing the X509 certificate of the user"
+ msgstr "attribut contenant le certificat X509 de l'utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:447
++#: src/config/SSSDConfig/sssdoptions.py:450
+ msgid "attribute containing the email address of the user"
+ msgstr "attribut contenant l’adresse email de l'utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:448
++#: src/config/SSSDConfig/sssdoptions.py:451
+ msgid "A list of extra attributes to download along with the user entry"
+ msgstr ""
+ "Une liste des attributs supplémentaires à télécharger avec l'entrée de "
+ "l'utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:450
++#: src/config/SSSDConfig/sssdoptions.py:453
+ msgid "Base DN for group lookups"
+ msgstr "DN de base pour les recherches de groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:451
++#: src/config/SSSDConfig/sssdoptions.py:454
+ msgid "Objectclass for groups"
+ msgstr "Classe d'objet pour les groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:452
++#: src/config/SSSDConfig/sssdoptions.py:455
+ msgid "Group name"
+ msgstr "Nom du groupe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:453
++#: src/config/SSSDConfig/sssdoptions.py:456
+ msgid "Group password"
+ msgstr "Mot de passe du groupe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:454
++#: src/config/SSSDConfig/sssdoptions.py:457
+ msgid "GID attribute"
+ msgstr "Attribut GID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:455
++#: src/config/SSSDConfig/sssdoptions.py:458
+ msgid "Group member attribute"
+ msgstr "Attribut membre du groupe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:456
++#: src/config/SSSDConfig/sssdoptions.py:459
+ msgid "Group UUID attribute"
+ msgstr "attribut de l'UUID du groupe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:458
++#: src/config/SSSDConfig/sssdoptions.py:461
+ msgid "Modification time attribute for groups"
+ msgstr "Attribut de date de modification pour les groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:459
++#: src/config/SSSDConfig/sssdoptions.py:462
+ msgid "Type of the group and other flags"
+ msgstr "Type de groupe et autres indicateurs"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:460
++#: src/config/SSSDConfig/sssdoptions.py:463
+ msgid "The LDAP group external member attribute"
+ msgstr "L'attribut de membre externe du groupe LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:461
++#: src/config/SSSDConfig/sssdoptions.py:464
+ msgid "Maximum nesting level SSSD will follow"
+ msgstr "Le niveau d'imbrication maximal du SSSD suivra"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:462
++#: src/config/SSSDConfig/sssdoptions.py:465
+ msgid "Filter for group lookups"
+ msgstr "Filtre pour les recherches de groupes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:463
++#: src/config/SSSDConfig/sssdoptions.py:466
+ msgid "Scope of group lookups"
+ msgstr "Portée des recherches de groupe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:465
++#: src/config/SSSDConfig/sssdoptions.py:468
+ msgid "Base DN for netgroup lookups"
+ msgstr "DN de base pour les recherches de netgroup"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:466
++#: src/config/SSSDConfig/sssdoptions.py:469
+ msgid "Objectclass for netgroups"
+ msgstr "Classe d'objet pour les groupes réseau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:467
++#: src/config/SSSDConfig/sssdoptions.py:470
+ msgid "Netgroup name"
+ msgstr "Nom du groupe réseau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:468
++#: src/config/SSSDConfig/sssdoptions.py:471
+ msgid "Netgroups members attribute"
+ msgstr "Attribut des membres des groupes réseau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:469
++#: src/config/SSSDConfig/sssdoptions.py:472
+ msgid "Netgroup triple attribute"
+ msgstr "Attribut triplet du groupe réseau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:470
++#: src/config/SSSDConfig/sssdoptions.py:473
+ msgid "Modification time attribute for netgroups"
+ msgstr "Attribut date de modification pour les groupes réseau"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:472
++#: src/config/SSSDConfig/sssdoptions.py:475
+ msgid "Base DN for service lookups"
+ msgstr "Nom de domaine (DN) de base pour les recherches de service"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:473
++#: src/config/SSSDConfig/sssdoptions.py:476
+ msgid "Objectclass for services"
+ msgstr "Classe objet pour les services"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:474
++#: src/config/SSSDConfig/sssdoptions.py:477
+ msgid "Service name attribute"
+ msgstr "Attribut de nom de service"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:475
++#: src/config/SSSDConfig/sssdoptions.py:478
+ msgid "Service port attribute"
+ msgstr "Attribut de port du service"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:476
++#: src/config/SSSDConfig/sssdoptions.py:479
+ msgid "Service protocol attribute"
+ msgstr "Attribut de service du protocole"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:478
++#: src/config/SSSDConfig/sssdoptions.py:481
+ msgid "Lower bound for ID-mapping"
+ msgstr "Limite inférieure pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:479
++#: src/config/SSSDConfig/sssdoptions.py:482
+ msgid "Upper bound for ID-mapping"
+ msgstr "Limite supérieure pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:480
++#: src/config/SSSDConfig/sssdoptions.py:483
+ msgid "Number of IDs for each slice when ID-mapping"
+ msgstr "Nombre d'ID par tranche pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:481
++#: src/config/SSSDConfig/sssdoptions.py:484
+ msgid "Use autorid-compatible algorithm for ID-mapping"
+ msgstr ""
+ "Utilisation d'un algorithme compatible autorid pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:482
++#: src/config/SSSDConfig/sssdoptions.py:485
+ msgid "Name of the default domain for ID-mapping"
+ msgstr "Nom du domaine par défaut pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:483
++#: src/config/SSSDConfig/sssdoptions.py:486
+ msgid "SID of the default domain for ID-mapping"
+ msgstr "SID du domaine par défaut pour la correspondance d'ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:484
++#: src/config/SSSDConfig/sssdoptions.py:487
+ msgid "Number of secondary slices"
+ msgstr "Nombre de tranches secondaires"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:486
++#: src/config/SSSDConfig/sssdoptions.py:489
+ msgid "Whether to use Token-Groups"
+ msgstr "Choisir d'utiliser ou non les groupes de jetons"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:487
++#: src/config/SSSDConfig/sssdoptions.py:490
+ msgid "Set lower boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ "Définir la limite inférieure d'identifiants autorisés pour l'annuaire LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:488
++#: src/config/SSSDConfig/sssdoptions.py:491
+ msgid "Set upper boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ "Définir la limite supérieure d'identifiants autorisés pour l'annuaire LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:489
++#: src/config/SSSDConfig/sssdoptions.py:492
+ msgid "DN for ppolicy queries"
+ msgstr "DN pour les requêtes sur ppolicy"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:490
++#: src/config/SSSDConfig/sssdoptions.py:493
+ msgid "How many maximum entries to fetch during a wildcard request"
+ msgstr "Combien d'entrées maximum à récupérer lors d'une demande de wildcard"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:491
++#: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:494
++#: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+ msgstr "Stratégie d'évaluation de l'expiration du mot de passe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:498
++#: src/config/SSSDConfig/sssdoptions.py:501
+ msgid "Which attributes shall be used to evaluate if an account is expired"
+ msgstr "Quels attributs utiliser pour déterminer si un compte a expiré"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:499
++#: src/config/SSSDConfig/sssdoptions.py:502
+ msgid "Which rules should be used to evaluate access control"
+ msgstr "Quelles règles utiliser pour évaluer le contrôle d'accès"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:502
++#: src/config/SSSDConfig/sssdoptions.py:505
+ msgid "URI of an LDAP server where password changes are allowed"
+ msgstr "URI d'un serveur LDAP où les changements de mot de passe sont acceptés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:503
++#: src/config/SSSDConfig/sssdoptions.py:506
+ msgid "URI of a backup LDAP server where password changes are allowed"
+ msgstr ""
+ "URI d'un serveur LDAP de secours où sont autorisées les modifications de mot "
+ "de passe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:504
++#: src/config/SSSDConfig/sssdoptions.py:507
+ msgid "DNS service name for LDAP password change server"
+ msgstr "Nom du service DNS pour le serveur de changement de mot de passe LDAP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:505
++#: src/config/SSSDConfig/sssdoptions.py:508
+ msgid ""
+ "Whether to update the ldap_user_shadow_last_change attribute after a "
+ "password change"
+@@ -1826,23 +1838,23 @@ msgstr ""
+ "Choix de mise à jour de l'attribut ldap_user_shadow_last_change après un "
+ "changement de mot de passe"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:509
++#: src/config/SSSDConfig/sssdoptions.py:512
+ msgid "Base DN for sudo rules lookups"
+ msgstr "Nom de domaine (DN) de base pour les recherches de règles sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:510
++#: src/config/SSSDConfig/sssdoptions.py:513
+ msgid "Automatic full refresh period"
+ msgstr "Périodicité de rafraichissement total"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:511
++#: src/config/SSSDConfig/sssdoptions.py:514
+ msgid "Automatic smart refresh period"
+ msgstr "Périodicité de rafraichissement intelligent"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:512
++#: src/config/SSSDConfig/sssdoptions.py:515
+ msgid "Whether to filter rules by hostname, IP addresses and network"
+ msgstr "Filter ou non sur les noms de systèmes, adresses IP et réseaux"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:513
++#: src/config/SSSDConfig/sssdoptions.py:516
+ msgid ""
+ "Hostnames and/or fully qualified domain names of this machine to filter sudo "
+ "rules"
+@@ -1850,154 +1862,154 @@ msgstr ""
+ "Noms de systèmes et/ou noms pleinement qualifiés de cette machine pour "
+ "filtrer les règles sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:514
++#: src/config/SSSDConfig/sssdoptions.py:517
+ msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
+ msgstr ""
+ "Adresses ou réseaux IPv4 ou IPv6 de cette machine pour filtrer les règles "
+ "sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:515
++#: src/config/SSSDConfig/sssdoptions.py:518
+ msgid "Whether to include rules that contains netgroup in host attribute"
+ msgstr ""
+ "Inclure ou non les règles qui contiennent un netgroup dans l'attribut host"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:516
++#: src/config/SSSDConfig/sssdoptions.py:519
+ msgid ""
+ "Whether to include rules that contains regular expression in host attribute"
+ msgstr ""
+ "Inclure ou non les règles qui contiennent une expression rationnelle dans "
+ "l'attribut host"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:517
++#: src/config/SSSDConfig/sssdoptions.py:520
+ msgid "Object class for sudo rules"
+ msgstr "Classe objet pour les règles sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:518
++#: src/config/SSSDConfig/sssdoptions.py:521
+ msgid "Name of attribute that is used as object class for sudo rules"
+ msgstr ""
+ "Nom de l'attribut qui est utilisé comme classe d'objet pour les règles sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:519
++#: src/config/SSSDConfig/sssdoptions.py:522
+ msgid "Sudo rule name"
+ msgstr "Règle de nom sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:520
++#: src/config/SSSDConfig/sssdoptions.py:523
+ msgid "Sudo rule command attribute"
+ msgstr "Attribut de commande de règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:521
++#: src/config/SSSDConfig/sssdoptions.py:524
+ msgid "Sudo rule host attribute"
+ msgstr "Attribut hôte de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:522
++#: src/config/SSSDConfig/sssdoptions.py:525
+ msgid "Sudo rule user attribute"
+ msgstr "Attribut utilisateur de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:523
++#: src/config/SSSDConfig/sssdoptions.py:526
+ msgid "Sudo rule option attribute"
+ msgstr "Attribut option de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:524
++#: src/config/SSSDConfig/sssdoptions.py:527
+ msgid "Sudo rule runas attribute"
+ msgstr "Attribut de règle sudo runas"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:525
++#: src/config/SSSDConfig/sssdoptions.py:528
+ msgid "Sudo rule runasuser attribute"
+ msgstr "Attribut runasuser de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:526
++#: src/config/SSSDConfig/sssdoptions.py:529
+ msgid "Sudo rule runasgroup attribute"
+ msgstr "Attribut runasgroup de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:527
++#: src/config/SSSDConfig/sssdoptions.py:530
+ msgid "Sudo rule notbefore attribute"
+ msgstr "Attribut notbefore de la règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:528
++#: src/config/SSSDConfig/sssdoptions.py:531
+ msgid "Sudo rule notafter attribute"
+ msgstr "Attribut notafter de règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:529
++#: src/config/SSSDConfig/sssdoptions.py:532
+ msgid "Sudo rule order attribute"
+ msgstr "Attribut d'ordre de règle sudo"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:532
++#: src/config/SSSDConfig/sssdoptions.py:535
+ msgid "Object class for automounter maps"
+ msgstr "Classe objet pour la carte de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:533
++#: src/config/SSSDConfig/sssdoptions.py:536
+ msgid "Automounter map name attribute"
+ msgstr "Nom de l'attribut de carte de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:534
++#: src/config/SSSDConfig/sssdoptions.py:537
+ msgid "Object class for automounter map entries"
+ msgstr "Classe objet pour l'entrée de référence de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:535
++#: src/config/SSSDConfig/sssdoptions.py:538
+ msgid "Automounter map entry key attribute"
+ msgstr "Attribut de clé d'entrée pour la carte de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:536
++#: src/config/SSSDConfig/sssdoptions.py:539
+ msgid "Automounter map entry value attribute"
+ msgstr "Attribut de valeur pour la carte de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:537
++#: src/config/SSSDConfig/sssdoptions.py:540
+ msgid "Base DN for automounter map lookups"
+ msgstr "Base DN pour les requêtes de carte de montage automatique"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:538
++#: src/config/SSSDConfig/sssdoptions.py:541
+ msgid "The name of the automount master map in LDAP."
+ msgstr "Le nom de la table de montage automatique maîtresse dans LDAP."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:541
++#: src/config/SSSDConfig/sssdoptions.py:544
+ msgid "Base DN for IP hosts lookups"
+ msgstr "DN de base pour la recherche d'hôtes IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:542
++#: src/config/SSSDConfig/sssdoptions.py:545
+ msgid "Object class for IP hosts"
+ msgstr "Classe d'objet pour les hôtes IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:543
++#: src/config/SSSDConfig/sssdoptions.py:546
+ msgid "IP host name attribute"
+ msgstr "Attribut du nom d'hôte IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:544
++#: src/config/SSSDConfig/sssdoptions.py:547
+ msgid "IP host number (address) attribute"
+ msgstr "Attribut (adresse) du numéro d'hôte IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:545
++#: src/config/SSSDConfig/sssdoptions.py:548
+ msgid "IP host entryUSN attribute"
+ msgstr "Attribut entryUSN d’hôte IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:546
++#: src/config/SSSDConfig/sssdoptions.py:549
+ msgid "Base DN for IP networks lookups"
+ msgstr "DN de base pour la recherche de réseaux IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:547
++#: src/config/SSSDConfig/sssdoptions.py:550
+ msgid "Object class for IP networks"
+ msgstr "Classe d'objets pour les réseaux IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:548
++#: src/config/SSSDConfig/sssdoptions.py:551
+ msgid "IP network name attribute"
+ msgstr "Attribut du nom du réseau IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:549
++#: src/config/SSSDConfig/sssdoptions.py:552
+ msgid "IP network number (address) attribute"
+ msgstr "Attribut (adresse) du numéro de réseau IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:550
++#: src/config/SSSDConfig/sssdoptions.py:553
+ msgid "IP network entryUSN attribute"
+ msgstr "Attribut entryUSN de réseau IP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:553
++#: src/config/SSSDConfig/sssdoptions.py:556
+ msgid "Comma separated list of allowed users"
+ msgstr "Liste, séparée par des virgules, d'utilisateurs autorisés"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:554
++#: src/config/SSSDConfig/sssdoptions.py:557
+ msgid "Comma separated list of prohibited users"
+ msgstr "Liste, séparée par des virgules, d'utilisateurs interdits"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:555
++#: src/config/SSSDConfig/sssdoptions.py:558
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+@@ -2006,7 +2018,7 @@ msgstr ""
+ "s'applique qu'à des groupes dans un domaine SSSD. Les groupes locaux ne sont "
+ "pas pris en compte."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:557
++#: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+ "Comma separated list of groups that are explicitly denied access. This "
+ "applies only to groups within this SSSD domain. Local groups are not "
+@@ -2016,194 +2028,194 @@ msgstr ""
+ "s'applique qu'à des groupes dans un domaine SSSD. Les groupes locaux ne sont "
+ "pas pris en compte."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:561
++#: src/config/SSSDConfig/sssdoptions.py:564
+ msgid "Base for home directories"
+ msgstr "Base pour les répertoires utilisateur"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:562
++#: src/config/SSSDConfig/sssdoptions.py:565
+ msgid "Indicate if a home directory should be created for new users."
+ msgstr ""
+ "Indiquez si un répertoire d'accueil doit être créé pour les nouveaux "
+ "utilisateurs."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:563
++#: src/config/SSSDConfig/sssdoptions.py:566
+ msgid "Indicate if a home directory should be removed for deleted users."
+ msgstr ""
+ "Indiquez si un répertoire d’accueil doit être supprimé pour les utilisateurs "
+ "supprimés."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:564
++#: src/config/SSSDConfig/sssdoptions.py:567
+ msgid "Specify the default permissions on a newly created home directory."
+ msgstr ""
+ "Indiquez les autorisations par défaut sur un répertoire d'accueil "
+ "nouvellement créé."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:565
++#: src/config/SSSDConfig/sssdoptions.py:568
+ msgid "The skeleton directory."
+ msgstr "Le répertoire skeleton."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:566
++#: src/config/SSSDConfig/sssdoptions.py:569
+ msgid "The mail spool directory."
+ msgstr "Le répertoire mail spool."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:567
++#: src/config/SSSDConfig/sssdoptions.py:570
+ msgid "The command that is run after a user is removed."
+ msgstr "La commande qui est exécutée après la suppression d'un utilisateur."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:570
++#: src/config/SSSDConfig/sssdoptions.py:573
+ msgid "The number of preforked proxy children."
+ msgstr "Le nombre d'enfants proxy pré-fourche."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:573
++#: src/config/SSSDConfig/sssdoptions.py:576
+ msgid "The name of the NSS library to use"
+ msgstr "Nom de la bibliothèque NSS à utiliser"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:574
++#: src/config/SSSDConfig/sssdoptions.py:577
+ msgid "The name of the NSS library to use for hosts and networks lookups"
+ msgstr ""
+ "Le nom de la bibliothèque du NSS à utiliser pour les recherches réseaux et "
+ "hôtes"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:575
++#: src/config/SSSDConfig/sssdoptions.py:578
+ msgid "Whether to look up canonical group name from cache if possible"
+ msgstr "Rechercher le nom canonique du groupe dans le cache si possible"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:578
++#: src/config/SSSDConfig/sssdoptions.py:581
+ msgid "PAM stack to use"
+ msgstr "Pile PAM à utiliser"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:581
++#: src/config/SSSDConfig/sssdoptions.py:584
+ msgid "Path of passwd file sources."
+ msgstr "Chemin des sources des fichiers passwd."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:582
++#: src/config/SSSDConfig/sssdoptions.py:585
+ msgid "Path of group file sources."
+ msgstr "Chemin des sources des fichiers de groupe."
+ 
+-#: src/monitor/monitor.c:2376
++#: src/monitor/monitor.c:2381
+ msgid "Become a daemon (default)"
+ msgstr "Devenir un démon (par défaut)"
+ 
+-#: src/monitor/monitor.c:2378
++#: src/monitor/monitor.c:2383
+ msgid "Run interactive (not a daemon)"
+ msgstr "Fonctionner en interactif (non démon)"
+ 
+-#: src/monitor/monitor.c:2381
++#: src/monitor/monitor.c:2386
+ msgid "Disable netlink interface"
+ msgstr "Désactiver l'interface netlink"
+ 
+-#: src/monitor/monitor.c:2383 src/tools/sssctl/sssctl_config.c:77
++#: src/monitor/monitor.c:2388 src/tools/sssctl/sssctl_config.c:77
+ #: src/tools/sssctl/sssctl_logs.c:310
+ msgid "Specify a non-default config file"
+ msgstr "Définir un fichier de configuration différent de celui par défaut"
+ 
+-#: src/monitor/monitor.c:2385
++#: src/monitor/monitor.c:2390
+ msgid "Refresh the configuration database, then exit"
+ msgstr "Rafraîchissez la base de données de configuration, puis quittez"
+ 
+-#: src/monitor/monitor.c:2388
++#: src/monitor/monitor.c:2393
+ msgid "Similar to --genconf, but only refreshes the given section"
+ msgstr "Semblable à --genconf, mais ne rafraîchit que la section donnée"
+ 
+-#: src/monitor/monitor.c:2391
++#: src/monitor/monitor.c:2396
+ msgid "Print version number and exit"
+ msgstr "Afficher le numéro de version et quitte"
+ 
+-#: src/monitor/monitor.c:2537
++#: src/monitor/monitor.c:2542
+ msgid "SSSD is already running\n"
+ msgstr "SSSD est déjà en cours d'exécution\n"
+ 
+-#: src/providers/krb5/krb5_child.c:3260 src/providers/ldap/ldap_child.c:638
++#: src/providers/krb5/krb5_child.c:3274 src/providers/ldap/ldap_child.c:638
+ msgid "Debug level"
+ msgstr "Niveau de débogage"
+ 
+-#: src/providers/krb5/krb5_child.c:3262 src/providers/ldap/ldap_child.c:640
++#: src/providers/krb5/krb5_child.c:3276 src/providers/ldap/ldap_child.c:640
+ msgid "Add debug timestamps"
+ msgstr "Ajouter l'horodatage au débogage"
+ 
+-#: src/providers/krb5/krb5_child.c:3264 src/providers/ldap/ldap_child.c:642
++#: src/providers/krb5/krb5_child.c:3278 src/providers/ldap/ldap_child.c:642
+ msgid "Show timestamps with microseconds"
+ msgstr "Afficher l'horodatage en microsecondes"
+ 
+-#: src/providers/krb5/krb5_child.c:3266 src/providers/ldap/ldap_child.c:644
++#: src/providers/krb5/krb5_child.c:3280 src/providers/ldap/ldap_child.c:644
+ msgid "An open file descriptor for the debug logs"
+ msgstr "Un descripteur de fichier ouvert pour les journaux de débogage"
+ 
+-#: src/providers/krb5/krb5_child.c:3269 src/providers/ldap/ldap_child.c:646
++#: src/providers/krb5/krb5_child.c:3283 src/providers/ldap/ldap_child.c:646
+ msgid "Send the debug output to stderr directly."
+ msgstr "Envoyer la sortie de débogage directement vers l'erreur standard."
+ 
+-#: src/providers/krb5/krb5_child.c:3272
++#: src/providers/krb5/krb5_child.c:3286
+ msgid "The user to create FAST ccache as"
+ msgstr "L'utilisateur à utiliser pour la création du ccache FAST"
+ 
+-#: src/providers/krb5/krb5_child.c:3274
++#: src/providers/krb5/krb5_child.c:3288
+ msgid "The group to create FAST ccache as"
+ msgstr "Le groupe à utiliser pour la création du ccache FAST"
+ 
+-#: src/providers/krb5/krb5_child.c:3276
++#: src/providers/krb5/krb5_child.c:3290
+ msgid "Kerberos realm to use"
+ msgstr "Domaine Kerberos à utiliser"
+ 
+-#: src/providers/krb5/krb5_child.c:3278
++#: src/providers/krb5/krb5_child.c:3292
+ msgid "Requested lifetime of the ticket"
+ msgstr "Demande de renouvellement à vie du billet"
+ 
+-#: src/providers/krb5/krb5_child.c:3280
++#: src/providers/krb5/krb5_child.c:3294
+ msgid "Requested renewable lifetime of the ticket"
+ msgstr "Demande de renouvellement à vie du billet"
+ 
+-#: src/providers/krb5/krb5_child.c:3282
++#: src/providers/krb5/krb5_child.c:3296
+ msgid "FAST options ('never', 'try', 'demand')"
+ msgstr "Options FAST ('never', 'try', 'demand')"
+ 
+-#: src/providers/krb5/krb5_child.c:3285
++#: src/providers/krb5/krb5_child.c:3299
+ msgid "Specifies the server principal to use for FAST"
+ msgstr "Spécifie le principal de serveur afin d'utiliser FAST."
+ 
+-#: src/providers/krb5/krb5_child.c:3287
++#: src/providers/krb5/krb5_child.c:3301
+ msgid "Requests canonicalization of the principal name"
+ msgstr "Demande la canonisation du nom principal"
+ 
+-#: src/providers/krb5/krb5_child.c:3289
++#: src/providers/krb5/krb5_child.c:3303
+ msgid "Use custom version of krb5_get_init_creds_password"
+ msgstr "Utiliser la version personnalisée de krb5_get_init_creds_password"
+ 
+-#: src/providers/data_provider_be.c:699
++#: src/providers/data_provider_be.c:711
+ msgid "Domain of the information provider (mandatory)"
+ msgstr "Domaine du fournisseur d'informations (obligatoire)"
+ 
+-#: src/sss_client/common.c:1079
++#: src/sss_client/common.c:1088
+ msgid "Privileged socket has wrong ownership or permissions."
+ msgstr ""
+ "Le socket privilégié a de mauvaises permissions ou un mauvais propriétaire."
+ 
+-#: src/sss_client/common.c:1082
++#: src/sss_client/common.c:1091
+ msgid "Public socket has wrong ownership or permissions."
+ msgstr ""
+ "Le socket public a de mauvaises permissions ou un mauvais propriétaire."
+ 
+-#: src/sss_client/common.c:1085
++#: src/sss_client/common.c:1094
+ msgid "Unexpected format of the server credential message."
+ msgstr "Le message du serveur de crédits a un format inattendu."
+ 
+-#: src/sss_client/common.c:1088
++#: src/sss_client/common.c:1097
+ msgid "SSSD is not run by root."
+ msgstr "SSSD n'est pas démarré par root."
+ 
+-#: src/sss_client/common.c:1091
++#: src/sss_client/common.c:1100
+ msgid "SSSD socket does not exist."
+ msgstr "La socket SSSD n'existe pas."
+ 
+-#: src/sss_client/common.c:1094
++#: src/sss_client/common.c:1103
+ msgid "Cannot get stat of SSSD socket."
+ msgstr "Impossible d'obtenir le stat du socket SSSD."
+ 
+-#: src/sss_client/common.c:1099
++#: src/sss_client/common.c:1108
+ msgid "An error occurred, but no description can be found."
+ msgstr "Une erreur est survenue mais aucune description n'est trouvée."
+ 
+-#: src/sss_client/common.c:1105
++#: src/sss_client/common.c:1114
+ msgid "Unexpected error while looking for an error description"
+ msgstr "Erreur inattendue lors de la recherche de la description de l'erreur"
+ 
+@@ -2211,49 +2223,49 @@ msgstr "Erreur inattendue lors de la recherche de la description de l'erreur"
+ msgid "Permission denied. "
+ msgstr "Accès refusé."
+ 
+-#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:781
+-#: src/sss_client/pam_sss.c:792
++#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:785
++#: src/sss_client/pam_sss.c:796
+ msgid "Server message: "
+ msgstr "Message du serveur : "
+ 
+-#: src/sss_client/pam_sss.c:299
++#: src/sss_client/pam_sss.c:303
+ msgid "Passwords do not match"
+ msgstr "Les mots de passe ne correspondent pas"
+ 
+-#: src/sss_client/pam_sss.c:487
++#: src/sss_client/pam_sss.c:491
+ msgid "Password reset by root is not supported."
+ msgstr ""
+ "La réinitialisation du mot de passe par root n'est pas prise en charge."
+ 
+-#: src/sss_client/pam_sss.c:528
++#: src/sss_client/pam_sss.c:532
+ msgid "Authenticated with cached credentials"
+ msgstr "Authentifié avec les crédits mis en cache"
+ 
+-#: src/sss_client/pam_sss.c:529
++#: src/sss_client/pam_sss.c:533
+ msgid ", your cached password will expire at: "
+ msgstr ", votre mot de passe en cache expirera à :"
+ 
+-#: src/sss_client/pam_sss.c:559
++#: src/sss_client/pam_sss.c:563
+ #, c-format
+ msgid "Your password has expired. You have %1$d grace login(s) remaining."
+ msgstr ""
+ "Votre mot de passe a expiré. Il vous reste %1$d connexion(s) autorisée(s)."
+ 
+-#: src/sss_client/pam_sss.c:605
++#: src/sss_client/pam_sss.c:609
+ #, c-format
+ msgid "Your password will expire in %1$d %2$s."
+ msgstr "Votre mot de passe expirera dans %1$d %2$s."
+ 
+-#: src/sss_client/pam_sss.c:654
++#: src/sss_client/pam_sss.c:658
+ msgid "Authentication is denied until: "
+ msgstr "L'authentification est refusée jusque :"
+ 
+-#: src/sss_client/pam_sss.c:675
++#: src/sss_client/pam_sss.c:679
+ msgid "System is offline, password change not possible"
+ msgstr ""
+ "Le système est hors-ligne, les modifications du mot de passe sont impossibles"
+ 
+-#: src/sss_client/pam_sss.c:690
++#: src/sss_client/pam_sss.c:694
+ msgid ""
+ "After changing the OTP password, you need to log out and back in order to "
+ "acquire a ticket"
+@@ -2261,43 +2273,43 @@ msgstr ""
+ "Après avoir modifié le mot de passe OTP, vous devez vous déconnecter et vous "
+ "reconnecter afin d'acquérir un ticket"
+ 
+-#: src/sss_client/pam_sss.c:778 src/sss_client/pam_sss.c:791
++#: src/sss_client/pam_sss.c:782 src/sss_client/pam_sss.c:795
+ msgid "Password change failed. "
+ msgstr "Échec du changement de mot de passe."
+ 
+-#: src/sss_client/pam_sss.c:2015
++#: src/sss_client/pam_sss.c:2044
+ msgid "New Password: "
+ msgstr "Nouveau mot de passe : "
+ 
+-#: src/sss_client/pam_sss.c:2016
++#: src/sss_client/pam_sss.c:2045
+ msgid "Reenter new Password: "
+ msgstr "Retaper le nouveau mot de passe : "
+ 
+-#: src/sss_client/pam_sss.c:2178 src/sss_client/pam_sss.c:2181
++#: src/sss_client/pam_sss.c:2207 src/sss_client/pam_sss.c:2210
+ msgid "First Factor: "
+ msgstr "Premier facteur :"
+ 
+-#: src/sss_client/pam_sss.c:2179 src/sss_client/pam_sss.c:2353
++#: src/sss_client/pam_sss.c:2208 src/sss_client/pam_sss.c:2382
+ msgid "Second Factor (optional): "
+ msgstr "Deuxième facteur (facultatif) : "
+ 
+-#: src/sss_client/pam_sss.c:2182 src/sss_client/pam_sss.c:2356
++#: src/sss_client/pam_sss.c:2211 src/sss_client/pam_sss.c:2385
+ msgid "Second Factor: "
+ msgstr "Second facteur :"
+ 
+-#: src/sss_client/pam_sss.c:2200
++#: src/sss_client/pam_sss.c:2229
+ msgid "Password: "
+ msgstr "Mot de passe : "
+ 
+-#: src/sss_client/pam_sss.c:2352 src/sss_client/pam_sss.c:2355
++#: src/sss_client/pam_sss.c:2381 src/sss_client/pam_sss.c:2384
+ msgid "First Factor (Current Password): "
+ msgstr "Premier facteur (mot de passe actuel) : "
+ 
+-#: src/sss_client/pam_sss.c:2359
++#: src/sss_client/pam_sss.c:2388
+ msgid "Current Password: "
+ msgstr "Mot de passe actuel : "
+ 
+-#: src/sss_client/pam_sss.c:2716
++#: src/sss_client/pam_sss.c:2745
+ msgid "Password expired. Change your password now."
+ msgstr "Mot de passe expiré. Changez votre mot de passe maintenant."
+ 
+@@ -3502,18 +3514,18 @@ msgstr "Environnement PAM :\n"
+ msgid " - no env -\n"
+ msgstr " - no env -\n"
+ 
+-#: src/util/util.h:82
++#: src/util/util.h:86
+ msgid "The user ID to run the server as"
+ msgstr "L'identifiant utilisateur sous lequel faire tourner le serveur"
+ 
+-#: src/util/util.h:84
++#: src/util/util.h:88
+ msgid "The group ID to run the server as"
+ msgstr "L'identifiant de groupe sous lequel faire tourner le serveur"
+ 
+-#: src/util/util.h:92
++#: src/util/util.h:96
+ msgid "Informs that the responder has been socket-activated"
+ msgstr "Informe que le répondeur a été activé par un socket"
+ 
+-#: src/util/util.h:94
++#: src/util/util.h:98
+ msgid "Informs that the responder has been dbus-activated"
+ msgstr "Informe que le répondeur a été activé par un dbus"
+diff --git a/po/ja.po b/po/ja.po
+index a43084de9..25b456e8d 100644
+--- a/po/ja.po
++++ b/po/ja.po
+@@ -12,7 +12,7 @@ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+-"POT-Creation-Date: 2020-10-12 12:21+0200\n"
++"POT-Creation-Date: 2021-02-05 11:58+0100\n"
+ "PO-Revision-Date: 2020-07-22 07:46-0400\n"
+ "Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
+ "Language-Team: Japanese (http://www.transifex.com/projects/p/sssd/language/"
+@@ -175,7 +175,7 @@ msgid "Entry cache background update timeout length (seconds)"
+ msgstr "エントリーキャッシュのバックグラウンド更新のタイムアウト時間（秒）"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+-#: src/config/SSSDConfig/sssdoptions.py:115
++#: src/config/SSSDConfig/sssdoptions.py:117
+ msgid "Negative cache timeout length (seconds)"
+ msgstr "ネガティブキャッシュのタイムアウト（秒）"
+ 
+@@ -360,15 +360,23 @@ msgstr "スマートカード認証向けのデバイスの選択を PKCS#11 URI
+ msgid "When shall the PAM responder force an initgroups request"
+ msgstr "PAM レスポンダーが initgroups リクエストを強制するとき"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:109
++#: src/config/SSSDConfig/sssdoptions.py:107
++msgid "List of PAM services that are allowed to authenticate with GSSAPI."
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:108
++msgid "Whether to match authenticated UPN with target user"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+ msgstr "sudo ルールにおいて時間による属性を評価するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:110
++#: src/config/SSSDConfig/sssdoptions.py:112
+ msgid "If true, SSSD will switch back to lower-wins ordering logic"
+ msgstr "正しい場合、SSSD は小さい番号が優先される順位付けのロジックへ戻ります"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:111
++#: src/config/SSSDConfig/sssdoptions.py:113
+ msgid ""
+ "Maximum number of rules that can be refreshed at once. If this is exceeded, "
+ "full refresh is performed."
+@@ -376,105 +384,105 @@ msgstr ""
+ "一度にリフレッシュ可能なルールの最大数。最大数を超えると、フルリフレッシュが"
+ "実行されます。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:118
++#: src/config/SSSDConfig/sssdoptions.py:120
+ msgid "Whether to hash host names and addresses in the known_hosts file"
+ msgstr "known_hosts ファイルにおいてホスト名とアドレスをハッシュ化するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:119
++#: src/config/SSSDConfig/sssdoptions.py:121
+ msgid ""
+ "How many seconds to keep a host in the known_hosts file after its host keys "
+ "were requested"
+ msgstr "ホスト鍵が要求された後 known_hosts ファイルにホストを保持する秒数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:121
++#: src/config/SSSDConfig/sssdoptions.py:123
+ msgid "Path to storage of trusted CA certificates"
+ msgstr "信頼された CA 証明書のストレージへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:122
++#: src/config/SSSDConfig/sssdoptions.py:124
+ msgid "Allow to generate ssh-keys from certificates"
+ msgstr "証明書からの ssh-key の生成を許可します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:123
++#: src/config/SSSDConfig/sssdoptions.py:125
+ msgid ""
+ "Use the following matching rules to filter the certificates for ssh-key "
+ "generation"
+ msgstr ""
+ "以下の一致するルールを使用して、ssh-key 生成用の証明書をフィルタリングします"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:127
++#: src/config/SSSDConfig/sssdoptions.py:129
+ msgid "List of UIDs or user names allowed to access the PAC responder"
+ msgstr "PAC レスポンダーへのアクセスが許可された UID またはユーザー名の一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:128
++#: src/config/SSSDConfig/sssdoptions.py:130
+ msgid "How long the PAC data is considered valid"
+ msgstr "PAC データが有効とされる期間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:131
++#: src/config/SSSDConfig/sssdoptions.py:133
+ msgid "List of user attributes the InfoPipe is allowed to publish"
+ msgstr "InfoPipe がパブリッシュを許可されたユーザー属性の一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:134
++#: src/config/SSSDConfig/sssdoptions.py:136
+ msgid "The provider where the secrets will be stored in"
+ msgstr "シークレットが保存されるプロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:135
++#: src/config/SSSDConfig/sssdoptions.py:137
+ msgid "The maximum allowed number of nested containers"
+ msgstr "ネストされたコンテナーの最大許可数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:136
++#: src/config/SSSDConfig/sssdoptions.py:138
+ msgid "The maximum number of secrets that can be stored"
+ msgstr "保存可能なシークレットの最大数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:137
++#: src/config/SSSDConfig/sssdoptions.py:139
+ msgid "The maximum number of secrets that can be stored per UID"
+ msgstr "UID ごとに保存可能なシークレットの最大数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:138
++#: src/config/SSSDConfig/sssdoptions.py:140
+ msgid "The maximum payload size of a secret in kilobytes"
+ msgstr "キロバイトでのシークレットの最大ペイロードサイズ"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:140
++#: src/config/SSSDConfig/sssdoptions.py:142
+ msgid "The URL Custodia server is listening on"
+ msgstr "URL Custodia サーバーはリッスンしています"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:141
++#: src/config/SSSDConfig/sssdoptions.py:143
+ msgid "The method to use when authenticating to a Custodia server"
+ msgstr "Custodia サーバーへの認証時に使用する方法"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:142
++#: src/config/SSSDConfig/sssdoptions.py:144
+ msgid ""
+ "The name of the headers that will be added into a HTTP request with the "
+ "value defined in auth_header_value"
+ msgstr ""
+ "auth_header_value で値が定義され、HTTP リクエストに追加されるヘッダーの名前"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:144
++#: src/config/SSSDConfig/sssdoptions.py:146
+ msgid "The value sssd-secrets would use for auth_header_name"
+ msgstr "sssd-secrets の値は、auth_header_name で使用します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:145
++#: src/config/SSSDConfig/sssdoptions.py:147
+ msgid ""
+ "The list of the headers to forward to the Custodia server together with the "
+ "request"
+ msgstr "要求と共に Custodia サーバーへ転送するヘッダーの一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:146
++#: src/config/SSSDConfig/sssdoptions.py:148
+ msgid ""
+ "The username to use when authenticating to a Custodia server using basic_auth"
+ msgstr "basic_auth を使った Custodia サーバーへの認証時に使用するユーザー名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:147
++#: src/config/SSSDConfig/sssdoptions.py:149
+ msgid ""
+ "The password to use when authenticating to a Custodia server using basic_auth"
+ msgstr "basic_auth を使った Custodia サーバーへの認証時に使用するパスワード"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:148
++#: src/config/SSSDConfig/sssdoptions.py:150
+ msgid "If true peer's certificate is verified if proxy_url uses https protocol"
+ msgstr ""
+ "proxy_url が https protocol を使用する場合に、正しいピアの証明書が検証される"
+ "かどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:149
++#: src/config/SSSDConfig/sssdoptions.py:151
+ msgid ""
+ "If false peer's certificate may contain different hostname than proxy_url "
+ "when https protocol is used"
+@@ -482,23 +490,23 @@ msgstr ""
+ "https プロトコルが使用される場合に、間違ったピアの証明書が proxy_url 以外の異"
+ "なるホスト名を含むかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:151
++#: src/config/SSSDConfig/sssdoptions.py:153
+ msgid "Path to directory where certificate authority certificates are stored"
+ msgstr "CA 証明書が保存されているディレクトリーへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:152
++#: src/config/SSSDConfig/sssdoptions.py:154
+ msgid "Path to file containing server's CA certificate"
+ msgstr "サーバーの CA 証明書を含むファイルへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:153
++#: src/config/SSSDConfig/sssdoptions.py:155
+ msgid "Path to file containing client's certificate"
+ msgstr "クライアントの証明書を含むファイルへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:154
++#: src/config/SSSDConfig/sssdoptions.py:156
+ msgid "Path to file containing client's private key"
+ msgstr "クライアントの秘密鍵を含むファイルへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:157
++#: src/config/SSSDConfig/sssdoptions.py:159
+ msgid ""
+ "One of the following strings specifying the scope of session recording: none "
+ "- No users are recorded. some - Users/groups specified by users and groups "
+@@ -508,7 +516,7 @@ msgstr ""
+ "いません。some: ユーザーとグループオプションによって指定されているユーザー/グ"
+ "ループが記録されています。all: すべてのユーザーが記録されます。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:160
++#: src/config/SSSDConfig/sssdoptions.py:162
+ msgid ""
+ "A comma-separated list of users which should have session recording enabled. "
+ "Matches user names as returned by NSS. I.e. after the possible space "
+@@ -518,7 +526,7 @@ msgstr ""
+ "返すユーザー名にマッチします。つまり、スペースの置換、大文字小文字の変更など"
+ "の可能性がある場合には、その後になります。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:162
++#: src/config/SSSDConfig/sssdoptions.py:164
+ msgid ""
+ "A comma-separated list of groups, members of which should have session "
+ "recording enabled. Matches group names as returned by NSS. I.e. after the "
+@@ -528,112 +536,112 @@ msgstr ""
+ "トです。NSS が返すグループ名にマッチします。つまり、スペースの置換、大文字小"
+ "文字の変更などの可能性がある場合には、その後になります。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:165
++#: src/config/SSSDConfig/sssdoptions.py:167
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:166
++#: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:170
++#: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+ msgstr "アイデンティティープロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:171
++#: src/config/SSSDConfig/sssdoptions.py:173
+ msgid "Authentication provider"
+ msgstr "認証プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:172
++#: src/config/SSSDConfig/sssdoptions.py:174
+ msgid "Access control provider"
+ msgstr "アクセス制御プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:173
++#: src/config/SSSDConfig/sssdoptions.py:175
+ msgid "Password change provider"
+ msgstr "パスワード変更プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:174
++#: src/config/SSSDConfig/sssdoptions.py:176
+ msgid "SUDO provider"
+ msgstr "SUDO プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:175
++#: src/config/SSSDConfig/sssdoptions.py:177
+ msgid "Autofs provider"
+ msgstr "Autofs プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:176
++#: src/config/SSSDConfig/sssdoptions.py:178
+ msgid "Host identity provider"
+ msgstr "ホスト識別プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:177
++#: src/config/SSSDConfig/sssdoptions.py:179
+ msgid "SELinux provider"
+ msgstr "SELinux プロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:178
++#: src/config/SSSDConfig/sssdoptions.py:180
+ msgid "Session management provider"
+ msgstr "セッションマネージャーのプロバイダー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:179
++#: src/config/SSSDConfig/sssdoptions.py:181
+ msgid "Resolver provider"
+ msgstr "リゾルバープロバイダ"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:182
++#: src/config/SSSDConfig/sssdoptions.py:184
+ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "OS またはアプリケーションがドメインを使用できるかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:183
++#: src/config/SSSDConfig/sssdoptions.py:185
+ #, fuzzy
+ msgid "Enable or disable the domain"
+ msgstr "暗黙のファイルドメインを有効化または無効化する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:184
++#: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+ msgstr "最小ユーザー ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:185
++#: src/config/SSSDConfig/sssdoptions.py:187
+ msgid "Maximum user ID"
+ msgstr "最大ユーザー ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:186
++#: src/config/SSSDConfig/sssdoptions.py:188
+ msgid "Enable enumerating all users/groups"
+ msgstr "すべてのユーザー・グループの列挙を有効にする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:187
++#: src/config/SSSDConfig/sssdoptions.py:189
+ msgid "Cache credentials for offline login"
+ msgstr "オフラインログインのためにクレデンシャルをキャッシュする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:188
++#: src/config/SSSDConfig/sssdoptions.py:190
+ msgid "Display users/groups in fully-qualified form"
+ msgstr "ユーザー・グループを完全修飾形式で表示する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:189
++#: src/config/SSSDConfig/sssdoptions.py:191
+ msgid "Don't include group members in group lookups"
+ msgstr "グループ検索にグループメンバーを含めない"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:190
+-#: src/config/SSSDConfig/sssdoptions.py:200
+-#: src/config/SSSDConfig/sssdoptions.py:201
++#: src/config/SSSDConfig/sssdoptions.py:192
+ #: src/config/SSSDConfig/sssdoptions.py:202
+ #: src/config/SSSDConfig/sssdoptions.py:203
+ #: src/config/SSSDConfig/sssdoptions.py:204
+ #: src/config/SSSDConfig/sssdoptions.py:205
+ #: src/config/SSSDConfig/sssdoptions.py:206
++#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:208
+ msgid "Entry cache timeout length (seconds)"
+ msgstr "エントリーキャッシュのタイムアウト長（秒）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:191
++#: src/config/SSSDConfig/sssdoptions.py:193
+ msgid ""
+ "Restrict or prefer a specific address family when performing DNS lookups"
+ msgstr "DNS 検索を実行する時に特定のアドレスファミリーを制限または優先します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:192
++#: src/config/SSSDConfig/sssdoptions.py:194
+ msgid "How long to keep cached entries after last successful login (days)"
+ msgstr "最終ログイン成功時からキャッシュエントリーを保持する日数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:193
++#: src/config/SSSDConfig/sssdoptions.py:195
+ msgid ""
+ "How long should SSSD talk to single DNS server before trying next server "
+ "(miliseconds)"
+@@ -641,99 +649,99 @@ msgstr ""
+ "次のサーバーを試行するまでに SSSD が単一の DNS サーバーと通信する時間 (ミリ"
+ "秒)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:195
++#: src/config/SSSDConfig/sssdoptions.py:197
+ msgid "How long should keep trying to resolve single DNS query (seconds)"
+ msgstr "単一の DNS クエリーの解決を試行する時間 (秒)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:196
++#: src/config/SSSDConfig/sssdoptions.py:198
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+ msgstr "サーバーを名前解決する時に DNS から応答を待つ時間（秒）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:197
++#: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "The domain part of service discovery DNS query"
+ msgstr "サービス検索 DNS クエリーのドメイン部分"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:198
++#: src/config/SSSDConfig/sssdoptions.py:200
+ msgid "Override GID value from the identity provider with this value"
+ msgstr "識別プロバイダーからの GID 値をこの値で上書きする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:199
++#: src/config/SSSDConfig/sssdoptions.py:201
+ msgid "Treat usernames as case sensitive"
+ msgstr "ユーザー名が大文字小文字を区別するよう取り扱う"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:209
+ msgid "How often should expired entries be refreshed in background"
+ msgstr "期限切れのエントリーがバックグラウンドで更新される頻度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:208
++#: src/config/SSSDConfig/sssdoptions.py:210
+ msgid "Whether to automatically update the client's DNS entry"
+ msgstr "自動的にクライアントの DNS エントリーを更新するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:209
+-#: src/config/SSSDConfig/sssdoptions.py:239
++#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:241
+ msgid "The TTL to apply to the client's DNS entry after updating it"
+ msgstr "クライアントの DNS 項目を更新後、適用する TTL"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:210
+-#: src/config/SSSDConfig/sssdoptions.py:240
++#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:242
+ msgid "The interface whose IP should be used for dynamic DNS updates"
+ msgstr "動的 DNS 更新のために使用される IP のインターフェース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:213
+ msgid "How often to periodically update the client's DNS entry"
+ msgstr "どのくらい定期的にクライアントの DNS エントリーを更新するか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:214
+ msgid "Whether the provider should explicitly update the PTR record as well"
+ msgstr ""
+ "プロバイダーが同じように PTR レコードを明示的に更新する必要があるかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:215
+ msgid "Whether the nsupdate utility should default to using TCP"
+ msgstr "nsupdate ユーティリティーが標準で TCP を使用するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:216
+ msgid "What kind of authentication should be used to perform the DNS update"
+ msgstr "DNS 更新を実行するために使用すべき認証の種類"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:215
++#: src/config/SSSDConfig/sssdoptions.py:217
+ msgid "Override the DNS server used to perform the DNS update"
+ msgstr "DNS の更新を実行する際に使用する DNS サーバーを上書き"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:216
++#: src/config/SSSDConfig/sssdoptions.py:218
+ msgid "Control enumeration of trusted domains"
+ msgstr "信頼されたドメインの列挙を制御"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:217
++#: src/config/SSSDConfig/sssdoptions.py:219
+ msgid "How often should subdomains list be refreshed"
+ msgstr "サブドメインの一覧のリフレッシュ回数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:218
++#: src/config/SSSDConfig/sssdoptions.py:220
+ msgid "List of options that should be inherited into a subdomain"
+ msgstr "サブドメインに継承すべきオプションの一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:219
++#: src/config/SSSDConfig/sssdoptions.py:221
+ msgid "Default subdomain homedir value"
+ msgstr "デフォルトのサブドメインホームディレクトリーの値"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:220
++#: src/config/SSSDConfig/sssdoptions.py:222
+ msgid "How long can cached credentials be used for cached authentication"
+ msgstr "証明書キャッシュを認証キャッシュに使用できる期間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:221
++#: src/config/SSSDConfig/sssdoptions.py:223
+ msgid "Whether to automatically create private groups for users"
+ msgstr "ユーザーにプライベートグループを自動的に作成するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:222
++#: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "Display a warning N days before the password expires."
+ msgstr "Display a warning N days before the password expires."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:223
++#: src/config/SSSDConfig/sssdoptions.py:225
+ msgid ""
+ "Various tags stored by the realmd configuration service for this domain."
+ msgstr "このドメインのための realmd 設定サービスによって格納された様々なタグ。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:224
++#: src/config/SSSDConfig/sssdoptions.py:226
+ msgid ""
+ "The provider which should handle fetching of subdomains. This value should "
+ "be always the same as id_provider."
+@@ -741,7 +749,7 @@ msgstr ""
+ "サブドメインの取得を処理する必要のあるプロバイダー。この値は常に id_provider "
+ "と同じでなければなりません。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:226
++#: src/config/SSSDConfig/sssdoptions.py:228
+ msgid ""
+ "How many seconds to keep a host ssh key after refresh. IE how long to cache "
+ "the host key for."
+@@ -749,7 +757,7 @@ msgstr ""
+ "リフレッシュ後にホストの ssh 鍵を保持するには何秒かかるか。IE ホストキーを何"
+ "秒キャッシュするか。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:228
++#: src/config/SSSDConfig/sssdoptions.py:230
+ msgid ""
+ "If 2-Factor-Authentication (2FA) is used and credentials should be saved "
+ "this value determines the minimal length the first authentication factor "
+@@ -759,95 +767,95 @@ msgstr ""
+ "この値は、最初の認証要素 (長期パスワード) を SHA512 ハッシュとしてキャッシュ"
+ "に保存する必要がある最小の長さを決定します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:234
++#: src/config/SSSDConfig/sssdoptions.py:236
+ msgid "IPA domain"
+ msgstr "IPA ドメイン"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:235
++#: src/config/SSSDConfig/sssdoptions.py:237
+ msgid "IPA server address"
+ msgstr "IPA サーバーのアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:236
++#: src/config/SSSDConfig/sssdoptions.py:238
+ msgid "Address of backup IPA server"
+ msgstr "バックアップ IPA サーバーのアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:237
++#: src/config/SSSDConfig/sssdoptions.py:239
+ msgid "IPA client hostname"
+ msgstr "IPA クライアントのホスト名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:238
++#: src/config/SSSDConfig/sssdoptions.py:240
+ msgid "Whether to automatically update the client's DNS entry in FreeIPA"
+ msgstr "FreeIPA にあるクライアントの DNS エントリーを自動的に更新するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:241
++#: src/config/SSSDConfig/sssdoptions.py:243
+ msgid "Search base for HBAC related objects"
+ msgstr "HBAC 関連オブジェクトの検索ベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:242
++#: src/config/SSSDConfig/sssdoptions.py:244
+ msgid ""
+ "The amount of time between lookups of the HBAC rules against the IPA server"
+ msgstr "IPA サーバーに対する HBAC ルールを検索している間の合計時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:243
++#: src/config/SSSDConfig/sssdoptions.py:245
+ msgid ""
+ "The amount of time in seconds between lookups of the SELinux maps against "
+ "the IPA server"
+ msgstr "IPA サーバーに対する SELinux マップの検索の間の秒単位の合計時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:245
++#: src/config/SSSDConfig/sssdoptions.py:247
+ msgid "If set to false, host argument given by PAM will be ignored"
+ msgstr "もし偽に設定されていると、PAM により渡されたホスト引数は無視されます"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:246
++#: src/config/SSSDConfig/sssdoptions.py:248
+ msgid "The automounter location this IPA client is using"
+ msgstr "この IPA クライアントが使用している automounter の場所"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:247
++#: src/config/SSSDConfig/sssdoptions.py:249
+ msgid "Search base for object containing info about IPA domain"
+ msgstr "IPA ドメインに関する情報を含むオブジェクトに対する検索ベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:248
++#: src/config/SSSDConfig/sssdoptions.py:250
+ msgid "Search base for objects containing info about ID ranges"
+ msgstr "ID 範囲に関する情報を含むオブジェクトに対する検索ベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:249
+-#: src/config/SSSDConfig/sssdoptions.py:303
++#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:305
+ msgid "Enable DNS sites - location based service discovery"
+ msgstr "DNS サイトの有効化 - 位置ベースのサービス検索"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:250
++#: src/config/SSSDConfig/sssdoptions.py:252
+ msgid "Search base for view containers"
+ msgstr "ビューコンテナーの検索ベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:253
+ msgid "Objectclass for view containers"
+ msgstr "ビューコンテナーのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:252
++#: src/config/SSSDConfig/sssdoptions.py:254
+ msgid "Attribute with the name of the view"
+ msgstr "ビューの名前の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:255
+ msgid "Objectclass for override objects"
+ msgstr "上書きされたオブジェクトのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:254
++#: src/config/SSSDConfig/sssdoptions.py:256
+ msgid "Attribute with the reference to the original object"
+ msgstr "オリジナルオブジェクトを参照する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:255
++#: src/config/SSSDConfig/sssdoptions.py:257
+ msgid "Objectclass for user override objects"
+ msgstr "ユーザーが上書きするオブジェクトのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:256
++#: src/config/SSSDConfig/sssdoptions.py:258
+ msgid "Objectclass for group override objects"
+ msgstr "グループが上書きするオブジェクトのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:257
++#: src/config/SSSDConfig/sssdoptions.py:259
+ msgid "Search base for Desktop Profile related objects"
+ msgstr "デスクトッププロファイルに関連するオブジェクトの検索ベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:258
++#: src/config/SSSDConfig/sssdoptions.py:260
+ msgid ""
+ "The amount of time in seconds between lookups of the Desktop Profile rules "
+ "against the IPA server"
+@@ -855,7 +863,7 @@ msgstr ""
+ "IPA サーバーに対するデスクトッププロファイルルールを検索している間の秒単位の"
+ "合計時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:260
++#: src/config/SSSDConfig/sssdoptions.py:262
+ msgid ""
+ "The amount of time in minutes between lookups of Desktop Profiles rules "
+ "against the IPA server when the last request did not find any rule"
+@@ -863,32 +871,32 @@ msgstr ""
+ "最後の要求がルールを何も見つけなかった場合の IPA サーバーに対するデスクトップ"
+ "プロファイルル ールを検索している間の分単位の合計時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:263
++#: src/config/SSSDConfig/sssdoptions.py:265
+ msgid "The LDAP attribute that contains FQDN of the host."
+ msgstr "ホストの FQDN を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:264
+-#: src/config/SSSDConfig/sssdoptions.py:287
++#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:289
+ msgid "The object class of a host entry in LDAP."
+ msgstr "LDAP にあるホストエントリーのオブジェクトクラスです。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:265
++#: src/config/SSSDConfig/sssdoptions.py:267
+ msgid "Use the given string as search base for host objects."
+ msgstr "ホストオブジェクトの検索ベースとして与えられた文字列を使用します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:268
+ msgid "The LDAP attribute that contains the host's SSH public keys."
+ msgstr "ホストの SSH 公開鍵を含む LDAP 属性です。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:267
++#: src/config/SSSDConfig/sssdoptions.py:269
+ msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+ msgstr "ネットグループの NIS ドメイン名を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+ msgstr "The LDAP attribute that contains the names of the netgroup's members."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:269
++#: src/config/SSSDConfig/sssdoptions.py:271
+ msgid ""
+ "The LDAP attribute that lists FQDNs of hosts and host groups that are "
+ "members of the netgroup."
+@@ -896,7 +904,7 @@ msgstr ""
+ "ネットグループのメンバーであるホストとホストグループの FQDN を一覧表示する "
+ "LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:271
++#: src/config/SSSDConfig/sssdoptions.py:273
+ msgid ""
+ "The LDAP attribute that lists hosts and host groups that are direct members "
+ "of the netgroup."
+@@ -904,11 +912,11 @@ msgstr ""
+ "ネットグループの直接のメンバーであるホストとホストグループを一覧表示する "
+ "LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:273
++#: src/config/SSSDConfig/sssdoptions.py:275
+ msgid "The LDAP attribute that lists netgroup's memberships."
+ msgstr "ネットグループのメンバーシップを一覧表示する LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:274
++#: src/config/SSSDConfig/sssdoptions.py:276
+ msgid ""
+ "The LDAP attribute that lists system users and groups that are direct "
+ "members of the netgroup."
+@@ -916,45 +924,45 @@ msgstr ""
+ "ネットグループの直接のメンバーであるシステムユーザーとグループを一覧表示する "
+ "LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:276
++#: src/config/SSSDConfig/sssdoptions.py:278
+ msgid "The LDAP attribute that corresponds to the netgroup name."
+ msgstr "ネットワークグループ名に対応する LDAP 属性です。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:277
++#: src/config/SSSDConfig/sssdoptions.py:279
+ msgid "The object class of a netgroup entry in LDAP."
+ msgstr "LDAP にあるネットワークグループエントリーのオブジェクトクラスです。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:278
++#: src/config/SSSDConfig/sssdoptions.py:280
+ msgid ""
+ "The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+ msgstr "LDAP ネットグループオブジェクトの UUID/GUID を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:279
++#: src/config/SSSDConfig/sssdoptions.py:281
+ msgid ""
+ "The LDAP attribute that contains whether or not is user map enabled for "
+ "usage."
+ msgstr "使用のためにユーザーマップが有効になっているかどうかを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:281
++#: src/config/SSSDConfig/sssdoptions.py:283
+ msgid "The LDAP attribute that contains host category such as 'all'."
+ msgstr "'all' などのホストカテゴリを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:282
++#: src/config/SSSDConfig/sssdoptions.py:284
+ msgid ""
+ "The LDAP attribute that contains all hosts / hostgroups this rule match "
+ "against."
+ msgstr "このルールがマッチするすべてのホスト/ホストグループを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:284
++#: src/config/SSSDConfig/sssdoptions.py:286
+ msgid ""
+ "The LDAP attribute that contains all users / groups this rule match against."
+ msgstr "このルールがマッチするすべてのユーザー/グループを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:286
++#: src/config/SSSDConfig/sssdoptions.py:288
+ msgid "The LDAP attribute that contains the name of SELinux usermap."
+ msgstr "SELinux usermap の名前を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:288
++#: src/config/SSSDConfig/sssdoptions.py:290
+ msgid ""
+ "The LDAP attribute that contains DN of HBAC rule which can be used for "
+ "matching instead of memberUser and memberHost."
+@@ -962,19 +970,19 @@ msgstr ""
+ "memberUser および memberHost の代わりにマッチングに使用できる HBAC ルールの "
+ "DN を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:290
++#: src/config/SSSDConfig/sssdoptions.py:292
+ msgid "The LDAP attribute that contains SELinux user string itself."
+ msgstr "SELinuxのユーザー文字列そのものを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:291
++#: src/config/SSSDConfig/sssdoptions.py:293
+ msgid "The LDAP attribute that contains user category such as 'all'."
+ msgstr "'all' などのユーザーカテゴリーを含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:292
++#: src/config/SSSDConfig/sssdoptions.py:294
+ msgid "The LDAP attribute that contains unique ID of the user map."
+ msgstr "ユーザーマップの一意の ID を含む LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:293
++#: src/config/SSSDConfig/sssdoptions.py:295
+ msgid ""
+ "The option denotes that the SSSD is running on IPA server and should perform "
+ "lookups of users and groups from trusted domains differently."
+@@ -983,58 +991,58 @@ msgstr ""
+ "からのユーザーとグループの検索を異なる方法で実行する必要があることを示しま"
+ "す。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:295
++#: src/config/SSSDConfig/sssdoptions.py:297
+ msgid "Use the given string as search base for trusted domains."
+ msgstr ""
+ "信頼されたドメインに対する検索ベースとして、与えられた文字列を使用します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:298
++#: src/config/SSSDConfig/sssdoptions.py:300
+ msgid "Active Directory domain"
+ msgstr "Active Directory ドメイン"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:299
++#: src/config/SSSDConfig/sssdoptions.py:301
+ msgid "Enabled Active Directory domains"
+ msgstr "有効化された Active Directory ドメイン"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:300
++#: src/config/SSSDConfig/sssdoptions.py:302
+ msgid "Active Directory server address"
+ msgstr "Active Directory サーバーアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:301
++#: src/config/SSSDConfig/sssdoptions.py:303
+ msgid "Active Directory backup server address"
+ msgstr "Active Directory バックアップサーバーのアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:302
++#: src/config/SSSDConfig/sssdoptions.py:304
+ msgid "Active Directory client hostname"
+ msgstr "Active Directory クライアントホスト名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:304
+-#: src/config/SSSDConfig/sssdoptions.py:497
++#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:500
+ msgid "LDAP filter to determine access privileges"
+ msgstr "アクセス権限を決めるための LDAP フィルター"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:305
++#: src/config/SSSDConfig/sssdoptions.py:307
+ msgid "Whether to use the Global Catalog for lookups"
+ msgstr "検索にグローバルカタログを使用するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:308
+ msgid "Operation mode for GPO-based access control"
+ msgstr "グローバルカタログベースのアクセス制御に対するオペレーションモード"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:307
++#: src/config/SSSDConfig/sssdoptions.py:309
+ msgid ""
+ "The amount of time between lookups of the GPO policy files against the AD "
+ "server"
+ msgstr "AD サーバーに対する GPO ポリシーファイルを検索している間の合計時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:310
+ msgid ""
+ "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy "
+ "settings"
+ msgstr ""
+ "GPO (Deny)InteractiveLogonRight のポリシー設定にマッピングした PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:310
++#: src/config/SSSDConfig/sssdoptions.py:312
+ msgid ""
+ "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight "
+ "policy settings"
+@@ -1042,270 +1050,274 @@ msgstr ""
+ "GPO (Deny)RemoteInteractiveLogonRight のポリシー設定にマッピングした PAM サー"
+ "ビス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:312
++#: src/config/SSSDConfig/sssdoptions.py:314
+ msgid ""
+ "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings"
+ msgstr ""
+ "GPO (Deny)NetworkLogonRight のポリシー設定にマッピングした PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:313
++#: src/config/SSSDConfig/sssdoptions.py:315
+ msgid ""
+ "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings"
+ msgstr ""
+ "GPO (Deny)BatchLogonRight のポリシー設定にマッピングした PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:314
++#: src/config/SSSDConfig/sssdoptions.py:316
+ msgid ""
+ "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings"
+ msgstr "(Deny)ServiceLogonRight のポリシー設定にマッピングした PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:315
++#: src/config/SSSDConfig/sssdoptions.py:317
+ msgid "PAM service names for which GPO-based access is always granted"
+ msgstr "GPO ベースのアクセスが常に許可される PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:316
++#: src/config/SSSDConfig/sssdoptions.py:318
+ msgid "PAM service names for which GPO-based access is always denied"
+ msgstr "GPO ベースのアクセスが常に拒否される PAM サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:317
++#: src/config/SSSDConfig/sssdoptions.py:319
+ msgid ""
+ "Default logon right (or permit/deny) to use for unmapped PAM service names"
+ msgstr ""
+ "マッピングされていない PAM サービス名に使用するデフォルトのログオン権利 (また"
+ "は許可/拒否)"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:318
++#: src/config/SSSDConfig/sssdoptions.py:320
+ msgid "a particular site to be used by the client"
+ msgstr "クライアントが使用する特定のサイト"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:319
++#: src/config/SSSDConfig/sssdoptions.py:321
+ msgid ""
+ "Maximum age in days before the machine account password should be renewed"
+ msgstr "マシンアカウントのパスワードの更新が必要となるまでの最大日数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:321
++#: src/config/SSSDConfig/sssdoptions.py:323
+ msgid "Option for tuning the machine account renewal task"
+ msgstr "マシンアカウントの更新タスクをチューニングするオプション"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:322
++#: src/config/SSSDConfig/sssdoptions.py:324
+ msgid "Whether to update the machine account password in the Samba database"
+ msgstr "Samba データベースのマシンアカウントパスワードを更新するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:324
++#: src/config/SSSDConfig/sssdoptions.py:326
+ msgid "Use LDAPS port for LDAP and Global Catalog requests"
+ msgstr "LDAP およびグローバルカタログのリクエストに LDAPS ポートを使用する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:325
++#: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:328
+-#: src/config/SSSDConfig/sssdoptions.py:329
++#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:331
+ msgid "Kerberos server address"
+ msgstr "Kerberos サーバーのアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:332
+ msgid "Kerberos backup server address"
+ msgstr "Kerberos バックアップサーバーのアドレス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:331
++#: src/config/SSSDConfig/sssdoptions.py:333
+ msgid "Kerberos realm"
+ msgstr "Kerberos レルム"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:334
+ msgid "Authentication timeout"
+ msgstr "認証のタイムアウト"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:333
++#: src/config/SSSDConfig/sssdoptions.py:335
+ msgid "Whether to create kdcinfo files"
+ msgstr "kdcinfo ファイルを作成するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:334
++#: src/config/SSSDConfig/sssdoptions.py:336
+ msgid "Where to drop krb5 config snippets"
+ msgstr "krb5 設定スニペットを削除する場所"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:337
++#: src/config/SSSDConfig/sssdoptions.py:339
+ msgid "Directory to store credential caches"
+ msgstr "クレデンシャルのキャッシュを保存するディレクトリー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:338
++#: src/config/SSSDConfig/sssdoptions.py:340
+ msgid "Location of the user's credential cache"
+ msgstr "ユーザーのクレデンシャルキャッシュの位置"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:339
++#: src/config/SSSDConfig/sssdoptions.py:341
+ msgid "Location of the keytab to validate credentials"
+ msgstr "クレデンシャルを検証するキーテーブルの場所"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:340
++#: src/config/SSSDConfig/sssdoptions.py:342
+ msgid "Enable credential validation"
+ msgstr "クレデンシャルの検証を有効にする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:341
++#: src/config/SSSDConfig/sssdoptions.py:343
+ msgid "Store password if offline for later online authentication"
+ msgstr "後からオンライン認証するためにオフラインの場合にパスワードを保存します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:342
++#: src/config/SSSDConfig/sssdoptions.py:344
+ msgid "Renewable lifetime of the TGT"
+ msgstr "更新可能な TGT の有効期間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:343
++#: src/config/SSSDConfig/sssdoptions.py:345
+ msgid "Lifetime of the TGT"
+ msgstr "TGT の有効期間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:344
++#: src/config/SSSDConfig/sssdoptions.py:346
+ msgid "Time between two checks for renewal"
+ msgstr "更新を確認する間隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:345
++#: src/config/SSSDConfig/sssdoptions.py:347
+ msgid "Enables FAST"
+ msgstr "FAST を有効にする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:346
++#: src/config/SSSDConfig/sssdoptions.py:348
+ msgid "Selects the principal to use for FAST"
+ msgstr "FAST に使用するプリンシパルを選択する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:347
++#: src/config/SSSDConfig/sssdoptions.py:349
+ msgid "Enables principal canonicalization"
+ msgstr "プリンシパル正規化を有効にする"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:348
++#: src/config/SSSDConfig/sssdoptions.py:350
+ msgid "Enables enterprise principals"
+ msgstr "エンタープライズ・プリンシパルの有効化"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:349
++#: src/config/SSSDConfig/sssdoptions.py:351
++msgid "Enables using of subdomains realms for authentication"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+ msgstr "ユーザー名から Kerberos プリンシパル名までのマッピング"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:352
+-#: src/config/SSSDConfig/sssdoptions.py:353
++#: src/config/SSSDConfig/sssdoptions.py:355
++#: src/config/SSSDConfig/sssdoptions.py:356
+ msgid "Server where the change password service is running if not on the KDC"
+ msgstr "KDC になければ、パスワード変更サービスが実行されているサーバー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:356
++#: src/config/SSSDConfig/sssdoptions.py:359
+ msgid "ldap_uri, The URI of the LDAP server"
+ msgstr "ldap_uri, LDAP サーバーの URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:357
++#: src/config/SSSDConfig/sssdoptions.py:360
+ msgid "ldap_backup_uri, The URI of the LDAP server"
+ msgstr "ldap_backup_uri, LDAP サーバーの URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:358
++#: src/config/SSSDConfig/sssdoptions.py:361
+ msgid "The default base DN"
+ msgstr "デフォルトのベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:359
++#: src/config/SSSDConfig/sssdoptions.py:362
+ msgid "The Schema Type in use on the LDAP server, rfc2307"
+ msgstr "LDAP サーバーにおいて使用中のスキーマ形式、rfc2307"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:360
++#: src/config/SSSDConfig/sssdoptions.py:363
+ msgid "Mode used to change user password"
+ msgstr "ユーザーのパスワードの変更にモードを使用しました"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:361
++#: src/config/SSSDConfig/sssdoptions.py:364
+ msgid "The default bind DN"
+ msgstr "デフォルトのバインド DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:362
++#: src/config/SSSDConfig/sssdoptions.py:365
+ msgid "The type of the authentication token of the default bind DN"
+ msgstr "デフォルトのバインド DN の認証トークンの種類"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:363
++#: src/config/SSSDConfig/sssdoptions.py:366
+ msgid "The authentication token of the default bind DN"
+ msgstr "デフォルトのバインド DN の認証トークン"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:364
++#: src/config/SSSDConfig/sssdoptions.py:367
+ msgid "Length of time to attempt connection"
+ msgstr "接続を試行する時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:365
++#: src/config/SSSDConfig/sssdoptions.py:368
+ msgid "Length of time to attempt synchronous LDAP operations"
+ msgstr "LDAP 同期操作を試行する時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:366
++#: src/config/SSSDConfig/sssdoptions.py:369
+ msgid "Length of time between attempts to reconnect while offline"
+ msgstr "オフラインの間に再接続を試行する時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:367
++#: src/config/SSSDConfig/sssdoptions.py:370
+ msgid "Use only the upper case for realm names"
+ msgstr "レルム名に対して大文字のみを使用する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:368
++#: src/config/SSSDConfig/sssdoptions.py:371
+ msgid "File that contains CA certificates"
+ msgstr "CA 証明書を含むファイル"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:369
++#: src/config/SSSDConfig/sssdoptions.py:372
+ msgid "Path to CA certificate directory"
+ msgstr "CA 証明書のディレクトリーのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:370
++#: src/config/SSSDConfig/sssdoptions.py:373
+ msgid "File that contains the client certificate"
+ msgstr "クライアント証明書を含むファイル"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:371
++#: src/config/SSSDConfig/sssdoptions.py:374
+ msgid "File that contains the client key"
+ msgstr "クライアントの鍵を含むファイル"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:372
++#: src/config/SSSDConfig/sssdoptions.py:375
+ msgid "List of possible ciphers suites"
+ msgstr "利用可能な暗号の一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:373
++#: src/config/SSSDConfig/sssdoptions.py:376
+ msgid "Require TLS certificate verification"
+ msgstr "TLS 証明書の検証を要求する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:374
++#: src/config/SSSDConfig/sssdoptions.py:377
+ msgid "Specify the sasl mechanism to use"
+ msgstr "使用する SASL メカニズムを指定する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:375
++#: src/config/SSSDConfig/sssdoptions.py:378
+ msgid "Specify the sasl authorization id to use"
+ msgstr "使用する SASL 認可 ID を指定する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:376
++#: src/config/SSSDConfig/sssdoptions.py:379
+ msgid "Specify the sasl authorization realm to use"
+ msgstr "使用する SASL 認可レルムを指定する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:377
++#: src/config/SSSDConfig/sssdoptions.py:380
+ msgid "Specify the minimal SSF for LDAP sasl authorization"
+ msgstr "LDAP SASL 認可の最小 SSF を指定する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:378
++#: src/config/SSSDConfig/sssdoptions.py:381
+ msgid "Specify the maximal SSF for LDAP sasl authorization"
+ msgstr "LDAP SASL 認可の最大 SSF を指定する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:379
++#: src/config/SSSDConfig/sssdoptions.py:382
+ msgid "Kerberos service keytab"
+ msgstr "Kerberos サービスのキーテーブル"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:380
++#: src/config/SSSDConfig/sssdoptions.py:383
+ msgid "Use Kerberos auth for LDAP connection"
+ msgstr "LDAP 接続に対して Kerberos 認証を使用する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:381
++#: src/config/SSSDConfig/sssdoptions.py:384
+ msgid "Follow LDAP referrals"
+ msgstr "LDAP リフェラルにしたがう"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:382
++#: src/config/SSSDConfig/sssdoptions.py:385
+ msgid "Lifetime of TGT for LDAP connection"
+ msgstr "LDAP 接続の TGT の有効期間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:383
++#: src/config/SSSDConfig/sssdoptions.py:386
+ msgid "How to dereference aliases"
+ msgstr "エイリアスを参照解決する方法"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:384
++#: src/config/SSSDConfig/sssdoptions.py:387
+ msgid "Service name for DNS service lookups"
+ msgstr "DNS サービス検索のサービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:385
++#: src/config/SSSDConfig/sssdoptions.py:388
+ msgid "The number of records to retrieve in a single LDAP query"
+ msgstr "単一の LDAP クエリーにおいて取得するレコード数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:386
++#: src/config/SSSDConfig/sssdoptions.py:389
+ msgid "The number of members that must be missing to trigger a full deref"
+ msgstr "完全な参照解決を引き起こすために欠けている必要があるメンバーの数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:387
++#: src/config/SSSDConfig/sssdoptions.py:390
+ msgid ""
+ "Whether the LDAP library should perform a reverse lookup to canonicalize the "
+ "host name during a SASL bind"
+@@ -1313,7 +1325,7 @@ msgstr ""
+ "LDAP ライブラリーが SASL バインド中にホスト名を正規化するために逆引きを実行す"
+ "るかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:389
++#: src/config/SSSDConfig/sssdoptions.py:392
+ msgid ""
+ "Allows to retain local users as members of an LDAP group for servers that "
+ "use the RFC2307 schema."
+@@ -1321,412 +1333,412 @@ msgstr ""
+ "RFC2307 スキーマを使用するサーバーの LDAP グループのメンバーとしてローカル"
+ "ユーザーを保持することができます。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:392
++#: src/config/SSSDConfig/sssdoptions.py:395
+ msgid "entryUSN attribute"
+ msgstr "entryUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:393
++#: src/config/SSSDConfig/sssdoptions.py:396
+ msgid "lastUSN attribute"
+ msgstr "lastUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:395
++#: src/config/SSSDConfig/sssdoptions.py:398
+ msgid "How long to retain a connection to the LDAP server before disconnecting"
+ msgstr "LDAP サーバーを切断する前に接続を保持する時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:398
++#: src/config/SSSDConfig/sssdoptions.py:401
+ msgid "Disable the LDAP paging control"
+ msgstr "LDAP ページング制御を無効化する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:399
++#: src/config/SSSDConfig/sssdoptions.py:402
+ msgid "Disable Active Directory range retrieval"
+ msgstr "Active Directory 範囲の取得の無効化"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:402
++#: src/config/SSSDConfig/sssdoptions.py:405
+ msgid "Length of time to wait for a search request"
+ msgstr "検索要求を待つ時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:403
++#: src/config/SSSDConfig/sssdoptions.py:406
+ msgid "Length of time to wait for a enumeration request"
+ msgstr "列挙の要求を待つ時間"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:404
++#: src/config/SSSDConfig/sssdoptions.py:407
+ msgid "Length of time between enumeration updates"
+ msgstr "列挙の更新間隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:405
++#: src/config/SSSDConfig/sssdoptions.py:408
+ msgid "Length of time between cache cleanups"
+ msgstr "キャッシュをクリーンアップする間隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:406
++#: src/config/SSSDConfig/sssdoptions.py:409
+ msgid "Require TLS for ID lookups"
+ msgstr "ID 検索に TLS を要求する"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:407
++#: src/config/SSSDConfig/sssdoptions.py:410
+ msgid "Use ID-mapping of objectSID instead of pre-set IDs"
+ msgstr "事前設定済み ID の代わりに objectSID の ID マッピングを使用します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:408
++#: src/config/SSSDConfig/sssdoptions.py:411
+ msgid "Base DN for user lookups"
+ msgstr "ユーザー検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:409
++#: src/config/SSSDConfig/sssdoptions.py:412
+ msgid "Scope of user lookups"
+ msgstr "ユーザー検索の範囲"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:410
++#: src/config/SSSDConfig/sssdoptions.py:413
+ msgid "Filter for user lookups"
+ msgstr "ユーザー検索のフィルター"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:411
++#: src/config/SSSDConfig/sssdoptions.py:414
+ msgid "Objectclass for users"
+ msgstr "ユーザーのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:412
++#: src/config/SSSDConfig/sssdoptions.py:415
+ msgid "Username attribute"
+ msgstr "ユーザー名の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:413
++#: src/config/SSSDConfig/sssdoptions.py:416
+ msgid "UID attribute"
+ msgstr "UID の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:414
++#: src/config/SSSDConfig/sssdoptions.py:417
+ msgid "Primary GID attribute"
+ msgstr "プライマリー GID の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:415
++#: src/config/SSSDConfig/sssdoptions.py:418
+ msgid "GECOS attribute"
+ msgstr "GECOS の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:416
++#: src/config/SSSDConfig/sssdoptions.py:419
+ msgid "Home directory attribute"
+ msgstr "ホームディレクトリーの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:417
++#: src/config/SSSDConfig/sssdoptions.py:420
+ msgid "Shell attribute"
+ msgstr "シェルの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:418
++#: src/config/SSSDConfig/sssdoptions.py:421
+ msgid "UUID attribute"
+ msgstr "UUID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:419
+-#: src/config/SSSDConfig/sssdoptions.py:457
++#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:460
+ msgid "objectSID attribute"
+ msgstr "objectSID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:420
++#: src/config/SSSDConfig/sssdoptions.py:423
+ msgid "Active Directory primary group attribute for ID-mapping"
+ msgstr "ID マッピングの Active Directory プライマリーグループ属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:421
++#: src/config/SSSDConfig/sssdoptions.py:424
+ msgid "User principal attribute (for Kerberos)"
+ msgstr "ユーザープリンシパルの属性（Kerberos 用）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Full Name"
+ msgstr "氏名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:423
++#: src/config/SSSDConfig/sssdoptions.py:426
+ msgid "memberOf attribute"
+ msgstr "memberOf 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:427
+ msgid "Modification time attribute"
+ msgstr "変更日時の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:425
++#: src/config/SSSDConfig/sssdoptions.py:428
+ msgid "shadowLastChange attribute"
+ msgstr "shadowLastChange 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:426
++#: src/config/SSSDConfig/sssdoptions.py:429
+ msgid "shadowMin attribute"
+ msgstr "shadowMin 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:427
++#: src/config/SSSDConfig/sssdoptions.py:430
+ msgid "shadowMax attribute"
+ msgstr "shadowMax 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:428
++#: src/config/SSSDConfig/sssdoptions.py:431
+ msgid "shadowWarning attribute"
+ msgstr "shadowWarning 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:429
++#: src/config/SSSDConfig/sssdoptions.py:432
+ msgid "shadowInactive attribute"
+ msgstr "shadowInactive 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:430
++#: src/config/SSSDConfig/sssdoptions.py:433
+ msgid "shadowExpire attribute"
+ msgstr "shadowExpire 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:431
++#: src/config/SSSDConfig/sssdoptions.py:434
+ msgid "shadowFlag attribute"
+ msgstr "shadowFlag 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:432
++#: src/config/SSSDConfig/sssdoptions.py:435
+ msgid "Attribute listing authorized PAM services"
+ msgstr "認可された PAM サービスを一覧化する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:433
++#: src/config/SSSDConfig/sssdoptions.py:436
+ msgid "Attribute listing authorized server hosts"
+ msgstr "認可されたサーバーホストを一覧化する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:434
++#: src/config/SSSDConfig/sssdoptions.py:437
+ msgid "Attribute listing authorized server rhosts"
+ msgstr "認可されたサーバー rhosts を一覧化する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:435
++#: src/config/SSSDConfig/sssdoptions.py:438
+ msgid "krbLastPwdChange attribute"
+ msgstr "krbLastPwdChange 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:436
++#: src/config/SSSDConfig/sssdoptions.py:439
+ msgid "krbPasswordExpiration attribute"
+ msgstr "krbPasswordExpiration 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:437
++#: src/config/SSSDConfig/sssdoptions.py:440
+ msgid "Attribute indicating that server side password policies are active"
+ msgstr "サーバー側パスワードポリシーが有効であることを意味する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:438
++#: src/config/SSSDConfig/sssdoptions.py:441
+ msgid "accountExpires attribute of AD"
+ msgstr "AD の accountExpires 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:439
++#: src/config/SSSDConfig/sssdoptions.py:442
+ msgid "userAccountControl attribute of AD"
+ msgstr "AD の userAccountControl 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:440
++#: src/config/SSSDConfig/sssdoptions.py:443
+ msgid "nsAccountLock attribute"
+ msgstr "nsAccountLock 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:441
++#: src/config/SSSDConfig/sssdoptions.py:444
+ msgid "loginDisabled attribute of NDS"
+ msgstr "NDS の loginDisabled 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:442
++#: src/config/SSSDConfig/sssdoptions.py:445
+ msgid "loginExpirationTime attribute of NDS"
+ msgstr "NDS の loginExpirationTime 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:443
++#: src/config/SSSDConfig/sssdoptions.py:446
+ msgid "loginAllowedTimeMap attribute of NDS"
+ msgstr "NDS の loginAllowedTimeMap 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:444
++#: src/config/SSSDConfig/sssdoptions.py:447
+ msgid "SSH public key attribute"
+ msgstr "SSH 公開鍵の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:445
++#: src/config/SSSDConfig/sssdoptions.py:448
+ msgid "attribute listing allowed authentication types for a user"
+ msgstr "ユーザー用に許可された認証タイプを一覧化する属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:446
++#: src/config/SSSDConfig/sssdoptions.py:449
+ msgid "attribute containing the X509 certificate of the user"
+ msgstr "ユーザーの X509 証明書を含む属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:447
++#: src/config/SSSDConfig/sssdoptions.py:450
+ msgid "attribute containing the email address of the user"
+ msgstr "ユーザーの電子メールアドレスを含む属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:448
++#: src/config/SSSDConfig/sssdoptions.py:451
+ msgid "A list of extra attributes to download along with the user entry"
+ msgstr "ユーザーエントリーと共にダウンロードする追加的な属性の一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:450
++#: src/config/SSSDConfig/sssdoptions.py:453
+ msgid "Base DN for group lookups"
+ msgstr "グループ検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:451
++#: src/config/SSSDConfig/sssdoptions.py:454
+ msgid "Objectclass for groups"
+ msgstr "グループのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:452
++#: src/config/SSSDConfig/sssdoptions.py:455
+ msgid "Group name"
+ msgstr "グループ名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:453
++#: src/config/SSSDConfig/sssdoptions.py:456
+ msgid "Group password"
+ msgstr "グループのパスワード"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:454
++#: src/config/SSSDConfig/sssdoptions.py:457
+ msgid "GID attribute"
+ msgstr "GID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:455
++#: src/config/SSSDConfig/sssdoptions.py:458
+ msgid "Group member attribute"
+ msgstr "グループメンバー属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:456
++#: src/config/SSSDConfig/sssdoptions.py:459
+ msgid "Group UUID attribute"
+ msgstr "グループ UUID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:458
++#: src/config/SSSDConfig/sssdoptions.py:461
+ msgid "Modification time attribute for groups"
+ msgstr "グループの変更日時の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:459
++#: src/config/SSSDConfig/sssdoptions.py:462
+ msgid "Type of the group and other flags"
+ msgstr "グループおよび他のフラグのタイプ"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:460
++#: src/config/SSSDConfig/sssdoptions.py:463
+ msgid "The LDAP group external member attribute"
+ msgstr "LDAP グループの外部メンバーの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:461
++#: src/config/SSSDConfig/sssdoptions.py:464
+ msgid "Maximum nesting level SSSD will follow"
+ msgstr "SSSD が従う最大ネストレベル"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:462
++#: src/config/SSSDConfig/sssdoptions.py:465
+ msgid "Filter for group lookups"
+ msgstr "グループ検索のフィルター"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:463
++#: src/config/SSSDConfig/sssdoptions.py:466
+ msgid "Scope of group lookups"
+ msgstr "グループ検索の範囲"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:465
++#: src/config/SSSDConfig/sssdoptions.py:468
+ msgid "Base DN for netgroup lookups"
+ msgstr "ネットグループ検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:466
++#: src/config/SSSDConfig/sssdoptions.py:469
+ msgid "Objectclass for netgroups"
+ msgstr "ネットグループのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:467
++#: src/config/SSSDConfig/sssdoptions.py:470
+ msgid "Netgroup name"
+ msgstr "ネットグループ名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:468
++#: src/config/SSSDConfig/sssdoptions.py:471
+ msgid "Netgroups members attribute"
+ msgstr "ネットグループメンバーの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:469
++#: src/config/SSSDConfig/sssdoptions.py:472
+ msgid "Netgroup triple attribute"
+ msgstr "ネットグループの三つ組の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:470
++#: src/config/SSSDConfig/sssdoptions.py:473
+ msgid "Modification time attribute for netgroups"
+ msgstr "ネットグループの変更日時の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:472
++#: src/config/SSSDConfig/sssdoptions.py:475
+ msgid "Base DN for service lookups"
+ msgstr "サービス検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:473
++#: src/config/SSSDConfig/sssdoptions.py:476
+ msgid "Objectclass for services"
+ msgstr "サービスのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:474
++#: src/config/SSSDConfig/sssdoptions.py:477
+ msgid "Service name attribute"
+ msgstr "サービス名の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:475
++#: src/config/SSSDConfig/sssdoptions.py:478
+ msgid "Service port attribute"
+ msgstr "サービスポートの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:476
++#: src/config/SSSDConfig/sssdoptions.py:479
+ msgid "Service protocol attribute"
+ msgstr "サービスプロトコルの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:478
++#: src/config/SSSDConfig/sssdoptions.py:481
+ msgid "Lower bound for ID-mapping"
+ msgstr "ID マッピングの下限"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:479
++#: src/config/SSSDConfig/sssdoptions.py:482
+ msgid "Upper bound for ID-mapping"
+ msgstr "ID マッピングの上限"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:480
++#: src/config/SSSDConfig/sssdoptions.py:483
+ msgid "Number of IDs for each slice when ID-mapping"
+ msgstr "ID マッピングするとき、各スライスに対する ID の数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:481
++#: src/config/SSSDConfig/sssdoptions.py:484
+ msgid "Use autorid-compatible algorithm for ID-mapping"
+ msgstr "ID マッピングに対する autorid 互換アルゴリズムを使用します"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:482
++#: src/config/SSSDConfig/sssdoptions.py:485
+ msgid "Name of the default domain for ID-mapping"
+ msgstr "ID マッピングに対するデフォルトドメインの名前"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:483
++#: src/config/SSSDConfig/sssdoptions.py:486
+ msgid "SID of the default domain for ID-mapping"
+ msgstr "ID マッピングに対するデフォルトドメインの SID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:484
++#: src/config/SSSDConfig/sssdoptions.py:487
+ msgid "Number of secondary slices"
+ msgstr "セカンダリースライスの数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:486
++#: src/config/SSSDConfig/sssdoptions.py:489
+ msgid "Whether to use Token-Groups"
+ msgstr "Token-Group を使うかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:487
++#: src/config/SSSDConfig/sssdoptions.py:490
+ msgid "Set lower boundary for allowed IDs from the LDAP server"
+ msgstr "LDAP サーバーから許可される ID の下限の設定"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:488
++#: src/config/SSSDConfig/sssdoptions.py:491
+ msgid "Set upper boundary for allowed IDs from the LDAP server"
+ msgstr "LDAP サーバーから許可される ID の上限の設定"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:489
++#: src/config/SSSDConfig/sssdoptions.py:492
+ msgid "DN for ppolicy queries"
+ msgstr "ppolicy クエリーの DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:490
++#: src/config/SSSDConfig/sssdoptions.py:493
+ msgid "How many maximum entries to fetch during a wildcard request"
+ msgstr "ワイルドカードの要求の間に取得する最大エントリーの数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:491
++#: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:494
++#: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+ msgstr "パスワード失効の評価のポリシー"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:498
++#: src/config/SSSDConfig/sssdoptions.py:501
+ msgid "Which attributes shall be used to evaluate if an account is expired"
+ msgstr "どの属性がアカウントが失効しているかを評価するために使用されるか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:499
++#: src/config/SSSDConfig/sssdoptions.py:502
+ msgid "Which rules should be used to evaluate access control"
+ msgstr "どのルールがアクセス制御を評価するために使用されるか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:502
++#: src/config/SSSDConfig/sssdoptions.py:505
+ msgid "URI of an LDAP server where password changes are allowed"
+ msgstr "パスワードの変更が許可される LDAP サーバーの URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:503
++#: src/config/SSSDConfig/sssdoptions.py:506
+ msgid "URI of a backup LDAP server where password changes are allowed"
+ msgstr "パスワードの変更が許可されるバックアップ LDAP サーバーの URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:504
++#: src/config/SSSDConfig/sssdoptions.py:507
+ msgid "DNS service name for LDAP password change server"
+ msgstr "LDAP パスワードの変更サーバーの DNS サービス名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:505
++#: src/config/SSSDConfig/sssdoptions.py:508
+ msgid ""
+ "Whether to update the ldap_user_shadow_last_change attribute after a "
+ "password change"
+ msgstr "パスワード変更後 ldap_user_shadow_last_change 属性を更新するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:509
++#: src/config/SSSDConfig/sssdoptions.py:512
+ msgid "Base DN for sudo rules lookups"
+ msgstr "sudo ルール検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:510
++#: src/config/SSSDConfig/sssdoptions.py:513
+ msgid "Automatic full refresh period"
+ msgstr "自動的な完全更新間隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:511
++#: src/config/SSSDConfig/sssdoptions.py:514
+ msgid "Automatic smart refresh period"
+ msgstr "自動的なスマート更新間隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:512
++#: src/config/SSSDConfig/sssdoptions.py:515
+ msgid "Whether to filter rules by hostname, IP addresses and network"
+ msgstr ""
+ "ホスト名、IP アドレスおよびネットワークによるフィルタールールを使用するかどう"
+ "か"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:513
++#: src/config/SSSDConfig/sssdoptions.py:516
+ msgid ""
+ "Hostnames and/or fully qualified domain names of this machine to filter sudo "
+ "rules"
+@@ -1734,150 +1746,150 @@ msgstr ""
+ "sudo ルールをフィルターするこのマシンのホスト名および/または完全修飾ドメイン"
+ "名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:514
++#: src/config/SSSDConfig/sssdoptions.py:517
+ msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
+ msgstr ""
+ "sudo ルールをフィルターするこのマシンの IPv4 または IPv6 アドレスまたはネット"
+ "ワーク"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:515
++#: src/config/SSSDConfig/sssdoptions.py:518
+ msgid "Whether to include rules that contains netgroup in host attribute"
+ msgstr "ホスト属性にネットワークグループを含むルールを含めるかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:516
++#: src/config/SSSDConfig/sssdoptions.py:519
+ msgid ""
+ "Whether to include rules that contains regular expression in host attribute"
+ msgstr "ホスト属性に正規表現を含むルールを含めるかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:517
++#: src/config/SSSDConfig/sssdoptions.py:520
+ msgid "Object class for sudo rules"
+ msgstr "sudo ルールのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:518
++#: src/config/SSSDConfig/sssdoptions.py:521
+ msgid "Name of attribute that is used as object class for sudo rules"
+ msgstr "sudo ルールのオブジェクトクラスとして使用される属性の名前"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:519
++#: src/config/SSSDConfig/sssdoptions.py:522
+ msgid "Sudo rule name"
+ msgstr "sudo ルール名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:520
++#: src/config/SSSDConfig/sssdoptions.py:523
+ msgid "Sudo rule command attribute"
+ msgstr "sudo ルールのコマンドの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:521
++#: src/config/SSSDConfig/sssdoptions.py:524
+ msgid "Sudo rule host attribute"
+ msgstr "sudo ルールのホストの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:522
++#: src/config/SSSDConfig/sssdoptions.py:525
+ msgid "Sudo rule user attribute"
+ msgstr "sudo ルールのユーザーの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:523
++#: src/config/SSSDConfig/sssdoptions.py:526
+ msgid "Sudo rule option attribute"
+ msgstr "sudo ルールのオプションの属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:524
++#: src/config/SSSDConfig/sssdoptions.py:527
+ msgid "Sudo rule runas attribute"
+ msgstr "sudo ルールの runas の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:525
++#: src/config/SSSDConfig/sssdoptions.py:528
+ msgid "Sudo rule runasuser attribute"
+ msgstr "sudo ルールの runasuser の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:526
++#: src/config/SSSDConfig/sssdoptions.py:529
+ msgid "Sudo rule runasgroup attribute"
+ msgstr "sudo ルールの runasgroup の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:527
++#: src/config/SSSDConfig/sssdoptions.py:530
+ msgid "Sudo rule notbefore attribute"
+ msgstr "sudo ルールの notbefore の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:528
++#: src/config/SSSDConfig/sssdoptions.py:531
+ msgid "Sudo rule notafter attribute"
+ msgstr "sudo ルールの notafter の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:529
++#: src/config/SSSDConfig/sssdoptions.py:532
+ msgid "Sudo rule order attribute"
+ msgstr "sudo ルールの order の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:532
++#: src/config/SSSDConfig/sssdoptions.py:535
+ msgid "Object class for automounter maps"
+ msgstr "automounter マップのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:533
++#: src/config/SSSDConfig/sssdoptions.py:536
+ msgid "Automounter map name attribute"
+ msgstr "オートマウントのマップ名の属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:534
++#: src/config/SSSDConfig/sssdoptions.py:537
+ msgid "Object class for automounter map entries"
+ msgstr "automounter マップエントリーのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:535
++#: src/config/SSSDConfig/sssdoptions.py:538
+ msgid "Automounter map entry key attribute"
+ msgstr "automounter マップエントリーの鍵属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:536
++#: src/config/SSSDConfig/sssdoptions.py:539
+ msgid "Automounter map entry value attribute"
+ msgstr "automounter マップエントリーの値属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:537
++#: src/config/SSSDConfig/sssdoptions.py:540
+ msgid "Base DN for automounter map lookups"
+ msgstr "automonter のマップ検索のベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:538
++#: src/config/SSSDConfig/sssdoptions.py:541
+ msgid "The name of the automount master map in LDAP."
+ msgstr "LDAP のオートマウントマスターマップの名前。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:541
++#: src/config/SSSDConfig/sssdoptions.py:544
+ msgid "Base DN for IP hosts lookups"
+ msgstr "IP ホストのルックアップのためのベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:542
++#: src/config/SSSDConfig/sssdoptions.py:545
+ msgid "Object class for IP hosts"
+ msgstr "IP ホストのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:543
++#: src/config/SSSDConfig/sssdoptions.py:546
+ msgid "IP host name attribute"
+ msgstr "IP ホスト名属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:544
++#: src/config/SSSDConfig/sssdoptions.py:547
+ msgid "IP host number (address) attribute"
+ msgstr "IP ホスト番号 (アドレス) 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:545
++#: src/config/SSSDConfig/sssdoptions.py:548
+ msgid "IP host entryUSN attribute"
+ msgstr "IP ホストエントリー USN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:546
++#: src/config/SSSDConfig/sssdoptions.py:549
+ msgid "Base DN for IP networks lookups"
+ msgstr "IP ネットワーク検索のためのベース DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:547
++#: src/config/SSSDConfig/sssdoptions.py:550
+ msgid "Object class for IP networks"
+ msgstr "IP ネットワークのオブジェクトクラス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:548
++#: src/config/SSSDConfig/sssdoptions.py:551
+ msgid "IP network name attribute"
+ msgstr "IP ネットワーク名属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:549
++#: src/config/SSSDConfig/sssdoptions.py:552
+ msgid "IP network number (address) attribute"
+ msgstr "IP ネットワーク番号 (アドレス) 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:550
++#: src/config/SSSDConfig/sssdoptions.py:553
+ msgid "IP network entryUSN attribute"
+ msgstr "IP ネットワークエントリー USN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:553
++#: src/config/SSSDConfig/sssdoptions.py:556
+ msgid "Comma separated list of allowed users"
+ msgstr "許可ユーザーのカンマ区切り一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:554
++#: src/config/SSSDConfig/sssdoptions.py:557
+ msgid "Comma separated list of prohibited users"
+ msgstr "禁止ユーザーのカンマ区切り一覧"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:555
++#: src/config/SSSDConfig/sssdoptions.py:558
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+@@ -1885,7 +1897,7 @@ msgstr ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:557
++#: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+ "Comma separated list of groups that are explicitly denied access. This "
+ "applies only to groups within this SSSD domain. Local groups are not "
+@@ -1895,186 +1907,186 @@ msgstr ""
+ "applies only to groups within this SSSD domain. Local groups are not "
+ "evaluated."
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:561
++#: src/config/SSSDConfig/sssdoptions.py:564
+ msgid "Base for home directories"
+ msgstr "ホームディレクトリーのベース"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:562
++#: src/config/SSSDConfig/sssdoptions.py:565
+ msgid "Indicate if a home directory should be created for new users."
+ msgstr ""
+ "新しいユーザーのためにホームディレクトリーを作成するかどうかを示します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:563
++#: src/config/SSSDConfig/sssdoptions.py:566
+ msgid "Indicate if a home directory should be removed for deleted users."
+ msgstr "削除されたユーザーのホームディレクトリーを削除するかどうかを示します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:564
++#: src/config/SSSDConfig/sssdoptions.py:567
+ msgid "Specify the default permissions on a newly created home directory."
+ msgstr ""
+ "新しく作成したホームディレクトリーのデフォルトのパーミッションを指定します。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:565
++#: src/config/SSSDConfig/sssdoptions.py:568
+ msgid "The skeleton directory."
+ msgstr "スケルトンディレクトリー。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:566
++#: src/config/SSSDConfig/sssdoptions.py:569
+ msgid "The mail spool directory."
+ msgstr "メールスプールディレクトリー。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:567
++#: src/config/SSSDConfig/sssdoptions.py:570
+ msgid "The command that is run after a user is removed."
+ msgstr "ユーザーが削除された後に実行されるコマンド。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:570
++#: src/config/SSSDConfig/sssdoptions.py:573
+ msgid "The number of preforked proxy children."
+ msgstr "事前にフォークされた子プロキシーの数。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:573
++#: src/config/SSSDConfig/sssdoptions.py:576
+ msgid "The name of the NSS library to use"
+ msgstr "使用する NSS ライブラリーの名前"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:574
++#: src/config/SSSDConfig/sssdoptions.py:577
+ msgid "The name of the NSS library to use for hosts and networks lookups"
+ msgstr "ホストやネットワークの検索に使用する NSS ライブラリの名前"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:575
++#: src/config/SSSDConfig/sssdoptions.py:578
+ msgid "Whether to look up canonical group name from cache if possible"
+ msgstr "可能ならばキャッシュから正規化されたグループ名を検索するかどうか"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:578
++#: src/config/SSSDConfig/sssdoptions.py:581
+ msgid "PAM stack to use"
+ msgstr "使用する PAM スタック"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:581
++#: src/config/SSSDConfig/sssdoptions.py:584
+ msgid "Path of passwd file sources."
+ msgstr "passwd ファイルソースへのパス"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:582
++#: src/config/SSSDConfig/sssdoptions.py:585
+ msgid "Path of group file sources."
+ msgstr "グループファイルソースへのパス"
+ 
+-#: src/monitor/monitor.c:2376
++#: src/monitor/monitor.c:2381
+ msgid "Become a daemon (default)"
+ msgstr "デーモンとして実行（デフォルト）"
+ 
+-#: src/monitor/monitor.c:2378
++#: src/monitor/monitor.c:2383
+ msgid "Run interactive (not a daemon)"
+ msgstr "対話的に実行（デーモンではない）"
+ 
+-#: src/monitor/monitor.c:2381
++#: src/monitor/monitor.c:2386
+ msgid "Disable netlink interface"
+ msgstr "netlink インターフェースを無効にする"
+ 
+-#: src/monitor/monitor.c:2383 src/tools/sssctl/sssctl_config.c:77
++#: src/monitor/monitor.c:2388 src/tools/sssctl/sssctl_config.c:77
+ #: src/tools/sssctl/sssctl_logs.c:310
+ msgid "Specify a non-default config file"
+ msgstr "非標準の設定ファイルの指定"
+ 
+-#: src/monitor/monitor.c:2385
++#: src/monitor/monitor.c:2390
+ msgid "Refresh the configuration database, then exit"
+ msgstr "設定データベースをリフレッシュし、その後終了します"
+ 
+-#: src/monitor/monitor.c:2388
++#: src/monitor/monitor.c:2393
+ msgid "Similar to --genconf, but only refreshes the given section"
+ msgstr "--genconf と似ていますが、任意のセクションのみをリフレッシュします"
+ 
+-#: src/monitor/monitor.c:2391
++#: src/monitor/monitor.c:2396
+ msgid "Print version number and exit"
+ msgstr "バージョン番号を表示して終了する"
+ 
+-#: src/monitor/monitor.c:2537
++#: src/monitor/monitor.c:2542
+ msgid "SSSD is already running\n"
+ msgstr "SSSD はすでに実行中です\n"
+ 
+-#: src/providers/krb5/krb5_child.c:3260 src/providers/ldap/ldap_child.c:638
++#: src/providers/krb5/krb5_child.c:3274 src/providers/ldap/ldap_child.c:638
+ msgid "Debug level"
+ msgstr "デバッグレベル"
+ 
+-#: src/providers/krb5/krb5_child.c:3262 src/providers/ldap/ldap_child.c:640
++#: src/providers/krb5/krb5_child.c:3276 src/providers/ldap/ldap_child.c:640
+ msgid "Add debug timestamps"
+ msgstr "デバッグのタイムスタンプを追加する"
+ 
+-#: src/providers/krb5/krb5_child.c:3264 src/providers/ldap/ldap_child.c:642
++#: src/providers/krb5/krb5_child.c:3278 src/providers/ldap/ldap_child.c:642
+ msgid "Show timestamps with microseconds"
+ msgstr "タイムスタンプをミリ秒単位で表示する"
+ 
+-#: src/providers/krb5/krb5_child.c:3266 src/providers/ldap/ldap_child.c:644
++#: src/providers/krb5/krb5_child.c:3280 src/providers/ldap/ldap_child.c:644
+ msgid "An open file descriptor for the debug logs"
+ msgstr "デバッグログのオープンファイルディスクリプター"
+ 
+-#: src/providers/krb5/krb5_child.c:3269 src/providers/ldap/ldap_child.c:646
++#: src/providers/krb5/krb5_child.c:3283 src/providers/ldap/ldap_child.c:646
+ msgid "Send the debug output to stderr directly."
+ msgstr "デバッグ出力を stderr に直接送信します。"
+ 
+-#: src/providers/krb5/krb5_child.c:3272
++#: src/providers/krb5/krb5_child.c:3286
+ msgid "The user to create FAST ccache as"
+ msgstr "次のように FAST ccache を作成するユーザー"
+ 
+-#: src/providers/krb5/krb5_child.c:3274
++#: src/providers/krb5/krb5_child.c:3288
+ msgid "The group to create FAST ccache as"
+ msgstr "次のように FAST ccache を作成するグループ"
+ 
+-#: src/providers/krb5/krb5_child.c:3276
++#: src/providers/krb5/krb5_child.c:3290
+ msgid "Kerberos realm to use"
+ msgstr "使用する Kerberos レルム"
+ 
+-#: src/providers/krb5/krb5_child.c:3278
++#: src/providers/krb5/krb5_child.c:3292
+ msgid "Requested lifetime of the ticket"
+ msgstr "チケットの要求された有効期間"
+ 
+-#: src/providers/krb5/krb5_child.c:3280
++#: src/providers/krb5/krb5_child.c:3294
+ msgid "Requested renewable lifetime of the ticket"
+ msgstr "チケットの要求された更新可能な有効期間"
+ 
+-#: src/providers/krb5/krb5_child.c:3282
++#: src/providers/krb5/krb5_child.c:3296
+ msgid "FAST options ('never', 'try', 'demand')"
+ msgstr "FAST のオプション ('never'、'try'、'demand')"
+ 
+-#: src/providers/krb5/krb5_child.c:3285
++#: src/providers/krb5/krb5_child.c:3299
+ msgid "Specifies the server principal to use for FAST"
+ msgstr "FAST で使用するサーバープリンシパルを指定します"
+ 
+-#: src/providers/krb5/krb5_child.c:3287
++#: src/providers/krb5/krb5_child.c:3301
+ msgid "Requests canonicalization of the principal name"
+ msgstr "プリンシパル名の正規化を要求します"
+ 
+-#: src/providers/krb5/krb5_child.c:3289
++#: src/providers/krb5/krb5_child.c:3303
+ msgid "Use custom version of krb5_get_init_creds_password"
+ msgstr "krb5_get_init_creds_password のカスタムバージョンを使用します"
+ 
+-#: src/providers/data_provider_be.c:699
++#: src/providers/data_provider_be.c:711
+ msgid "Domain of the information provider (mandatory)"
+ msgstr "情報プロバイダーのドメイン (必須)"
+ 
+-#: src/sss_client/common.c:1079
++#: src/sss_client/common.c:1088
+ msgid "Privileged socket has wrong ownership or permissions."
+ msgstr "特権ソケットの所有者またはパーミッションが誤っています。"
+ 
+-#: src/sss_client/common.c:1082
++#: src/sss_client/common.c:1091
+ msgid "Public socket has wrong ownership or permissions."
+ msgstr "公開ソケットの所有者またはパーミッションが誤っています。"
+ 
+-#: src/sss_client/common.c:1085
++#: src/sss_client/common.c:1094
+ msgid "Unexpected format of the server credential message."
+ msgstr "サーバーのクレデンシャルメッセージの予期しない形式です。"
+ 
+-#: src/sss_client/common.c:1088
++#: src/sss_client/common.c:1097
+ msgid "SSSD is not run by root."
+ msgstr "SSSD は root により実行されません。"
+ 
+-#: src/sss_client/common.c:1091
++#: src/sss_client/common.c:1100
+ msgid "SSSD socket does not exist."
+ msgstr "SSSD ソケットは存在しません。"
+ 
+-#: src/sss_client/common.c:1094
++#: src/sss_client/common.c:1103
+ msgid "Cannot get stat of SSSD socket."
+ msgstr "SSSD ソケットの統計を取得できません。"
+ 
+-#: src/sss_client/common.c:1099
++#: src/sss_client/common.c:1108
+ msgid "An error occurred, but no description can be found."
+ msgstr "エラーが発生しましたが、説明がありませんでした。"
+ 
+-#: src/sss_client/common.c:1105
++#: src/sss_client/common.c:1114
+ msgid "Unexpected error while looking for an error description"
+ msgstr "エラーの説明を検索中に予期しないエラーが発生しました"
+ 
+@@ -2082,46 +2094,46 @@ msgstr "エラーの説明を検索中に予期しないエラーが発生しま
+ msgid "Permission denied. "
+ msgstr "パーミッションが拒否されました。"
+ 
+-#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:781
+-#: src/sss_client/pam_sss.c:792
++#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:785
++#: src/sss_client/pam_sss.c:796
+ msgid "Server message: "
+ msgstr "サーバーのメッセージ: "
+ 
+-#: src/sss_client/pam_sss.c:299
++#: src/sss_client/pam_sss.c:303
+ msgid "Passwords do not match"
+ msgstr "パスワードが一致しません"
+ 
+-#: src/sss_client/pam_sss.c:487
++#: src/sss_client/pam_sss.c:491
+ msgid "Password reset by root is not supported."
+ msgstr "root によるパスワードのリセットはサポートされません。"
+ 
+-#: src/sss_client/pam_sss.c:528
++#: src/sss_client/pam_sss.c:532
+ msgid "Authenticated with cached credentials"
+ msgstr "キャッシュされているクレデンシャルを用いて認証されました"
+ 
+-#: src/sss_client/pam_sss.c:529
++#: src/sss_client/pam_sss.c:533
+ msgid ", your cached password will expire at: "
+ msgstr "、キャッシュされたパスワードが失効します: "
+ 
+-#: src/sss_client/pam_sss.c:559
++#: src/sss_client/pam_sss.c:563
+ #, c-format
+ msgid "Your password has expired. You have %1$d grace login(s) remaining."
+ msgstr "パスワードの期限が切れています。あと %1$d 回ログインできます。"
+ 
+-#: src/sss_client/pam_sss.c:605
++#: src/sss_client/pam_sss.c:609
+ #, c-format
+ msgid "Your password will expire in %1$d %2$s."
+ msgstr "あなたのパスワードは %1$d %2$s に期限切れになります。"
+ 
+-#: src/sss_client/pam_sss.c:654
++#: src/sss_client/pam_sss.c:658
+ msgid "Authentication is denied until: "
+ msgstr "次まで認証が拒否されます: "
+ 
+-#: src/sss_client/pam_sss.c:675
++#: src/sss_client/pam_sss.c:679
+ msgid "System is offline, password change not possible"
+ msgstr "システムがオフラインです、パスワード変更ができません"
+ 
+-#: src/sss_client/pam_sss.c:690
++#: src/sss_client/pam_sss.c:694
+ msgid ""
+ "After changing the OTP password, you need to log out and back in order to "
+ "acquire a ticket"
+@@ -2129,43 +2141,43 @@ msgstr ""
+ "OTP パスワードの変更後、チケットを取得するためにログアウト後に再びログインす"
+ "る必要があります"
+ 
+-#: src/sss_client/pam_sss.c:778 src/sss_client/pam_sss.c:791
++#: src/sss_client/pam_sss.c:782 src/sss_client/pam_sss.c:795
+ msgid "Password change failed. "
+ msgstr "パスワードの変更に失敗しました。"
+ 
+-#: src/sss_client/pam_sss.c:2015
++#: src/sss_client/pam_sss.c:2044
+ msgid "New Password: "
+ msgstr "新しいパスワード: "
+ 
+-#: src/sss_client/pam_sss.c:2016
++#: src/sss_client/pam_sss.c:2045
+ msgid "Reenter new Password: "
+ msgstr "新しいパスワードの再入力: "
+ 
+-#: src/sss_client/pam_sss.c:2178 src/sss_client/pam_sss.c:2181
++#: src/sss_client/pam_sss.c:2207 src/sss_client/pam_sss.c:2210
+ msgid "First Factor: "
+ msgstr "1 番目の要素: "
+ 
+-#: src/sss_client/pam_sss.c:2179 src/sss_client/pam_sss.c:2353
++#: src/sss_client/pam_sss.c:2208 src/sss_client/pam_sss.c:2382
+ msgid "Second Factor (optional): "
+ msgstr "2 番目の要素 (オプション): "
+ 
+-#: src/sss_client/pam_sss.c:2182 src/sss_client/pam_sss.c:2356
++#: src/sss_client/pam_sss.c:2211 src/sss_client/pam_sss.c:2385
+ msgid "Second Factor: "
+ msgstr "2 番目の要素: "
+ 
+-#: src/sss_client/pam_sss.c:2200
++#: src/sss_client/pam_sss.c:2229
+ msgid "Password: "
+ msgstr "パスワード: "
+ 
+-#: src/sss_client/pam_sss.c:2352 src/sss_client/pam_sss.c:2355
++#: src/sss_client/pam_sss.c:2381 src/sss_client/pam_sss.c:2384
+ msgid "First Factor (Current Password): "
+ msgstr "1 番目の要素 (現在のパスワード): "
+ 
+-#: src/sss_client/pam_sss.c:2359
++#: src/sss_client/pam_sss.c:2388
+ msgid "Current Password: "
+ msgstr "現在のパスワード: "
+ 
+-#: src/sss_client/pam_sss.c:2716
++#: src/sss_client/pam_sss.c:2745
+ msgid "Password expired. Change your password now."
+ msgstr "パスワードの期限が切れました。いますぐパスワードを変更してください。"
+ 
+@@ -3356,18 +3368,18 @@ msgstr "PAM 環境:\n"
+ msgid " - no env -\n"
+ msgstr " - no env -\n"
+ 
+-#: src/util/util.h:82
++#: src/util/util.h:86
+ msgid "The user ID to run the server as"
+ msgstr "次のようにサーバーを実行するユーザー ID"
+ 
+-#: src/util/util.h:84
++#: src/util/util.h:88
+ msgid "The group ID to run the server as"
+ msgstr "次のようにサーバーを実行するグループ ID"
+ 
+-#: src/util/util.h:92
++#: src/util/util.h:96
+ msgid "Informs that the responder has been socket-activated"
+ msgstr "レスポンダーがソケットでアクティベートされたと知らせます"
+ 
+-#: src/util/util.h:94
++#: src/util/util.h:98
+ msgid "Informs that the responder has been dbus-activated"
+ msgstr "レスポンダーが dbus でアクティベートされたと知らせます"
+diff --git a/po/zh_CN.po b/po/zh_CN.po
+index 1d195436a..ee38f25e3 100644
+--- a/po/zh_CN.po
++++ b/po/zh_CN.po
+@@ -11,7 +11,7 @@ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+-"POT-Creation-Date: 2020-10-12 12:21+0200\n"
++"POT-Creation-Date: 2021-02-05 11:58+0100\n"
+ "PO-Revision-Date: 2020-08-20 14:29+0000\n"
+ "Last-Translator: Charles Lee <lchopn@gmail.com>\n"
+ "Language-Team: Chinese (Simplified) <https://translate.fedoraproject.org/"
+@@ -166,7 +166,7 @@ msgid "Entry cache background update timeout length (seconds)"
+ msgstr "条目缓存后台更新超时时间（秒）"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+-#: src/config/SSSDConfig/sssdoptions.py:115
++#: src/config/SSSDConfig/sssdoptions.py:117
+ msgid "Negative cache timeout length (seconds)"
+ msgstr "负缓存超时时间（秒）"
+ 
+@@ -347,138 +347,146 @@ msgstr "PKCS#11 URI，用于限制智能卡认证设备的选择。"
+ msgid "When shall the PAM responder force an initgroups request"
+ msgstr "什么时候 PAM 响应者要强制发起 initgroups 请求？"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:109
++#: src/config/SSSDConfig/sssdoptions.py:107
++msgid "List of PAM services that are allowed to authenticate with GSSAPI."
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:108
++msgid "Whether to match authenticated UPN with target user"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+ msgstr "是否在 sudo 规则中评估基于时间的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:110
++#: src/config/SSSDConfig/sssdoptions.py:112
+ msgid "If true, SSSD will switch back to lower-wins ordering logic"
+ msgstr "如果为 true，SSSD 将切换回 lower-wins ordering 逻辑"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:111
++#: src/config/SSSDConfig/sssdoptions.py:113
+ msgid ""
+ "Maximum number of rules that can be refreshed at once. If this is exceeded, "
+ "full refresh is performed."
+ msgstr "一次可以刷新的最大规则数。如果超出此范围，则执行完全刷新。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:118
++#: src/config/SSSDConfig/sssdoptions.py:120
+ msgid "Whether to hash host names and addresses in the known_hosts file"
+ msgstr "在 known_hosts 文件中是否对主机名和地址进行哈希处理"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:119
++#: src/config/SSSDConfig/sssdoptions.py:121
+ msgid ""
+ "How many seconds to keep a host in the known_hosts file after its host keys "
+ "were requested"
+ msgstr ""
+ "当请求了它的主机密钥后，将主机保留在 known_hosts 文件中的时间（以秒为单位）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:121
++#: src/config/SSSDConfig/sssdoptions.py:123
+ msgid "Path to storage of trusted CA certificates"
+ msgstr "到可信 CA 证书存储的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:122
++#: src/config/SSSDConfig/sssdoptions.py:124
+ msgid "Allow to generate ssh-keys from certificates"
+ msgstr "允许从证书中生成 ssh-keys。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:123
++#: src/config/SSSDConfig/sssdoptions.py:125
+ msgid ""
+ "Use the following matching rules to filter the certificates for ssh-key "
+ "generation"
+ msgstr "使用以下匹配规则来过滤生成 ssh-key 的证书。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:127
++#: src/config/SSSDConfig/sssdoptions.py:129
+ msgid "List of UIDs or user names allowed to access the PAC responder"
+ msgstr "允许访问 PAC 响应者的 UID 或用户名列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:128
++#: src/config/SSSDConfig/sssdoptions.py:130
+ msgid "How long the PAC data is considered valid"
+ msgstr "PAC 数据被视为有效的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:131
++#: src/config/SSSDConfig/sssdoptions.py:133
+ msgid "List of user attributes the InfoPipe is allowed to publish"
+ msgstr "允许 InfoPipe 发布的用户属性列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:134
++#: src/config/SSSDConfig/sssdoptions.py:136
+ msgid "The provider where the secrets will be stored in"
+ msgstr "存储 secret 的提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:135
++#: src/config/SSSDConfig/sssdoptions.py:137
+ msgid "The maximum allowed number of nested containers"
+ msgstr "允许嵌套的最大容器数量"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:136
++#: src/config/SSSDConfig/sssdoptions.py:138
+ msgid "The maximum number of secrets that can be stored"
+ msgstr "可以存储的最大 secret 数量"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:137
++#: src/config/SSSDConfig/sssdoptions.py:139
+ msgid "The maximum number of secrets that can be stored per UID"
+ msgstr "每个 UID 可以存储的最大 secret 数量"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:138
++#: src/config/SSSDConfig/sssdoptions.py:140
+ msgid "The maximum payload size of a secret in kilobytes"
+ msgstr "一个 secret 的最大有效负载的大小（以千字节为单位）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:140
++#: src/config/SSSDConfig/sssdoptions.py:142
+ msgid "The URL Custodia server is listening on"
+ msgstr "正在侦听的 URL Custodia 服务器"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:141
++#: src/config/SSSDConfig/sssdoptions.py:143
+ msgid "The method to use when authenticating to a Custodia server"
+ msgstr "当向 Custodia 服务器进行身份验证时使用的方法"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:142
++#: src/config/SSSDConfig/sssdoptions.py:144
+ msgid ""
+ "The name of the headers that will be added into a HTTP request with the "
+ "value defined in auth_header_value"
+ msgstr "将使用 auth_header_value 中定义的值添加到 HTTP 请求中的标头名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:144
++#: src/config/SSSDConfig/sssdoptions.py:146
+ msgid "The value sssd-secrets would use for auth_header_name"
+ msgstr "用于 auth_header_name 的 sssd-secrets 值"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:145
++#: src/config/SSSDConfig/sssdoptions.py:147
+ msgid ""
+ "The list of the headers to forward to the Custodia server together with the "
+ "request"
+ msgstr "与请求一起转发到 Custodia 服务器的标头列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:146
++#: src/config/SSSDConfig/sssdoptions.py:148
+ msgid ""
+ "The username to use when authenticating to a Custodia server using basic_auth"
+ msgstr "当向使用 basic_auth 的 Custodia 服务器进行身份验证时使用的用户名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:147
++#: src/config/SSSDConfig/sssdoptions.py:149
+ msgid ""
+ "The password to use when authenticating to a Custodia server using basic_auth"
+ msgstr "当向使用 basic_auth 的 Custodia 服务器进行身份验证时使用的密码"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:148
++#: src/config/SSSDConfig/sssdoptions.py:150
+ msgid "If true peer's certificate is verified if proxy_url uses https protocol"
+ msgstr "如果 proxy_url 使用 https 协议，是否验证真实的对等方的证书"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:149
++#: src/config/SSSDConfig/sssdoptions.py:151
+ msgid ""
+ "If false peer's certificate may contain different hostname than proxy_url "
+ "when https protocol is used"
+ msgstr "使用 https 协议时，错误的对等方证书的主机名可能与 proxy_url 不同"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:151
++#: src/config/SSSDConfig/sssdoptions.py:153
+ msgid "Path to directory where certificate authority certificates are stored"
+ msgstr "证书颁发机构证书存储目录的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:152
++#: src/config/SSSDConfig/sssdoptions.py:154
+ msgid "Path to file containing server's CA certificate"
+ msgstr "包含服务器 CA 证书的文件的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:153
++#: src/config/SSSDConfig/sssdoptions.py:155
+ msgid "Path to file containing client's certificate"
+ msgstr "包含客户端证书的文件的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:154
++#: src/config/SSSDConfig/sssdoptions.py:156
+ msgid "Path to file containing client's private key"
+ msgstr "包含客户端私钥的文件的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:157
++#: src/config/SSSDConfig/sssdoptions.py:159
+ msgid ""
+ "One of the following strings specifying the scope of session recording: none "
+ "- No users are recorded. some - Users/groups specified by users and groups "
+@@ -487,7 +495,7 @@ msgstr ""
+ "使用以下字符串之一指定会话记录范围： none - 不记录用户。 some - 记录由用户和"
+ "组选项指定的用户和组。 all - 记录所有用户。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:160
++#: src/config/SSSDConfig/sssdoptions.py:162
+ msgid ""
+ "A comma-separated list of users which should have session recording enabled. "
+ "Matches user names as returned by NSS. I.e. after the possible space "
+@@ -496,7 +504,7 @@ msgstr ""
+ "以逗号分隔的用户列表，这些用户应该启用会话记录。匹配 NSS 返回的用户名。在可能"
+ "的空格替换、大小写更改等之后。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:162
++#: src/config/SSSDConfig/sssdoptions.py:164
+ msgid ""
+ "A comma-separated list of groups, members of which should have session "
+ "recording enabled. Matches group names as returned by NSS. I.e. after the "
+@@ -505,221 +513,221 @@ msgstr ""
+ "以逗号分隔的组列表，其成员应已启用会话记录。匹配NSS 返回的组名。在可能的空格"
+ "替换、大小写改变等之后。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:165
++#: src/config/SSSDConfig/sssdoptions.py:167
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:166
++#: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:170
++#: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+ msgstr "身份提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:171
++#: src/config/SSSDConfig/sssdoptions.py:173
+ msgid "Authentication provider"
+ msgstr "身份验证提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:172
++#: src/config/SSSDConfig/sssdoptions.py:174
+ msgid "Access control provider"
+ msgstr "访问控制提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:173
++#: src/config/SSSDConfig/sssdoptions.py:175
+ msgid "Password change provider"
+ msgstr "密码改变提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:174
++#: src/config/SSSDConfig/sssdoptions.py:176
+ msgid "SUDO provider"
+ msgstr "SUDO 提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:175
++#: src/config/SSSDConfig/sssdoptions.py:177
+ msgid "Autofs provider"
+ msgstr "Autofs 提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:176
++#: src/config/SSSDConfig/sssdoptions.py:178
+ msgid "Host identity provider"
+ msgstr "主机身份提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:177
++#: src/config/SSSDConfig/sssdoptions.py:179
+ msgid "SELinux provider"
+ msgstr "SELinux 提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:178
++#: src/config/SSSDConfig/sssdoptions.py:180
+ msgid "Session management provider"
+ msgstr "会话管理提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:179
++#: src/config/SSSDConfig/sssdoptions.py:181
+ msgid "Resolver provider"
+ msgstr "解析器提供者"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:182
++#: src/config/SSSDConfig/sssdoptions.py:184
+ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "域是否可以被 OS 或应用程序使用"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:183
++#: src/config/SSSDConfig/sssdoptions.py:185
+ #, fuzzy
+ msgid "Enable or disable the domain"
+ msgstr "启用或禁用隐式文件域"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:184
++#: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+ msgstr "最小用户 ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:185
++#: src/config/SSSDConfig/sssdoptions.py:187
+ msgid "Maximum user ID"
+ msgstr "最大用户 ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:186
++#: src/config/SSSDConfig/sssdoptions.py:188
+ msgid "Enable enumerating all users/groups"
+ msgstr "启用枚举所有用户/组"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:187
++#: src/config/SSSDConfig/sssdoptions.py:189
+ msgid "Cache credentials for offline login"
+ msgstr "为脱机登录缓存凭据"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:188
++#: src/config/SSSDConfig/sssdoptions.py:190
+ msgid "Display users/groups in fully-qualified form"
+ msgstr "以完全限定的形式显示用户/组"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:189
++#: src/config/SSSDConfig/sssdoptions.py:191
+ msgid "Don't include group members in group lookups"
+ msgstr "在组查询中不包括的组成员"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:190
+-#: src/config/SSSDConfig/sssdoptions.py:200
+-#: src/config/SSSDConfig/sssdoptions.py:201
++#: src/config/SSSDConfig/sssdoptions.py:192
+ #: src/config/SSSDConfig/sssdoptions.py:202
+ #: src/config/SSSDConfig/sssdoptions.py:203
+ #: src/config/SSSDConfig/sssdoptions.py:204
+ #: src/config/SSSDConfig/sssdoptions.py:205
+ #: src/config/SSSDConfig/sssdoptions.py:206
++#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:208
+ msgid "Entry cache timeout length (seconds)"
+ msgstr "输入缓存超时时间（秒）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:191
++#: src/config/SSSDConfig/sssdoptions.py:193
+ msgid ""
+ "Restrict or prefer a specific address family when performing DNS lookups"
+ msgstr "执行 DNS 查找时限制或首选使用特定的地址系列"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:192
++#: src/config/SSSDConfig/sssdoptions.py:194
+ msgid "How long to keep cached entries after last successful login (days)"
+ msgstr "上次成功登录后保留缓存条目的时间（天）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:193
++#: src/config/SSSDConfig/sssdoptions.py:195
+ msgid ""
+ "How long should SSSD talk to single DNS server before trying next server "
+ "(miliseconds)"
+ msgstr "在尝试下一个服务器之前，SSSD 应该与一个 DNS 服务器联系多久（毫秒）？"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:195
++#: src/config/SSSDConfig/sssdoptions.py:197
+ msgid "How long should keep trying to resolve single DNS query (seconds)"
+ msgstr "尝试解析单个 DNS 查询需要多长时间（秒）？"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:196
++#: src/config/SSSDConfig/sssdoptions.py:198
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+ msgstr "解析服务器时等待 DNS 回复的时间（秒）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:197
++#: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "The domain part of service discovery DNS query"
+ msgstr "服务发现 DNS 查询的域部分"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:198
++#: src/config/SSSDConfig/sssdoptions.py:200
+ msgid "Override GID value from the identity provider with this value"
+ msgstr "使用此值覆盖来自身份提供者的 GID 值"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:199
++#: src/config/SSSDConfig/sssdoptions.py:201
+ msgid "Treat usernames as case sensitive"
+ msgstr "用户名区分大小写"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:207
++#: src/config/SSSDConfig/sssdoptions.py:209
+ msgid "How often should expired entries be refreshed in background"
+ msgstr "过期条目应在后台刷新的频率"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:208
++#: src/config/SSSDConfig/sssdoptions.py:210
+ msgid "Whether to automatically update the client's DNS entry"
+ msgstr "是否自动更新客户端的 DNS 条目"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:209
+-#: src/config/SSSDConfig/sssdoptions.py:239
++#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:241
+ msgid "The TTL to apply to the client's DNS entry after updating it"
+ msgstr "更新后应用于客户端 DNS 条目的TTL"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:210
+-#: src/config/SSSDConfig/sssdoptions.py:240
++#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:242
+ msgid "The interface whose IP should be used for dynamic DNS updates"
+ msgstr "应该用于动态 DNS 更新的接口的 IP 地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:211
++#: src/config/SSSDConfig/sssdoptions.py:213
+ msgid "How often to periodically update the client's DNS entry"
+ msgstr "定期更新客户端的 DNS 条目的频率"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:212
++#: src/config/SSSDConfig/sssdoptions.py:214
+ msgid "Whether the provider should explicitly update the PTR record as well"
+ msgstr "提供者是否应该明确更新 PTR 记录"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:215
+ msgid "Whether the nsupdate utility should default to using TCP"
+ msgstr "nsupdate 实用程序是否应默认使用 TCP"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:216
+ msgid "What kind of authentication should be used to perform the DNS update"
+ msgstr "在执行 DNS 更新时应该使用哪种身份验证"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:215
++#: src/config/SSSDConfig/sssdoptions.py:217
+ msgid "Override the DNS server used to perform the DNS update"
+ msgstr "覆盖用于执行 DNS 更新的 DNS 服务器"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:216
++#: src/config/SSSDConfig/sssdoptions.py:218
+ msgid "Control enumeration of trusted domains"
+ msgstr "信任域的控制枚举"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:217
++#: src/config/SSSDConfig/sssdoptions.py:219
+ msgid "How often should subdomains list be refreshed"
+ msgstr "子域列表应该多久刷新一次"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:218
++#: src/config/SSSDConfig/sssdoptions.py:220
+ msgid "List of options that should be inherited into a subdomain"
+ msgstr "应该被继承到子域中的选项列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:219
++#: src/config/SSSDConfig/sssdoptions.py:221
+ msgid "Default subdomain homedir value"
+ msgstr "默认子域 homedir 值"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:220
++#: src/config/SSSDConfig/sssdoptions.py:222
+ msgid "How long can cached credentials be used for cached authentication"
+ msgstr "可以使用缓存凭证用于缓存身份验证的时间"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:221
++#: src/config/SSSDConfig/sssdoptions.py:223
+ msgid "Whether to automatically create private groups for users"
+ msgstr "是否自动为用户创建私人组"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:222
++#: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "Display a warning N days before the password expires."
+ msgstr "在密码过期前 N 天显示一个警告。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:223
++#: src/config/SSSDConfig/sssdoptions.py:225
+ msgid ""
+ "Various tags stored by the realmd configuration service for this domain."
+ msgstr "realmd 配置服务为这个域存储的各种标签。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:224
++#: src/config/SSSDConfig/sssdoptions.py:226
+ msgid ""
+ "The provider which should handle fetching of subdomains. This value should "
+ "be always the same as id_provider."
+ msgstr "应该处理子域获取的提供者，这个值应始终和 id_provider 相同。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:226
++#: src/config/SSSDConfig/sssdoptions.py:228
+ msgid ""
+ "How many seconds to keep a host ssh key after refresh. IE how long to cache "
+ "the host key for."
+ msgstr "刷新后主机 ssh 密钥要保留多少秒。IE 缓存主机密钥多长时间。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:228
++#: src/config/SSSDConfig/sssdoptions.py:230
+ msgid ""
+ "If 2-Factor-Authentication (2FA) is used and credentials should be saved "
+ "this value determines the minimal length the first authentication factor "
+@@ -728,101 +736,101 @@ msgstr ""
+ "如果使用 2-Factor-Authentication (2FA)，应该保存凭证，这个值决定了第一个认证"
+ "因素(（期密码）必须以SHA512 哈希值的形式保存到缓存中的最小长度。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:234
++#: src/config/SSSDConfig/sssdoptions.py:236
+ msgid "IPA domain"
+ msgstr "IPA 域"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:235
++#: src/config/SSSDConfig/sssdoptions.py:237
+ msgid "IPA server address"
+ msgstr "IPA 服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:236
++#: src/config/SSSDConfig/sssdoptions.py:238
+ msgid "Address of backup IPA server"
+ msgstr "IPA 备份服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:237
++#: src/config/SSSDConfig/sssdoptions.py:239
+ msgid "IPA client hostname"
+ msgstr "IPA 客户端主机名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:238
++#: src/config/SSSDConfig/sssdoptions.py:240
+ msgid "Whether to automatically update the client's DNS entry in FreeIPA"
+ msgstr "是否在 FreeIPA 中自动更新客户端的 DNS 条目"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:241
++#: src/config/SSSDConfig/sssdoptions.py:243
+ msgid "Search base for HBAC related objects"
+ msgstr "HBAC 相关对象的搜索基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:242
++#: src/config/SSSDConfig/sssdoptions.py:244
+ msgid ""
+ "The amount of time between lookups of the HBAC rules against the IPA server"
+ msgstr "针对 IPA 服务器查找 HBAC 规则之间的时间间隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:243
++#: src/config/SSSDConfig/sssdoptions.py:245
+ msgid ""
+ "The amount of time in seconds between lookups of the SELinux maps against "
+ "the IPA server"
+ msgstr "针对 IPA 服务器查找 SELinux 映射之间的时间间隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:245
++#: src/config/SSSDConfig/sssdoptions.py:247
+ msgid "If set to false, host argument given by PAM will be ignored"
+ msgstr "如果设置为 false，PAM 提供的主机参数将被忽略"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:246
++#: src/config/SSSDConfig/sssdoptions.py:248
+ msgid "The automounter location this IPA client is using"
+ msgstr "此 IPA 客户端使用的自动挂载器的位置"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:247
++#: src/config/SSSDConfig/sssdoptions.py:249
+ msgid "Search base for object containing info about IPA domain"
+ msgstr "搜索包含有关 IPA 域信息的对象的搜索基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:248
++#: src/config/SSSDConfig/sssdoptions.py:250
+ msgid "Search base for objects containing info about ID ranges"
+ msgstr "搜索包含有关 ID 范围信息的对象的搜索基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:249
+-#: src/config/SSSDConfig/sssdoptions.py:303
++#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:305
+ msgid "Enable DNS sites - location based service discovery"
+ msgstr "启用 DNS 站点 - 基于位置的服务发现"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:250
++#: src/config/SSSDConfig/sssdoptions.py:252
+ msgid "Search base for view containers"
+ msgstr "查看容器的搜索基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:251
++#: src/config/SSSDConfig/sssdoptions.py:253
+ msgid "Objectclass for view containers"
+ msgstr "查看容器的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:252
++#: src/config/SSSDConfig/sssdoptions.py:254
+ msgid "Attribute with the name of the view"
+ msgstr "具有视图名称的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:255
+ msgid "Objectclass for override objects"
+ msgstr "覆盖对象的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:254
++#: src/config/SSSDConfig/sssdoptions.py:256
+ msgid "Attribute with the reference to the original object"
+ msgstr "带有到原始对象参考的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:255
++#: src/config/SSSDConfig/sssdoptions.py:257
+ msgid "Objectclass for user override objects"
+ msgstr "用户覆盖对象的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:256
++#: src/config/SSSDConfig/sssdoptions.py:258
+ msgid "Objectclass for group override objects"
+ msgstr "组覆盖对象的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:257
++#: src/config/SSSDConfig/sssdoptions.py:259
+ msgid "Search base for Desktop Profile related objects"
+ msgstr "Desktop Profile 相关对象的搜索基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:258
++#: src/config/SSSDConfig/sssdoptions.py:260
+ msgid ""
+ "The amount of time in seconds between lookups of the Desktop Profile rules "
+ "against the IPA server"
+ msgstr "针对 IPA 服务器查找 Desktop Profile 规则之间的时间间隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:260
++#: src/config/SSSDConfig/sssdoptions.py:262
+ msgid ""
+ "The amount of time in minutes between lookups of Desktop Profiles rules "
+ "against the IPA server when the last request did not find any rule"
+@@ -830,92 +838,92 @@ msgstr ""
+ "当最后一个请求未找到任何规则时，针对 IPA 服务器的Desktop Profiles 规则查找之"
+ "间的时间间隔（以分钟为单位）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:263
++#: src/config/SSSDConfig/sssdoptions.py:265
+ msgid "The LDAP attribute that contains FQDN of the host."
+ msgstr "包含主机 FQDN 的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:264
+-#: src/config/SSSDConfig/sssdoptions.py:287
++#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:289
+ msgid "The object class of a host entry in LDAP."
+ msgstr "LDAP 中主机条目的对象类。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:265
++#: src/config/SSSDConfig/sssdoptions.py:267
+ msgid "Use the given string as search base for host objects."
+ msgstr "使用给定的字符串作为主机对象的搜索基础。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:266
++#: src/config/SSSDConfig/sssdoptions.py:268
+ msgid "The LDAP attribute that contains the host's SSH public keys."
+ msgstr "包含主机 SSH 公钥的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:267
++#: src/config/SSSDConfig/sssdoptions.py:269
+ msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+ msgstr "包含 netgroup 的 NIS 域名的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+ msgstr "包含 netgroup 成员名称的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:269
++#: src/config/SSSDConfig/sssdoptions.py:271
+ msgid ""
+ "The LDAP attribute that lists FQDNs of hosts and host groups that are "
+ "members of the netgroup."
+ msgstr "列出属于 netgroup 成员的主机和主机组的 FQDN 的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:271
++#: src/config/SSSDConfig/sssdoptions.py:273
+ msgid ""
+ "The LDAP attribute that lists hosts and host groups that are direct members "
+ "of the netgroup."
+ msgstr "LDAP属性，列出作为 netgroup 直接成员的主机和主机组。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:273
++#: src/config/SSSDConfig/sssdoptions.py:275
+ msgid "The LDAP attribute that lists netgroup's memberships."
+ msgstr "列出 netgroup 成员资格的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:274
++#: src/config/SSSDConfig/sssdoptions.py:276
+ msgid ""
+ "The LDAP attribute that lists system users and groups that are direct "
+ "members of the netgroup."
+ msgstr "LDAP 属性，列出作为 netgroup 直接成员的系统用户和组。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:276
++#: src/config/SSSDConfig/sssdoptions.py:278
+ msgid "The LDAP attribute that corresponds to the netgroup name."
+ msgstr "与 netgroup 名称相对应的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:277
++#: src/config/SSSDConfig/sssdoptions.py:279
+ msgid "The object class of a netgroup entry in LDAP."
+ msgstr "LDAP 中 netgroup 条目的对象类。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:278
++#: src/config/SSSDConfig/sssdoptions.py:280
+ msgid ""
+ "The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+ msgstr "包含 LDAP netgroup 对象的 UUID/GUID 的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:279
++#: src/config/SSSDConfig/sssdoptions.py:281
+ msgid ""
+ "The LDAP attribute that contains whether or not is user map enabled for "
+ "usage."
+ msgstr "包含是否启用用户映射的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:281
++#: src/config/SSSDConfig/sssdoptions.py:283
+ msgid "The LDAP attribute that contains host category such as 'all'."
+ msgstr "包含主机类别的 LDAP 属性，如'all'。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:282
++#: src/config/SSSDConfig/sssdoptions.py:284
+ msgid ""
+ "The LDAP attribute that contains all hosts / hostgroups this rule match "
+ "against."
+ msgstr "包含此规则所匹配的所有主机/主机组的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:284
++#: src/config/SSSDConfig/sssdoptions.py:286
+ msgid ""
+ "The LDAP attribute that contains all users / groups this rule match against."
+ msgstr "包含该规则所匹配的所有用户/组的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:286
++#: src/config/SSSDConfig/sssdoptions.py:288
+ msgid "The LDAP attribute that contains the name of SELinux usermap."
+ msgstr "包含 SELinux usermap 名称的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:288
++#: src/config/SSSDConfig/sssdoptions.py:290
+ msgid ""
+ "The LDAP attribute that contains DN of HBAC rule which can be used for "
+ "matching instead of memberUser and memberHost."
+@@ -923,19 +931,19 @@ msgstr ""
+ "包含 HBAC 规则的 DN 的 LDAP 属性，可以用来代替 memberUser 和 memberHost 进行"
+ "匹配。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:290
++#: src/config/SSSDConfig/sssdoptions.py:292
+ msgid "The LDAP attribute that contains SELinux user string itself."
+ msgstr "包含 SELinux 用户字符串的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:291
++#: src/config/SSSDConfig/sssdoptions.py:293
+ msgid "The LDAP attribute that contains user category such as 'all'."
+ msgstr "包含用户类别的 LDAP 属性，如'all'。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:292
++#: src/config/SSSDConfig/sssdoptions.py:294
+ msgid "The LDAP attribute that contains unique ID of the user map."
+ msgstr "包含用户映射的唯一 ID 的 LDAP 属性。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:293
++#: src/config/SSSDConfig/sssdoptions.py:295
+ msgid ""
+ "The option denotes that the SSSD is running on IPA server and should perform "
+ "lookups of users and groups from trusted domains differently."
+@@ -943,890 +951,894 @@ msgstr ""
+ "该选项表示 SSSD 在 IPA 服务器上运行，应该以不同的方式执行来自受信任域的用户和"
+ "组的查找。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:295
++#: src/config/SSSDConfig/sssdoptions.py:297
+ msgid "Use the given string as search base for trusted domains."
+ msgstr "使用给定的字符串作为可信域的搜索基础。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:298
++#: src/config/SSSDConfig/sssdoptions.py:300
+ msgid "Active Directory domain"
+ msgstr "活动目录域"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:299
++#: src/config/SSSDConfig/sssdoptions.py:301
+ msgid "Enabled Active Directory domains"
+ msgstr "启用活动目录域"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:300
++#: src/config/SSSDConfig/sssdoptions.py:302
+ msgid "Active Directory server address"
+ msgstr "没动目录服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:301
++#: src/config/SSSDConfig/sssdoptions.py:303
+ msgid "Active Directory backup server address"
+ msgstr "没动目录备份服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:302
++#: src/config/SSSDConfig/sssdoptions.py:304
+ msgid "Active Directory client hostname"
+ msgstr "活动目录客户端主机名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:304
+-#: src/config/SSSDConfig/sssdoptions.py:497
++#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:500
+ msgid "LDAP filter to determine access privileges"
+ msgstr "用于决定访问权限 的 LDAP 过滤器"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:305
++#: src/config/SSSDConfig/sssdoptions.py:307
+ msgid "Whether to use the Global Catalog for lookups"
+ msgstr "是否使用 Global Catalog 进行查找"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:306
++#: src/config/SSSDConfig/sssdoptions.py:308
+ msgid "Operation mode for GPO-based access control"
+ msgstr "基于 GPO 的访问控制的操作模式"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:307
++#: src/config/SSSDConfig/sssdoptions.py:309
+ msgid ""
+ "The amount of time between lookups of the GPO policy files against the AD "
+ "server"
+ msgstr "针对 IPA 服务器查找 GPO 策略文件之间的时间间隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:310
+ msgid ""
+ "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy "
+ "settings"
+ msgstr "映射到 GPO (Deny)InteractiveLogonRight 策略设置的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:310
++#: src/config/SSSDConfig/sssdoptions.py:312
+ msgid ""
+ "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight "
+ "policy settings"
+ msgstr "映射到 GPO (Deny)RemoteInteractiveLogonRight 策略设置的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:312
++#: src/config/SSSDConfig/sssdoptions.py:314
+ msgid ""
+ "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings"
+ msgstr "映射到 GPO (Deny)NetworkLogonRight 策略设置的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:313
++#: src/config/SSSDConfig/sssdoptions.py:315
+ msgid ""
+ "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings"
+ msgstr "映射到 GPO (Deny)BatchLogonRight 策略设置的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:314
++#: src/config/SSSDConfig/sssdoptions.py:316
+ msgid ""
+ "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings"
+ msgstr "映射到 GPO (Deny)ServiceLogonRight 策略设置的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:315
++#: src/config/SSSDConfig/sssdoptions.py:317
+ msgid "PAM service names for which GPO-based access is always granted"
+ msgstr "基于 GPO 的访问始终会被授予的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:316
++#: src/config/SSSDConfig/sssdoptions.py:318
+ msgid "PAM service names for which GPO-based access is always denied"
+ msgstr "基于 GPO 的访问始终会被拒绝的 PAM 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:317
++#: src/config/SSSDConfig/sssdoptions.py:319
+ msgid ""
+ "Default logon right (or permit/deny) to use for unmapped PAM service names"
+ msgstr "用于未映射的 PAM 服务名称的默认登录权（或允许/拒绝）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:318
++#: src/config/SSSDConfig/sssdoptions.py:320
+ msgid "a particular site to be used by the client"
+ msgstr "客户要使用的特定站点"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:319
++#: src/config/SSSDConfig/sssdoptions.py:321
+ msgid ""
+ "Maximum age in days before the machine account password should be renewed"
+ msgstr "机器帐户密码需要续订的最长期限（天）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:321
++#: src/config/SSSDConfig/sssdoptions.py:323
+ msgid "Option for tuning the machine account renewal task"
+ msgstr "用于调整机器帐户续订任务的选项"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:322
++#: src/config/SSSDConfig/sssdoptions.py:324
+ msgid "Whether to update the machine account password in the Samba database"
+ msgstr "是否要更新 Samba 数据库中的机器账户密码？"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:324
++#: src/config/SSSDConfig/sssdoptions.py:326
+ msgid "Use LDAPS port for LDAP and Global Catalog requests"
+ msgstr "将 LDAPS 端口用于 LDAP 和 Global Catalog 请求"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:325
++#: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:328
+-#: src/config/SSSDConfig/sssdoptions.py:329
++#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:331
+ msgid "Kerberos server address"
+ msgstr "Kerberos 服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:330
++#: src/config/SSSDConfig/sssdoptions.py:332
+ msgid "Kerberos backup server address"
+ msgstr "Kerberos 备份服务器地址"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:331
++#: src/config/SSSDConfig/sssdoptions.py:333
+ msgid "Kerberos realm"
+ msgstr "Kerberos realm"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:334
+ msgid "Authentication timeout"
+ msgstr "验证超时"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:333
++#: src/config/SSSDConfig/sssdoptions.py:335
+ msgid "Whether to create kdcinfo files"
+ msgstr "是否创建 kdcinfo 文件"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:334
++#: src/config/SSSDConfig/sssdoptions.py:336
+ msgid "Where to drop krb5 config snippets"
+ msgstr "在哪里放置 krb5 配置片段"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:337
++#: src/config/SSSDConfig/sssdoptions.py:339
+ msgid "Directory to store credential caches"
+ msgstr "存储凭证缓存的目录"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:338
++#: src/config/SSSDConfig/sssdoptions.py:340
+ msgid "Location of the user's credential cache"
+ msgstr "用户凭证缓存的位置"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:339
++#: src/config/SSSDConfig/sssdoptions.py:341
+ msgid "Location of the keytab to validate credentials"
+ msgstr "用于验证凭据的密钥表的位置"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:340
++#: src/config/SSSDConfig/sssdoptions.py:342
+ msgid "Enable credential validation"
+ msgstr "启用凭证验证"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:341
++#: src/config/SSSDConfig/sssdoptions.py:343
+ msgid "Store password if offline for later online authentication"
+ msgstr "离线时存储密码，以便以后进行在线身份验证"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:342
++#: src/config/SSSDConfig/sssdoptions.py:344
+ msgid "Renewable lifetime of the TGT"
+ msgstr "TGT 的可更新寿命"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:343
++#: src/config/SSSDConfig/sssdoptions.py:345
+ msgid "Lifetime of the TGT"
+ msgstr "TGT 的寿命"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:344
++#: src/config/SSSDConfig/sssdoptions.py:346
+ msgid "Time between two checks for renewal"
+ msgstr "两次更新检查之间的间隔时间"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:345
++#: src/config/SSSDConfig/sssdoptions.py:347
+ msgid "Enables FAST"
+ msgstr "启用 FAST"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:346
++#: src/config/SSSDConfig/sssdoptions.py:348
+ msgid "Selects the principal to use for FAST"
+ msgstr "选择用于 FAST 的主体"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:347
++#: src/config/SSSDConfig/sssdoptions.py:349
+ msgid "Enables principal canonicalization"
+ msgstr "启用主体规范化"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:348
++#: src/config/SSSDConfig/sssdoptions.py:350
+ msgid "Enables enterprise principals"
+ msgstr "启用企业主体"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:349
++#: src/config/SSSDConfig/sssdoptions.py:351
++msgid "Enables using of subdomains realms for authentication"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+ msgstr "从用户名到 Kerberos 主体名称的映射"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:352
+-#: src/config/SSSDConfig/sssdoptions.py:353
++#: src/config/SSSDConfig/sssdoptions.py:355
++#: src/config/SSSDConfig/sssdoptions.py:356
+ msgid "Server where the change password service is running if not on the KDC"
+ msgstr "如果不在 KDC 上，运行更改密码服务的服务器"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:356
++#: src/config/SSSDConfig/sssdoptions.py:359
+ msgid "ldap_uri, The URI of the LDAP server"
+ msgstr "ldap_uri，LDAP 服务器的 URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:357
++#: src/config/SSSDConfig/sssdoptions.py:360
+ msgid "ldap_backup_uri, The URI of the LDAP server"
+ msgstr "ldap_backup_uri，LDAP 服务器的 URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:358
++#: src/config/SSSDConfig/sssdoptions.py:361
+ msgid "The default base DN"
+ msgstr "默认基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:359
++#: src/config/SSSDConfig/sssdoptions.py:362
+ msgid "The Schema Type in use on the LDAP server, rfc2307"
+ msgstr "LDAP 服务器上使用的 Schema Type，rfc2307"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:360
++#: src/config/SSSDConfig/sssdoptions.py:363
+ msgid "Mode used to change user password"
+ msgstr "用来修改用户密码的模式"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:361
++#: src/config/SSSDConfig/sssdoptions.py:364
+ msgid "The default bind DN"
+ msgstr "默认绑定 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:362
++#: src/config/SSSDConfig/sssdoptions.py:365
+ msgid "The type of the authentication token of the default bind DN"
+ msgstr "默认绑定 DN 的身份验证令牌的类型"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:363
++#: src/config/SSSDConfig/sssdoptions.py:366
+ msgid "The authentication token of the default bind DN"
+ msgstr "默认绑定 DN 的身份验证令牌"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:364
++#: src/config/SSSDConfig/sssdoptions.py:367
+ msgid "Length of time to attempt connection"
+ msgstr "尝试连接的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:365
++#: src/config/SSSDConfig/sssdoptions.py:368
+ msgid "Length of time to attempt synchronous LDAP operations"
+ msgstr "尝试同步 LDAP 操作的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:366
++#: src/config/SSSDConfig/sssdoptions.py:369
+ msgid "Length of time between attempts to reconnect while offline"
+ msgstr "离线时尝试重新连接的时间间隔"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:367
++#: src/config/SSSDConfig/sssdoptions.py:370
+ msgid "Use only the upper case for realm names"
+ msgstr "realm 名称仅使用大写字母"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:368
++#: src/config/SSSDConfig/sssdoptions.py:371
+ msgid "File that contains CA certificates"
+ msgstr "包含 CA 证书的文件"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:369
++#: src/config/SSSDConfig/sssdoptions.py:372
+ msgid "Path to CA certificate directory"
+ msgstr "CA 证书目录的路径"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:370
++#: src/config/SSSDConfig/sssdoptions.py:373
+ msgid "File that contains the client certificate"
+ msgstr "包含客户端 CA 证书的文件"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:371
++#: src/config/SSSDConfig/sssdoptions.py:374
+ msgid "File that contains the client key"
+ msgstr "包含客户端密钥的文件"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:372
++#: src/config/SSSDConfig/sssdoptions.py:375
+ msgid "List of possible ciphers suites"
+ msgstr "可能的加密套件列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:373
++#: src/config/SSSDConfig/sssdoptions.py:376
+ msgid "Require TLS certificate verification"
+ msgstr "调整 TLS 证书验证"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:374
++#: src/config/SSSDConfig/sssdoptions.py:377
+ msgid "Specify the sasl mechanism to use"
+ msgstr "指定要使用的 sasl 机制"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:375
++#: src/config/SSSDConfig/sssdoptions.py:378
+ msgid "Specify the sasl authorization id to use"
+ msgstr "指定要使用的 sasl 授权 ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:376
++#: src/config/SSSDConfig/sssdoptions.py:379
+ msgid "Specify the sasl authorization realm to use"
+ msgstr "指定要使用的 sasl 授权 realm"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:377
++#: src/config/SSSDConfig/sssdoptions.py:380
+ msgid "Specify the minimal SSF for LDAP sasl authorization"
+ msgstr "为 LDAP sasl 授权指定最小的 SSF"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:378
++#: src/config/SSSDConfig/sssdoptions.py:381
+ msgid "Specify the maximal SSF for LDAP sasl authorization"
+ msgstr "为 LDAP sasl 授权指定最大的 SSF"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:379
++#: src/config/SSSDConfig/sssdoptions.py:382
+ msgid "Kerberos service keytab"
+ msgstr "Kerberos服务密钥表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:380
++#: src/config/SSSDConfig/sssdoptions.py:383
+ msgid "Use Kerberos auth for LDAP connection"
+ msgstr "使用 Kerberos 身份验证进行 LDAP 连接"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:381
++#: src/config/SSSDConfig/sssdoptions.py:384
+ msgid "Follow LDAP referrals"
+ msgstr "遵循 LDAP 引用"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:382
++#: src/config/SSSDConfig/sssdoptions.py:385
+ msgid "Lifetime of TGT for LDAP connection"
+ msgstr "TGT 的 LDAP 连接生命周期"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:383
++#: src/config/SSSDConfig/sssdoptions.py:386
+ msgid "How to dereference aliases"
+ msgstr "如何取消引用别名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:384
++#: src/config/SSSDConfig/sssdoptions.py:387
+ msgid "Service name for DNS service lookups"
+ msgstr "DNS 服务查找的服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:385
++#: src/config/SSSDConfig/sssdoptions.py:388
+ msgid "The number of records to retrieve in a single LDAP query"
+ msgstr "单个 LDAP 查询中要检索的记录数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:386
++#: src/config/SSSDConfig/sssdoptions.py:389
+ msgid "The number of members that must be missing to trigger a full deref"
+ msgstr "触发完全取消引用请最少需要缺少的成员数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:387
++#: src/config/SSSDConfig/sssdoptions.py:390
+ msgid ""
+ "Whether the LDAP library should perform a reverse lookup to canonicalize the "
+ "host name during a SASL bind"
+ msgstr "在 SASL绑定期间，LDAP 库是否应执行反向查找以规范化主机名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:389
++#: src/config/SSSDConfig/sssdoptions.py:392
+ msgid ""
+ "Allows to retain local users as members of an LDAP group for servers that "
+ "use the RFC2307 schema."
+ msgstr "允许保留本地用户作为使用 RFC2307 模式的服务器的 LDAP 组成员。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:392
++#: src/config/SSSDConfig/sssdoptions.py:395
+ msgid "entryUSN attribute"
+ msgstr "entryUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:393
++#: src/config/SSSDConfig/sssdoptions.py:396
+ msgid "lastUSN attribute"
+ msgstr "lastUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:395
++#: src/config/SSSDConfig/sssdoptions.py:398
+ msgid "How long to retain a connection to the LDAP server before disconnecting"
+ msgstr "断开连接前与 LDAP 服务器保持连接的时间"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:398
++#: src/config/SSSDConfig/sssdoptions.py:401
+ msgid "Disable the LDAP paging control"
+ msgstr "禁用 LDAP 分页控制"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:399
++#: src/config/SSSDConfig/sssdoptions.py:402
+ msgid "Disable Active Directory range retrieval"
+ msgstr "禁用 Active Directory 范围检索"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:402
++#: src/config/SSSDConfig/sssdoptions.py:405
+ msgid "Length of time to wait for a search request"
+ msgstr "等待搜索请求的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:403
++#: src/config/SSSDConfig/sssdoptions.py:406
+ msgid "Length of time to wait for a enumeration request"
+ msgstr "等待枚举请求的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:404
++#: src/config/SSSDConfig/sssdoptions.py:407
+ msgid "Length of time between enumeration updates"
+ msgstr "枚举更新之间的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:405
++#: src/config/SSSDConfig/sssdoptions.py:408
+ msgid "Length of time between cache cleanups"
+ msgstr "两次缓存清除之间的时间长度"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:406
++#: src/config/SSSDConfig/sssdoptions.py:409
+ msgid "Require TLS for ID lookups"
+ msgstr "需要 TLS 进行 ID 查找"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:407
++#: src/config/SSSDConfig/sssdoptions.py:410
+ msgid "Use ID-mapping of objectSID instead of pre-set IDs"
+ msgstr "使用 objectSID 的 ID 映射而不是预设的 ID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:408
++#: src/config/SSSDConfig/sssdoptions.py:411
+ msgid "Base DN for user lookups"
+ msgstr "用户查找的基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:409
++#: src/config/SSSDConfig/sssdoptions.py:412
+ msgid "Scope of user lookups"
+ msgstr "用户查找范围"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:410
++#: src/config/SSSDConfig/sssdoptions.py:413
+ msgid "Filter for user lookups"
+ msgstr "用户查找过滤"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:411
++#: src/config/SSSDConfig/sssdoptions.py:414
+ msgid "Objectclass for users"
+ msgstr "用户的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:412
++#: src/config/SSSDConfig/sssdoptions.py:415
+ msgid "Username attribute"
+ msgstr "用户名属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:413
++#: src/config/SSSDConfig/sssdoptions.py:416
+ msgid "UID attribute"
+ msgstr "UID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:414
++#: src/config/SSSDConfig/sssdoptions.py:417
+ msgid "Primary GID attribute"
+ msgstr "主 GID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:415
++#: src/config/SSSDConfig/sssdoptions.py:418
+ msgid "GECOS attribute"
+ msgstr "GECOS 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:416
++#: src/config/SSSDConfig/sssdoptions.py:419
+ msgid "Home directory attribute"
+ msgstr "家目录属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:417
++#: src/config/SSSDConfig/sssdoptions.py:420
+ msgid "Shell attribute"
+ msgstr "Shell 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:418
++#: src/config/SSSDConfig/sssdoptions.py:421
+ msgid "UUID attribute"
+ msgstr "UUID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:419
+-#: src/config/SSSDConfig/sssdoptions.py:457
++#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:460
+ msgid "objectSID attribute"
+ msgstr "objectSID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:420
++#: src/config/SSSDConfig/sssdoptions.py:423
+ msgid "Active Directory primary group attribute for ID-mapping"
+ msgstr "用于 ID 映射的活动目录的主组属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:421
++#: src/config/SSSDConfig/sssdoptions.py:424
+ msgid "User principal attribute (for Kerberos)"
+ msgstr "用户主体属性（用于 Kerberos）"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:422
++#: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Full Name"
+ msgstr "全称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:423
++#: src/config/SSSDConfig/sssdoptions.py:426
+ msgid "memberOf attribute"
+ msgstr "memberOf 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:427
+ msgid "Modification time attribute"
+ msgstr "修改时间属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:425
++#: src/config/SSSDConfig/sssdoptions.py:428
+ msgid "shadowLastChange attribute"
+ msgstr "shadowLastChange 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:426
++#: src/config/SSSDConfig/sssdoptions.py:429
+ msgid "shadowMin attribute"
+ msgstr "shadowMin 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:427
++#: src/config/SSSDConfig/sssdoptions.py:430
+ msgid "shadowMax attribute"
+ msgstr "shadowMax 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:428
++#: src/config/SSSDConfig/sssdoptions.py:431
+ msgid "shadowWarning attribute"
+ msgstr "shadowWarning 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:429
++#: src/config/SSSDConfig/sssdoptions.py:432
+ msgid "shadowInactive attribute"
+ msgstr "shadowInactive 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:430
++#: src/config/SSSDConfig/sssdoptions.py:433
+ msgid "shadowExpire attribute"
+ msgstr "shadowExpire 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:431
++#: src/config/SSSDConfig/sssdoptions.py:434
+ msgid "shadowFlag attribute"
+ msgstr "shadowFlag 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:432
++#: src/config/SSSDConfig/sssdoptions.py:435
+ msgid "Attribute listing authorized PAM services"
+ msgstr "列出授权的 PAM 服务的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:433
++#: src/config/SSSDConfig/sssdoptions.py:436
+ msgid "Attribute listing authorized server hosts"
+ msgstr "列出授权的服务器主机的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:434
++#: src/config/SSSDConfig/sssdoptions.py:437
+ msgid "Attribute listing authorized server rhosts"
+ msgstr "列出授权的服务器 rhost 的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:435
++#: src/config/SSSDConfig/sssdoptions.py:438
+ msgid "krbLastPwdChange attribute"
+ msgstr "krbLastPwdChange 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:436
++#: src/config/SSSDConfig/sssdoptions.py:439
+ msgid "krbPasswordExpiration attribute"
+ msgstr "krbPasswordExpiration 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:437
++#: src/config/SSSDConfig/sssdoptions.py:440
+ msgid "Attribute indicating that server side password policies are active"
+ msgstr "用来指示服务器端密码策略处于活动状态的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:438
++#: src/config/SSSDConfig/sssdoptions.py:441
+ msgid "accountExpires attribute of AD"
+ msgstr "AD 的 accountExpires 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:439
++#: src/config/SSSDConfig/sssdoptions.py:442
+ msgid "userAccountControl attribute of AD"
+ msgstr "AD 的 userAccountControl 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:440
++#: src/config/SSSDConfig/sssdoptions.py:443
+ msgid "nsAccountLock attribute"
+ msgstr "nsAccountLock 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:441
++#: src/config/SSSDConfig/sssdoptions.py:444
+ msgid "loginDisabled attribute of NDS"
+ msgstr "NDS 的 loginDisabled 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:442
++#: src/config/SSSDConfig/sssdoptions.py:445
+ msgid "loginExpirationTime attribute of NDS"
+ msgstr "NDS 的 loginExpirationTime 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:443
++#: src/config/SSSDConfig/sssdoptions.py:446
+ msgid "loginAllowedTimeMap attribute of NDS"
+ msgstr "NDS 的 loginAllowedTimeMap 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:444
++#: src/config/SSSDConfig/sssdoptions.py:447
+ msgid "SSH public key attribute"
+ msgstr "SSH 公钥属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:445
++#: src/config/SSSDConfig/sssdoptions.py:448
+ msgid "attribute listing allowed authentication types for a user"
+ msgstr "列出用户允许的身份验证类型的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:446
++#: src/config/SSSDConfig/sssdoptions.py:449
+ msgid "attribute containing the X509 certificate of the user"
+ msgstr "包含用户的 X509 证书的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:447
++#: src/config/SSSDConfig/sssdoptions.py:450
+ msgid "attribute containing the email address of the user"
+ msgstr "包含用户电子邮件地址的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:448
++#: src/config/SSSDConfig/sssdoptions.py:451
+ msgid "A list of extra attributes to download along with the user entry"
+ msgstr "要与用户条目一起下载的其他属性的列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:450
++#: src/config/SSSDConfig/sssdoptions.py:453
+ msgid "Base DN for group lookups"
+ msgstr "组查找的基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:451
++#: src/config/SSSDConfig/sssdoptions.py:454
+ msgid "Objectclass for groups"
+ msgstr "组的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:452
++#: src/config/SSSDConfig/sssdoptions.py:455
+ msgid "Group name"
+ msgstr "组名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:453
++#: src/config/SSSDConfig/sssdoptions.py:456
+ msgid "Group password"
+ msgstr "组密码"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:454
++#: src/config/SSSDConfig/sssdoptions.py:457
+ msgid "GID attribute"
+ msgstr "GID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:455
++#: src/config/SSSDConfig/sssdoptions.py:458
+ msgid "Group member attribute"
+ msgstr "组成员属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:456
++#: src/config/SSSDConfig/sssdoptions.py:459
+ msgid "Group UUID attribute"
+ msgstr "组 UUID 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:458
++#: src/config/SSSDConfig/sssdoptions.py:461
+ msgid "Modification time attribute for groups"
+ msgstr "组的修改时间属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:459
++#: src/config/SSSDConfig/sssdoptions.py:462
+ msgid "Type of the group and other flags"
+ msgstr "组的类型和其他标志"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:460
++#: src/config/SSSDConfig/sssdoptions.py:463
+ msgid "The LDAP group external member attribute"
+ msgstr "LDAP 组外部成员属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:461
++#: src/config/SSSDConfig/sssdoptions.py:464
+ msgid "Maximum nesting level SSSD will follow"
+ msgstr "将遵循的最大嵌套级别 SSSD"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:462
++#: src/config/SSSDConfig/sssdoptions.py:465
+ msgid "Filter for group lookups"
+ msgstr "组查询的过滤器"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:463
++#: src/config/SSSDConfig/sssdoptions.py:466
+ msgid "Scope of group lookups"
+ msgstr "组查询的范围"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:465
++#: src/config/SSSDConfig/sssdoptions.py:468
+ msgid "Base DN for netgroup lookups"
+ msgstr "netgroup 查找的基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:466
++#: src/config/SSSDConfig/sssdoptions.py:469
+ msgid "Objectclass for netgroups"
+ msgstr "netgroup 的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:467
++#: src/config/SSSDConfig/sssdoptions.py:470
+ msgid "Netgroup name"
+ msgstr "Netgroup 名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:468
++#: src/config/SSSDConfig/sssdoptions.py:471
+ msgid "Netgroups members attribute"
+ msgstr "Netgroups 成员属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:469
++#: src/config/SSSDConfig/sssdoptions.py:472
+ msgid "Netgroup triple attribute"
+ msgstr "Netgroup triple 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:470
++#: src/config/SSSDConfig/sssdoptions.py:473
+ msgid "Modification time attribute for netgroups"
+ msgstr "netgroup 的修改时间属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:472
++#: src/config/SSSDConfig/sssdoptions.py:475
+ msgid "Base DN for service lookups"
+ msgstr "服务查找的基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:473
++#: src/config/SSSDConfig/sssdoptions.py:476
+ msgid "Objectclass for services"
+ msgstr "服务的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:474
++#: src/config/SSSDConfig/sssdoptions.py:477
+ msgid "Service name attribute"
+ msgstr "服务名属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:475
++#: src/config/SSSDConfig/sssdoptions.py:478
+ msgid "Service port attribute"
+ msgstr "服务端口属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:476
++#: src/config/SSSDConfig/sssdoptions.py:479
+ msgid "Service protocol attribute"
+ msgstr "服务协议属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:478
++#: src/config/SSSDConfig/sssdoptions.py:481
+ msgid "Lower bound for ID-mapping"
+ msgstr "ID 映射的下限"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:479
++#: src/config/SSSDConfig/sssdoptions.py:482
+ msgid "Upper bound for ID-mapping"
+ msgstr "ID 映射的上限"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:480
++#: src/config/SSSDConfig/sssdoptions.py:483
+ msgid "Number of IDs for each slice when ID-mapping"
+ msgstr "ID 映射时每个片的 ID 数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:481
++#: src/config/SSSDConfig/sssdoptions.py:484
+ msgid "Use autorid-compatible algorithm for ID-mapping"
+ msgstr "使用与 autorid 兼容的算法进行 ID 映射"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:482
++#: src/config/SSSDConfig/sssdoptions.py:485
+ msgid "Name of the default domain for ID-mapping"
+ msgstr "用于 ID 映射的默认域的名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:483
++#: src/config/SSSDConfig/sssdoptions.py:486
+ msgid "SID of the default domain for ID-mapping"
+ msgstr "用于 ID 映射的默认域的 SID"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:484
++#: src/config/SSSDConfig/sssdoptions.py:487
+ msgid "Number of secondary slices"
+ msgstr "次要切片数"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:486
++#: src/config/SSSDConfig/sssdoptions.py:489
+ msgid "Whether to use Token-Groups"
+ msgstr "是否使用令牌组"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:487
++#: src/config/SSSDConfig/sssdoptions.py:490
+ msgid "Set lower boundary for allowed IDs from the LDAP server"
+ msgstr "设置 LDAP 服务器允许的 ID 的下边界"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:488
++#: src/config/SSSDConfig/sssdoptions.py:491
+ msgid "Set upper boundary for allowed IDs from the LDAP server"
+ msgstr "设置 LDAP 服务器允许的 ID 的上边界"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:489
++#: src/config/SSSDConfig/sssdoptions.py:492
+ msgid "DN for ppolicy queries"
+ msgstr "ppolicy 查询的 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:490
++#: src/config/SSSDConfig/sssdoptions.py:493
+ msgid "How many maximum entries to fetch during a wildcard request"
+ msgstr "在通配符请求期间要提取多少个最大条目"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:491
++#: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:494
++#: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+ msgstr "评估密码有效期的策略"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:498
++#: src/config/SSSDConfig/sssdoptions.py:501
+ msgid "Which attributes shall be used to evaluate if an account is expired"
+ msgstr "应使用哪些属性来评估帐户是否过期"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:499
++#: src/config/SSSDConfig/sssdoptions.py:502
+ msgid "Which rules should be used to evaluate access control"
+ msgstr "应该使用哪些规则来评估访问控制"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:502
++#: src/config/SSSDConfig/sssdoptions.py:505
+ msgid "URI of an LDAP server where password changes are allowed"
+ msgstr "允许更改密码的 LDAP 服务器的 URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:503
++#: src/config/SSSDConfig/sssdoptions.py:506
+ msgid "URI of a backup LDAP server where password changes are allowed"
+ msgstr "允许更改密码的备份 LDAP 服务器的 URI"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:504
++#: src/config/SSSDConfig/sssdoptions.py:507
+ msgid "DNS service name for LDAP password change server"
+ msgstr "LDAP 密码更改服务器的 DNS 服务名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:505
++#: src/config/SSSDConfig/sssdoptions.py:508
+ msgid ""
+ "Whether to update the ldap_user_shadow_last_change attribute after a "
+ "password change"
+ msgstr "更改密码后是否更新 ldap_user_shadow_last_change 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:509
++#: src/config/SSSDConfig/sssdoptions.py:512
+ msgid "Base DN for sudo rules lookups"
+ msgstr "sudo 规则查找的基本DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:510
++#: src/config/SSSDConfig/sssdoptions.py:513
+ msgid "Automatic full refresh period"
+ msgstr "自动完整刷新周期"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:511
++#: src/config/SSSDConfig/sssdoptions.py:514
+ msgid "Automatic smart refresh period"
+ msgstr "自动智能刷新周期"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:512
++#: src/config/SSSDConfig/sssdoptions.py:515
+ msgid "Whether to filter rules by hostname, IP addresses and network"
+ msgstr "是否按主机名，IP地址和网络过滤规则"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:513
++#: src/config/SSSDConfig/sssdoptions.py:516
+ msgid ""
+ "Hostnames and/or fully qualified domain names of this machine to filter sudo "
+ "rules"
+ msgstr "本机的主机名和/或限定域名，用于过滤 sudo 规则"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:514
++#: src/config/SSSDConfig/sssdoptions.py:517
+ msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
+ msgstr "IPv4 或 IPv6 地址或本机器的网络，用于过滤 sudo 规则"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:515
++#: src/config/SSSDConfig/sssdoptions.py:518
+ msgid "Whether to include rules that contains netgroup in host attribute"
+ msgstr "是否在主机属性中包含带有 netgroup 的规则"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:516
++#: src/config/SSSDConfig/sssdoptions.py:519
+ msgid ""
+ "Whether to include rules that contains regular expression in host attribute"
+ msgstr "是否在主机属性中包含带有正则表达式的规则"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:517
++#: src/config/SSSDConfig/sssdoptions.py:520
+ msgid "Object class for sudo rules"
+ msgstr "sudo 规则的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:518
++#: src/config/SSSDConfig/sssdoptions.py:521
+ msgid "Name of attribute that is used as object class for sudo rules"
+ msgstr "用作 sudo 规则的对象类的属性名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:519
++#: src/config/SSSDConfig/sssdoptions.py:522
+ msgid "Sudo rule name"
+ msgstr "sudo 规则名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:520
++#: src/config/SSSDConfig/sssdoptions.py:523
+ msgid "Sudo rule command attribute"
+ msgstr "sudo 规则命令属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:521
++#: src/config/SSSDConfig/sssdoptions.py:524
+ msgid "Sudo rule host attribute"
+ msgstr "sudo 规则主机属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:522
++#: src/config/SSSDConfig/sssdoptions.py:525
+ msgid "Sudo rule user attribute"
+ msgstr "sudo 规则用户属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:523
++#: src/config/SSSDConfig/sssdoptions.py:526
+ msgid "Sudo rule option attribute"
+ msgstr "sudo 规则选项属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:524
++#: src/config/SSSDConfig/sssdoptions.py:527
+ msgid "Sudo rule runas attribute"
+ msgstr "sudo 规则 runas 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:525
++#: src/config/SSSDConfig/sssdoptions.py:528
+ msgid "Sudo rule runasuser attribute"
+ msgstr "sudo 规则 runasuser 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:526
++#: src/config/SSSDConfig/sssdoptions.py:529
+ msgid "Sudo rule runasgroup attribute"
+ msgstr "sudo 规则 runasgroup 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:527
++#: src/config/SSSDConfig/sssdoptions.py:530
+ msgid "Sudo rule notbefore attribute"
+ msgstr "sudo 规则 notbefore 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:528
++#: src/config/SSSDConfig/sssdoptions.py:531
+ msgid "Sudo rule notafter attribute"
+ msgstr "sudo 规则 notafter 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:529
++#: src/config/SSSDConfig/sssdoptions.py:532
+ msgid "Sudo rule order attribute"
+ msgstr "sudo 规则顺序属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:532
++#: src/config/SSSDConfig/sssdoptions.py:535
+ msgid "Object class for automounter maps"
+ msgstr "自动挂载器映射的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:533
++#: src/config/SSSDConfig/sssdoptions.py:536
+ msgid "Automounter map name attribute"
+ msgstr "自动挂载器映射名称属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:534
++#: src/config/SSSDConfig/sssdoptions.py:537
+ msgid "Object class for automounter map entries"
+ msgstr "自动挂载器映射条目的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:535
++#: src/config/SSSDConfig/sssdoptions.py:538
+ msgid "Automounter map entry key attribute"
+ msgstr "自动挂载器映射条目键的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:536
++#: src/config/SSSDConfig/sssdoptions.py:539
+ msgid "Automounter map entry value attribute"
+ msgstr "自动挂载器映射条目值的属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:537
++#: src/config/SSSDConfig/sssdoptions.py:540
+ msgid "Base DN for automounter map lookups"
+ msgstr "自动挂载程序映射查找的基本 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:538
++#: src/config/SSSDConfig/sssdoptions.py:541
+ msgid "The name of the automount master map in LDAP."
+ msgstr "LDAP 中自动挂载主映射的名称。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:541
++#: src/config/SSSDConfig/sssdoptions.py:544
+ msgid "Base DN for IP hosts lookups"
+ msgstr "IP 主机查询的基础 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:542
++#: src/config/SSSDConfig/sssdoptions.py:545
+ msgid "Object class for IP hosts"
+ msgstr "IP 主机的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:543
++#: src/config/SSSDConfig/sssdoptions.py:546
+ msgid "IP host name attribute"
+ msgstr "IP 主机名属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:544
++#: src/config/SSSDConfig/sssdoptions.py:547
+ msgid "IP host number (address) attribute"
+ msgstr "IP 主机号（地址）属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:545
++#: src/config/SSSDConfig/sssdoptions.py:548
+ msgid "IP host entryUSN attribute"
+ msgstr "IP 主机 entryUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:546
++#: src/config/SSSDConfig/sssdoptions.py:549
+ msgid "Base DN for IP networks lookups"
+ msgstr "IP 网络查询的基础 DN"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:547
++#: src/config/SSSDConfig/sssdoptions.py:550
+ msgid "Object class for IP networks"
+ msgstr "IP 网络的对象类"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:548
++#: src/config/SSSDConfig/sssdoptions.py:551
+ msgid "IP network name attribute"
+ msgstr "IP 网络名称属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:549
++#: src/config/SSSDConfig/sssdoptions.py:552
+ msgid "IP network number (address) attribute"
+ msgstr "I P网号（地址）属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:550
++#: src/config/SSSDConfig/sssdoptions.py:553
+ msgid "IP network entryUSN attribute"
+ msgstr "IP 网络 entryUSN 属性"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:553
++#: src/config/SSSDConfig/sssdoptions.py:556
+ msgid "Comma separated list of allowed users"
+ msgstr "以逗号分隔的允许的用户列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:554
++#: src/config/SSSDConfig/sssdoptions.py:557
+ msgid "Comma separated list of prohibited users"
+ msgstr "以逗号分隔的不允许的用户列表"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:555
++#: src/config/SSSDConfig/sssdoptions.py:558
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+ msgstr ""
+ "以逗号分隔的允许登录的组的列表。这只适用于此 SSSD 域内的组。本地组不被评估。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:557
++#: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+ "Comma separated list of groups that are explicitly denied access. This "
+ "applies only to groups within this SSSD domain. Local groups are not "
+@@ -1835,184 +1847,184 @@ msgstr ""
+ "以逗号分隔的明确拒绝访问的组的列表。这只适用于此 SSSD 域内的组。本地组不被评"
+ "估。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:561
++#: src/config/SSSDConfig/sssdoptions.py:564
+ msgid "Base for home directories"
+ msgstr "家目录的基础"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:562
++#: src/config/SSSDConfig/sssdoptions.py:565
+ msgid "Indicate if a home directory should be created for new users."
+ msgstr "指定是否应该为新用户创建主目录。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:563
++#: src/config/SSSDConfig/sssdoptions.py:566
+ msgid "Indicate if a home directory should be removed for deleted users."
+ msgstr "指定是否要删除已删除用户的主目录。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:564
++#: src/config/SSSDConfig/sssdoptions.py:567
+ msgid "Specify the default permissions on a newly created home directory."
+ msgstr "指定新创建的主目录的默认权限。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:565
++#: src/config/SSSDConfig/sssdoptions.py:568
+ msgid "The skeleton directory."
+ msgstr "skeleton 目录。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:566
++#: src/config/SSSDConfig/sssdoptions.py:569
+ msgid "The mail spool directory."
+ msgstr "邮件 spool 目录。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:567
++#: src/config/SSSDConfig/sssdoptions.py:570
+ msgid "The command that is run after a user is removed."
+ msgstr "用户被删除后运行的命令。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:570
++#: src/config/SSSDConfig/sssdoptions.py:573
+ msgid "The number of preforked proxy children."
+ msgstr "预分支代理子代的数量。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:573
++#: src/config/SSSDConfig/sssdoptions.py:576
+ msgid "The name of the NSS library to use"
+ msgstr "使用的 NSS 库的名称"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:574
++#: src/config/SSSDConfig/sssdoptions.py:577
+ msgid "The name of the NSS library to use for hosts and networks lookups"
+ msgstr "用于查询主机和网络的 NSS 库名称。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:575
++#: src/config/SSSDConfig/sssdoptions.py:578
+ msgid "Whether to look up canonical group name from cache if possible"
+ msgstr "如果可能，是否从缓存中查找规范的组名"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:578
++#: src/config/SSSDConfig/sssdoptions.py:581
+ msgid "PAM stack to use"
+ msgstr "使用的 PAM 堆栈"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:581
++#: src/config/SSSDConfig/sssdoptions.py:584
+ msgid "Path of passwd file sources."
+ msgstr "passwd 文件源的路径。"
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:582
++#: src/config/SSSDConfig/sssdoptions.py:585
+ msgid "Path of group file sources."
+ msgstr "group 文件源的路径。"
+ 
+-#: src/monitor/monitor.c:2376
++#: src/monitor/monitor.c:2381
+ msgid "Become a daemon (default)"
+ msgstr "成为守护进程（默认）"
+ 
+-#: src/monitor/monitor.c:2378
++#: src/monitor/monitor.c:2383
+ msgid "Run interactive (not a daemon)"
+ msgstr "交互式运行（不是守护程序）"
+ 
+-#: src/monitor/monitor.c:2381
++#: src/monitor/monitor.c:2386
+ msgid "Disable netlink interface"
+ msgstr "禁用 netlink 接口"
+ 
+-#: src/monitor/monitor.c:2383 src/tools/sssctl/sssctl_config.c:77
++#: src/monitor/monitor.c:2388 src/tools/sssctl/sssctl_config.c:77
+ #: src/tools/sssctl/sssctl_logs.c:310
+ msgid "Specify a non-default config file"
+ msgstr "指定一个非默认的配置文件"
+ 
+-#: src/monitor/monitor.c:2385
++#: src/monitor/monitor.c:2390
+ msgid "Refresh the configuration database, then exit"
+ msgstr "刷新配置数据库，然后退出"
+ 
+-#: src/monitor/monitor.c:2388
++#: src/monitor/monitor.c:2393
+ msgid "Similar to --genconf, but only refreshes the given section"
+ msgstr "类似于 --genconf，但只刷新指定的部分。"
+ 
+-#: src/monitor/monitor.c:2391
++#: src/monitor/monitor.c:2396
+ msgid "Print version number and exit"
+ msgstr "显示版本号并退出"
+ 
+-#: src/monitor/monitor.c:2537
++#: src/monitor/monitor.c:2542
+ msgid "SSSD is already running\n"
+ msgstr "SSSD 已运行\n"
+ 
+-#: src/providers/krb5/krb5_child.c:3260 src/providers/ldap/ldap_child.c:638
++#: src/providers/krb5/krb5_child.c:3274 src/providers/ldap/ldap_child.c:638
+ msgid "Debug level"
+ msgstr "调试级别"
+ 
+-#: src/providers/krb5/krb5_child.c:3262 src/providers/ldap/ldap_child.c:640
++#: src/providers/krb5/krb5_child.c:3276 src/providers/ldap/ldap_child.c:640
+ msgid "Add debug timestamps"
+ msgstr "添加调试时间戳"
+ 
+-#: src/providers/krb5/krb5_child.c:3264 src/providers/ldap/ldap_child.c:642
++#: src/providers/krb5/krb5_child.c:3278 src/providers/ldap/ldap_child.c:642
+ msgid "Show timestamps with microseconds"
+ msgstr "显示时间戳（以微秒为单位）"
+ 
+-#: src/providers/krb5/krb5_child.c:3266 src/providers/ldap/ldap_child.c:644
++#: src/providers/krb5/krb5_child.c:3280 src/providers/ldap/ldap_child.c:644
+ msgid "An open file descriptor for the debug logs"
+ msgstr "调试日志的打开文件描述符"
+ 
+-#: src/providers/krb5/krb5_child.c:3269 src/providers/ldap/ldap_child.c:646
++#: src/providers/krb5/krb5_child.c:3283 src/providers/ldap/ldap_child.c:646
+ msgid "Send the debug output to stderr directly."
+ msgstr "将调试直接输出到 stderr。"
+ 
+-#: src/providers/krb5/krb5_child.c:3272
++#: src/providers/krb5/krb5_child.c:3286
+ msgid "The user to create FAST ccache as"
+ msgstr "用户创建 FAST 缓存为"
+ 
+-#: src/providers/krb5/krb5_child.c:3274
++#: src/providers/krb5/krb5_child.c:3288
+ msgid "The group to create FAST ccache as"
+ msgstr "组创建 FAST 缓存为"
+ 
+-#: src/providers/krb5/krb5_child.c:3276
++#: src/providers/krb5/krb5_child.c:3290
+ msgid "Kerberos realm to use"
+ msgstr "使用的 kerberos realm"
+ 
+-#: src/providers/krb5/krb5_child.c:3278
++#: src/providers/krb5/krb5_child.c:3292
+ msgid "Requested lifetime of the ticket"
+ msgstr "要求的票证寿命"
+ 
+-#: src/providers/krb5/krb5_child.c:3280
++#: src/providers/krb5/krb5_child.c:3294
+ msgid "Requested renewable lifetime of the ticket"
+ msgstr "要求的可续约票证寿命"
+ 
+-#: src/providers/krb5/krb5_child.c:3282
++#: src/providers/krb5/krb5_child.c:3296
+ msgid "FAST options ('never', 'try', 'demand')"
+ msgstr "FAST 选项（'never'、'try'、'demand'）"
+ 
+-#: src/providers/krb5/krb5_child.c:3285
++#: src/providers/krb5/krb5_child.c:3299
+ msgid "Specifies the server principal to use for FAST"
+ msgstr "指定用于 FAST 的服务器主体"
+ 
+-#: src/providers/krb5/krb5_child.c:3287
++#: src/providers/krb5/krb5_child.c:3301
+ msgid "Requests canonicalization of the principal name"
+ msgstr "要求规范化主体名称"
+ 
+-#: src/providers/krb5/krb5_child.c:3289
++#: src/providers/krb5/krb5_child.c:3303
+ msgid "Use custom version of krb5_get_init_creds_password"
+ msgstr "使用自定义版本的 krb5_get_init_creds_password"
+ 
+-#: src/providers/data_provider_be.c:699
++#: src/providers/data_provider_be.c:711
+ msgid "Domain of the information provider (mandatory)"
+ msgstr "信息提供者的域（强制）"
+ 
+-#: src/sss_client/common.c:1079
++#: src/sss_client/common.c:1088
+ msgid "Privileged socket has wrong ownership or permissions."
+ msgstr "特权套接字有错误的所有权或权限。"
+ 
+-#: src/sss_client/common.c:1082
++#: src/sss_client/common.c:1091
+ msgid "Public socket has wrong ownership or permissions."
+ msgstr "公共套接字有错误的所有权或权限。"
+ 
+-#: src/sss_client/common.c:1085
++#: src/sss_client/common.c:1094
+ msgid "Unexpected format of the server credential message."
+ msgstr "服务器凭证消息的格式异常。"
+ 
+-#: src/sss_client/common.c:1088
++#: src/sss_client/common.c:1097
+ msgid "SSSD is not run by root."
+ msgstr "SSSD 没有由 root 运行。"
+ 
+-#: src/sss_client/common.c:1091
++#: src/sss_client/common.c:1100
+ msgid "SSSD socket does not exist."
+ msgstr "SSSD socket 不存在。"
+ 
+-#: src/sss_client/common.c:1094
++#: src/sss_client/common.c:1103
+ msgid "Cannot get stat of SSSD socket."
+ msgstr "无法获取 SSSD socket 的统计数据。"
+ 
+-#: src/sss_client/common.c:1099
++#: src/sss_client/common.c:1108
+ msgid "An error occurred, but no description can be found."
+ msgstr "发生错误，但找不到描述信息。"
+ 
+-#: src/sss_client/common.c:1105
++#: src/sss_client/common.c:1114
+ msgid "Unexpected error while looking for an error description"
+ msgstr "查找错误说明时出现意外错误"
+ 
+@@ -2020,88 +2032,88 @@ msgstr "查找错误说明时出现意外错误"
+ msgid "Permission denied. "
+ msgstr "权限被拒绝。"
+ 
+-#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:781
+-#: src/sss_client/pam_sss.c:792
++#: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:785
++#: src/sss_client/pam_sss.c:796
+ msgid "Server message: "
+ msgstr "服务器消息： "
+ 
+-#: src/sss_client/pam_sss.c:299
++#: src/sss_client/pam_sss.c:303
+ msgid "Passwords do not match"
+ msgstr "密码不匹配"
+ 
+-#: src/sss_client/pam_sss.c:487
++#: src/sss_client/pam_sss.c:491
+ msgid "Password reset by root is not supported."
+ msgstr "不支持通过 root 重置密码。"
+ 
+-#: src/sss_client/pam_sss.c:528
++#: src/sss_client/pam_sss.c:532
+ msgid "Authenticated with cached credentials"
+ msgstr "通过缓存的凭据进行身份验证"
+ 
+-#: src/sss_client/pam_sss.c:529
++#: src/sss_client/pam_sss.c:533
+ msgid ", your cached password will expire at: "
+ msgstr "，您缓存的密码将过期于： "
+ 
+-#: src/sss_client/pam_sss.c:559
++#: src/sss_client/pam_sss.c:563
+ #, c-format
+ msgid "Your password has expired. You have %1$d grace login(s) remaining."
+ msgstr "您的密码已过期。您有 %1$d 剩余宽限登陆。"
+ 
+-#: src/sss_client/pam_sss.c:605
++#: src/sss_client/pam_sss.c:609
+ #, c-format
+ msgid "Your password will expire in %1$d %2$s."
+ msgstr "您的密码将于 %1$d %2$s 过期。"
+ 
+-#: src/sss_client/pam_sss.c:654
++#: src/sss_client/pam_sss.c:658
+ msgid "Authentication is denied until: "
+ msgstr "身份验证被拒绝，直到： "
+ 
+-#: src/sss_client/pam_sss.c:675
++#: src/sss_client/pam_sss.c:679
+ msgid "System is offline, password change not possible"
+ msgstr "系统离线，无法更改密码"
+ 
+-#: src/sss_client/pam_sss.c:690
++#: src/sss_client/pam_sss.c:694
+ msgid ""
+ "After changing the OTP password, you need to log out and back in order to "
+ "acquire a ticket"
+ msgstr "更改 OTP 密码后，您需要注销并重新登录以获得票证"
+ 
+-#: src/sss_client/pam_sss.c:778 src/sss_client/pam_sss.c:791
++#: src/sss_client/pam_sss.c:782 src/sss_client/pam_sss.c:795
+ msgid "Password change failed. "
+ msgstr "更改密码失败。"
+ 
+-#: src/sss_client/pam_sss.c:2015
++#: src/sss_client/pam_sss.c:2044
+ msgid "New Password: "
+ msgstr "新密码："
+ 
+-#: src/sss_client/pam_sss.c:2016
++#: src/sss_client/pam_sss.c:2045
+ msgid "Reenter new Password: "
+ msgstr "重新输入新密码："
+ 
+-#: src/sss_client/pam_sss.c:2178 src/sss_client/pam_sss.c:2181
++#: src/sss_client/pam_sss.c:2207 src/sss_client/pam_sss.c:2210
+ msgid "First Factor: "
+ msgstr "第一因素： "
+ 
+-#: src/sss_client/pam_sss.c:2179 src/sss_client/pam_sss.c:2353
++#: src/sss_client/pam_sss.c:2208 src/sss_client/pam_sss.c:2382
+ msgid "Second Factor (optional): "
+ msgstr "第二因素（可选）： "
+ 
+-#: src/sss_client/pam_sss.c:2182 src/sss_client/pam_sss.c:2356
++#: src/sss_client/pam_sss.c:2211 src/sss_client/pam_sss.c:2385
+ msgid "Second Factor: "
+ msgstr "第二因素： "
+ 
+-#: src/sss_client/pam_sss.c:2200
++#: src/sss_client/pam_sss.c:2229
+ msgid "Password: "
+ msgstr "密码："
+ 
+-#: src/sss_client/pam_sss.c:2352 src/sss_client/pam_sss.c:2355
++#: src/sss_client/pam_sss.c:2381 src/sss_client/pam_sss.c:2384
+ msgid "First Factor (Current Password): "
+ msgstr "第一因素（当前密码）： "
+ 
+-#: src/sss_client/pam_sss.c:2359
++#: src/sss_client/pam_sss.c:2388
+ msgid "Current Password: "
+ msgstr "当前密码："
+ 
+-#: src/sss_client/pam_sss.c:2716
++#: src/sss_client/pam_sss.c:2745
+ msgid "Password expired. Change your password now."
+ msgstr "密码已过期。立即更改密码。"
+ 
+@@ -3256,18 +3268,18 @@ msgstr "PAM 环境：\n"
+ msgid " - no env -\n"
+ msgstr " -没有环境-\n"
+ 
+-#: src/util/util.h:82
++#: src/util/util.h:86
+ msgid "The user ID to run the server as"
+ msgstr "运行服务器的用户 ID"
+ 
+-#: src/util/util.h:84
++#: src/util/util.h:88
+ msgid "The group ID to run the server as"
+ msgstr "运行服务器的组 ID"
+ 
+-#: src/util/util.h:92
++#: src/util/util.h:96
+ msgid "Informs that the responder has been socket-activated"
+ msgstr "通知响应者已被套接字激活"
+ 
+-#: src/util/util.h:94
++#: src/util/util.h:98
+ msgid "Informs that the responder has been dbus-activated"
+ msgstr "通知响应者已被 dbus 激活"
+-- 
+2.21.3
+
diff --git a/SOURCES/0050-pot-update-pot-files.patch b/SOURCES/0050-pot-update-pot-files.patch
new file mode 100644
index 0000000..5c18741
--- /dev/null
+++ b/SOURCES/0050-pot-update-pot-files.patch
@@ -0,0 +1,1940 @@
+From 709bfc4a0b1a3038f7f2f2cf08b800f9149f7561 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Pavel=20B=C5=99ezina?= <pbrezina@redhat.com>
+Date: Fri, 19 Feb 2021 16:57:31 +0100
+Subject: [PATCH] pot: update pot files
+
+---
+ po/sssd.pot | 744 ++++++++++++++++++++++++++--------------------------
+ 1 file changed, 375 insertions(+), 369 deletions(-)
+
+diff --git a/po/sssd.pot b/po/sssd.pot
+index 19f6994ff..075f908a8 100644
+--- a/po/sssd.pot
++++ b/po/sssd.pot
+@@ -8,7 +8,7 @@ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+-"POT-Creation-Date: 2021-02-05 11:58+0100\n"
++"POT-Creation-Date: 2021-02-19 16:47+0100\n"
+ "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+ "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+ "Language-Team: LANGUAGE <LL@li.org>\n"
+@@ -153,7 +153,7 @@ msgid "Entry cache background update timeout length (seconds)"
+ msgstr ""
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+-#: src/config/SSSDConfig/sssdoptions.py:117
++#: src/config/SSSDConfig/sssdoptions.py:119
+ msgid "Negative cache timeout length (seconds)"
+ msgstr ""
+ 
+@@ -337,1532 +337,1538 @@ msgstr ""
+ msgid "Whether to match authenticated UPN with target user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:111
++#: src/config/SSSDConfig/sssdoptions.py:109
++msgid ""
++"List of pairs <PAM service>:<authentication indicator> that must be enforced "
++"for PAM access with GSSAPI authentication"
++msgstr ""
++
++#: src/config/SSSDConfig/sssdoptions.py:113
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:112
++#: src/config/SSSDConfig/sssdoptions.py:114
+ msgid "If true, SSSD will switch back to lower-wins ordering logic"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:113
++#: src/config/SSSDConfig/sssdoptions.py:115
+ msgid ""
+ "Maximum number of rules that can be refreshed at once. If this is exceeded, "
+ "full refresh is performed."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:120
++#: src/config/SSSDConfig/sssdoptions.py:122
+ msgid "Whether to hash host names and addresses in the known_hosts file"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:121
++#: src/config/SSSDConfig/sssdoptions.py:123
+ msgid ""
+ "How many seconds to keep a host in the known_hosts file after its host keys "
+ "were requested"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:123
++#: src/config/SSSDConfig/sssdoptions.py:125
+ msgid "Path to storage of trusted CA certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:124
++#: src/config/SSSDConfig/sssdoptions.py:126
+ msgid "Allow to generate ssh-keys from certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:125
++#: src/config/SSSDConfig/sssdoptions.py:127
+ msgid ""
+ "Use the following matching rules to filter the certificates for ssh-key "
+ "generation"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:129
++#: src/config/SSSDConfig/sssdoptions.py:131
+ msgid "List of UIDs or user names allowed to access the PAC responder"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:130
++#: src/config/SSSDConfig/sssdoptions.py:132
+ msgid "How long the PAC data is considered valid"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:133
++#: src/config/SSSDConfig/sssdoptions.py:135
+ msgid "List of user attributes the InfoPipe is allowed to publish"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:136
++#: src/config/SSSDConfig/sssdoptions.py:138
+ msgid "The provider where the secrets will be stored in"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:137
++#: src/config/SSSDConfig/sssdoptions.py:139
+ msgid "The maximum allowed number of nested containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:138
++#: src/config/SSSDConfig/sssdoptions.py:140
+ msgid "The maximum number of secrets that can be stored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:139
++#: src/config/SSSDConfig/sssdoptions.py:141
+ msgid "The maximum number of secrets that can be stored per UID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:140
++#: src/config/SSSDConfig/sssdoptions.py:142
+ msgid "The maximum payload size of a secret in kilobytes"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:142
++#: src/config/SSSDConfig/sssdoptions.py:144
+ msgid "The URL Custodia server is listening on"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:143
++#: src/config/SSSDConfig/sssdoptions.py:145
+ msgid "The method to use when authenticating to a Custodia server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:144
++#: src/config/SSSDConfig/sssdoptions.py:146
+ msgid ""
+ "The name of the headers that will be added into a HTTP request with the "
+ "value defined in auth_header_value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:146
++#: src/config/SSSDConfig/sssdoptions.py:148
+ msgid "The value sssd-secrets would use for auth_header_name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:147
++#: src/config/SSSDConfig/sssdoptions.py:149
+ msgid ""
+ "The list of the headers to forward to the Custodia server together with the "
+ "request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:148
++#: src/config/SSSDConfig/sssdoptions.py:150
+ msgid ""
+ "The username to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:149
++#: src/config/SSSDConfig/sssdoptions.py:151
+ msgid ""
+ "The password to use when authenticating to a Custodia server using basic_auth"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:150
++#: src/config/SSSDConfig/sssdoptions.py:152
+ msgid "If true peer's certificate is verified if proxy_url uses https protocol"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:151
++#: src/config/SSSDConfig/sssdoptions.py:153
+ msgid ""
+ "If false peer's certificate may contain different hostname than proxy_url "
+ "when https protocol is used"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:153
++#: src/config/SSSDConfig/sssdoptions.py:155
+ msgid "Path to directory where certificate authority certificates are stored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:154
++#: src/config/SSSDConfig/sssdoptions.py:156
+ msgid "Path to file containing server's CA certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:155
++#: src/config/SSSDConfig/sssdoptions.py:157
+ msgid "Path to file containing client's certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:156
++#: src/config/SSSDConfig/sssdoptions.py:158
+ msgid "Path to file containing client's private key"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:159
++#: src/config/SSSDConfig/sssdoptions.py:161
+ msgid ""
+ "One of the following strings specifying the scope of session recording: none "
+ "- No users are recorded. some - Users/groups specified by users and groups "
+ "options are recorded. all - All users are recorded."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:162
++#: src/config/SSSDConfig/sssdoptions.py:164
+ msgid ""
+ "A comma-separated list of users which should have session recording enabled. "
+ "Matches user names as returned by NSS. I.e. after the possible space "
+ "replacement, case changes, etc."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:164
++#: src/config/SSSDConfig/sssdoptions.py:166
+ msgid ""
+ "A comma-separated list of groups, members of which should have session "
+ "recording enabled. Matches group names as returned by NSS. I.e. after the "
+ "possible space replacement, case changes, etc."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:167
++#: src/config/SSSDConfig/sssdoptions.py:169
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:168
++#: src/config/SSSDConfig/sssdoptions.py:170
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:172
++#: src/config/SSSDConfig/sssdoptions.py:174
+ msgid "Identity provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:173
++#: src/config/SSSDConfig/sssdoptions.py:175
+ msgid "Authentication provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:174
++#: src/config/SSSDConfig/sssdoptions.py:176
+ msgid "Access control provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:175
++#: src/config/SSSDConfig/sssdoptions.py:177
+ msgid "Password change provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:176
++#: src/config/SSSDConfig/sssdoptions.py:178
+ msgid "SUDO provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:177
++#: src/config/SSSDConfig/sssdoptions.py:179
+ msgid "Autofs provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:178
++#: src/config/SSSDConfig/sssdoptions.py:180
+ msgid "Host identity provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:179
++#: src/config/SSSDConfig/sssdoptions.py:181
+ msgid "SELinux provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:180
++#: src/config/SSSDConfig/sssdoptions.py:182
+ msgid "Session management provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:181
++#: src/config/SSSDConfig/sssdoptions.py:183
+ msgid "Resolver provider"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:184
++#: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:185
++#: src/config/SSSDConfig/sssdoptions.py:187
+ msgid "Enable or disable the domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:186
++#: src/config/SSSDConfig/sssdoptions.py:188
+ msgid "Minimum user ID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:187
++#: src/config/SSSDConfig/sssdoptions.py:189
+ msgid "Maximum user ID"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:188
++#: src/config/SSSDConfig/sssdoptions.py:190
+ msgid "Enable enumerating all users/groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:189
++#: src/config/SSSDConfig/sssdoptions.py:191
+ msgid "Cache credentials for offline login"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:190
++#: src/config/SSSDConfig/sssdoptions.py:192
+ msgid "Display users/groups in fully-qualified form"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:191
++#: src/config/SSSDConfig/sssdoptions.py:193
+ msgid "Don't include group members in group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:192
+-#: src/config/SSSDConfig/sssdoptions.py:202
+-#: src/config/SSSDConfig/sssdoptions.py:203
++#: src/config/SSSDConfig/sssdoptions.py:194
+ #: src/config/SSSDConfig/sssdoptions.py:204
+ #: src/config/SSSDConfig/sssdoptions.py:205
+ #: src/config/SSSDConfig/sssdoptions.py:206
+ #: src/config/SSSDConfig/sssdoptions.py:207
+ #: src/config/SSSDConfig/sssdoptions.py:208
++#: src/config/SSSDConfig/sssdoptions.py:209
++#: src/config/SSSDConfig/sssdoptions.py:210
+ msgid "Entry cache timeout length (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:193
++#: src/config/SSSDConfig/sssdoptions.py:195
+ msgid ""
+ "Restrict or prefer a specific address family when performing DNS lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:194
++#: src/config/SSSDConfig/sssdoptions.py:196
+ msgid "How long to keep cached entries after last successful login (days)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:195
++#: src/config/SSSDConfig/sssdoptions.py:197
+ msgid ""
+ "How long should SSSD talk to single DNS server before trying next server "
+ "(miliseconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:197
++#: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "How long should keep trying to resolve single DNS query (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:198
++#: src/config/SSSDConfig/sssdoptions.py:200
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:199
++#: src/config/SSSDConfig/sssdoptions.py:201
+ msgid "The domain part of service discovery DNS query"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:200
++#: src/config/SSSDConfig/sssdoptions.py:202
+ msgid "Override GID value from the identity provider with this value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:201
++#: src/config/SSSDConfig/sssdoptions.py:203
+ msgid "Treat usernames as case sensitive"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:209
++#: src/config/SSSDConfig/sssdoptions.py:211
+ msgid "How often should expired entries be refreshed in background"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:210
++#: src/config/SSSDConfig/sssdoptions.py:212
+ msgid "Whether to automatically update the client's DNS entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:211
+-#: src/config/SSSDConfig/sssdoptions.py:241
++#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:243
+ msgid "The TTL to apply to the client's DNS entry after updating it"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:212
+-#: src/config/SSSDConfig/sssdoptions.py:242
++#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:244
+ msgid "The interface whose IP should be used for dynamic DNS updates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:213
++#: src/config/SSSDConfig/sssdoptions.py:215
+ msgid "How often to periodically update the client's DNS entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:214
++#: src/config/SSSDConfig/sssdoptions.py:216
+ msgid "Whether the provider should explicitly update the PTR record as well"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:215
++#: src/config/SSSDConfig/sssdoptions.py:217
+ msgid "Whether the nsupdate utility should default to using TCP"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:216
++#: src/config/SSSDConfig/sssdoptions.py:218
+ msgid "What kind of authentication should be used to perform the DNS update"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:217
++#: src/config/SSSDConfig/sssdoptions.py:219
+ msgid "Override the DNS server used to perform the DNS update"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:218
++#: src/config/SSSDConfig/sssdoptions.py:220
+ msgid "Control enumeration of trusted domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:219
++#: src/config/SSSDConfig/sssdoptions.py:221
+ msgid "How often should subdomains list be refreshed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:220
++#: src/config/SSSDConfig/sssdoptions.py:222
+ msgid "List of options that should be inherited into a subdomain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:221
++#: src/config/SSSDConfig/sssdoptions.py:223
+ msgid "Default subdomain homedir value"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:222
++#: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "How long can cached credentials be used for cached authentication"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:223
++#: src/config/SSSDConfig/sssdoptions.py:225
+ msgid "Whether to automatically create private groups for users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:224
++#: src/config/SSSDConfig/sssdoptions.py:226
+ msgid "Display a warning N days before the password expires."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:225
++#: src/config/SSSDConfig/sssdoptions.py:227
+ msgid ""
+ "Various tags stored by the realmd configuration service for this domain."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:226
++#: src/config/SSSDConfig/sssdoptions.py:228
+ msgid ""
+ "The provider which should handle fetching of subdomains. This value should "
+ "be always the same as id_provider."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:228
++#: src/config/SSSDConfig/sssdoptions.py:230
+ msgid ""
+ "How many seconds to keep a host ssh key after refresh. IE how long to cache "
+ "the host key for."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:230
++#: src/config/SSSDConfig/sssdoptions.py:232
+ msgid ""
+ "If 2-Factor-Authentication (2FA) is used and credentials should be saved "
+ "this value determines the minimal length the first authentication factor "
+ "(long term password) must have to be saved as SHA512 hash into the cache."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:236
++#: src/config/SSSDConfig/sssdoptions.py:238
+ msgid "IPA domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:237
++#: src/config/SSSDConfig/sssdoptions.py:239
+ msgid "IPA server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:238
++#: src/config/SSSDConfig/sssdoptions.py:240
+ msgid "Address of backup IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:239
++#: src/config/SSSDConfig/sssdoptions.py:241
+ msgid "IPA client hostname"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:240
++#: src/config/SSSDConfig/sssdoptions.py:242
+ msgid "Whether to automatically update the client's DNS entry in FreeIPA"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:243
++#: src/config/SSSDConfig/sssdoptions.py:245
+ msgid "Search base for HBAC related objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:244
++#: src/config/SSSDConfig/sssdoptions.py:246
+ msgid ""
+ "The amount of time between lookups of the HBAC rules against the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:245
++#: src/config/SSSDConfig/sssdoptions.py:247
+ msgid ""
+ "The amount of time in seconds between lookups of the SELinux maps against "
+ "the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:247
++#: src/config/SSSDConfig/sssdoptions.py:249
+ msgid "If set to false, host argument given by PAM will be ignored"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:248
++#: src/config/SSSDConfig/sssdoptions.py:250
+ msgid "The automounter location this IPA client is using"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:249
++#: src/config/SSSDConfig/sssdoptions.py:251
+ msgid "Search base for object containing info about IPA domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:250
++#: src/config/SSSDConfig/sssdoptions.py:252
+ msgid "Search base for objects containing info about ID ranges"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:251
+-#: src/config/SSSDConfig/sssdoptions.py:305
++#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:307
+ msgid "Enable DNS sites - location based service discovery"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:252
++#: src/config/SSSDConfig/sssdoptions.py:254
+ msgid "Search base for view containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:253
++#: src/config/SSSDConfig/sssdoptions.py:255
+ msgid "Objectclass for view containers"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:254
++#: src/config/SSSDConfig/sssdoptions.py:256
+ msgid "Attribute with the name of the view"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:255
++#: src/config/SSSDConfig/sssdoptions.py:257
+ msgid "Objectclass for override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:256
++#: src/config/SSSDConfig/sssdoptions.py:258
+ msgid "Attribute with the reference to the original object"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:257
++#: src/config/SSSDConfig/sssdoptions.py:259
+ msgid "Objectclass for user override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:258
++#: src/config/SSSDConfig/sssdoptions.py:260
+ msgid "Objectclass for group override objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:259
++#: src/config/SSSDConfig/sssdoptions.py:261
+ msgid "Search base for Desktop Profile related objects"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:260
++#: src/config/SSSDConfig/sssdoptions.py:262
+ msgid ""
+ "The amount of time in seconds between lookups of the Desktop Profile rules "
+ "against the IPA server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:262
++#: src/config/SSSDConfig/sssdoptions.py:264
+ msgid ""
+ "The amount of time in minutes between lookups of Desktop Profiles rules "
+ "against the IPA server when the last request did not find any rule"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:265
++#: src/config/SSSDConfig/sssdoptions.py:267
+ msgid "The LDAP attribute that contains FQDN of the host."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:266
+-#: src/config/SSSDConfig/sssdoptions.py:289
++#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:291
+ msgid "The object class of a host entry in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:267
++#: src/config/SSSDConfig/sssdoptions.py:269
+ msgid "Use the given string as search base for host objects."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:268
++#: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the host's SSH public keys."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:269
++#: src/config/SSSDConfig/sssdoptions.py:271
+ msgid "The LDAP attribute that contains NIS domain name of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:270
++#: src/config/SSSDConfig/sssdoptions.py:272
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:271
++#: src/config/SSSDConfig/sssdoptions.py:273
+ msgid ""
+ "The LDAP attribute that lists FQDNs of hosts and host groups that are "
+ "members of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:273
++#: src/config/SSSDConfig/sssdoptions.py:275
+ msgid ""
+ "The LDAP attribute that lists hosts and host groups that are direct members "
+ "of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:275
++#: src/config/SSSDConfig/sssdoptions.py:277
+ msgid "The LDAP attribute that lists netgroup's memberships."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:276
++#: src/config/SSSDConfig/sssdoptions.py:278
+ msgid ""
+ "The LDAP attribute that lists system users and groups that are direct "
+ "members of the netgroup."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:278
++#: src/config/SSSDConfig/sssdoptions.py:280
+ msgid "The LDAP attribute that corresponds to the netgroup name."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:279
++#: src/config/SSSDConfig/sssdoptions.py:281
+ msgid "The object class of a netgroup entry in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:280
++#: src/config/SSSDConfig/sssdoptions.py:282
+ msgid ""
+ "The LDAP attribute that contains the UUID/GUID of an LDAP netgroup object."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:281
++#: src/config/SSSDConfig/sssdoptions.py:283
+ msgid ""
+ "The LDAP attribute that contains whether or not is user map enabled for "
+ "usage."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:283
++#: src/config/SSSDConfig/sssdoptions.py:285
+ msgid "The LDAP attribute that contains host category such as 'all'."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:284
++#: src/config/SSSDConfig/sssdoptions.py:286
+ msgid ""
+ "The LDAP attribute that contains all hosts / hostgroups this rule match "
+ "against."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:286
++#: src/config/SSSDConfig/sssdoptions.py:288
+ msgid ""
+ "The LDAP attribute that contains all users / groups this rule match against."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:288
++#: src/config/SSSDConfig/sssdoptions.py:290
+ msgid "The LDAP attribute that contains the name of SELinux usermap."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:290
++#: src/config/SSSDConfig/sssdoptions.py:292
+ msgid ""
+ "The LDAP attribute that contains DN of HBAC rule which can be used for "
+ "matching instead of memberUser and memberHost."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:292
++#: src/config/SSSDConfig/sssdoptions.py:294
+ msgid "The LDAP attribute that contains SELinux user string itself."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:293
++#: src/config/SSSDConfig/sssdoptions.py:295
+ msgid "The LDAP attribute that contains user category such as 'all'."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:294
++#: src/config/SSSDConfig/sssdoptions.py:296
+ msgid "The LDAP attribute that contains unique ID of the user map."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:295
++#: src/config/SSSDConfig/sssdoptions.py:297
+ msgid ""
+ "The option denotes that the SSSD is running on IPA server and should perform "
+ "lookups of users and groups from trusted domains differently."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:297
++#: src/config/SSSDConfig/sssdoptions.py:299
+ msgid "Use the given string as search base for trusted domains."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:300
++#: src/config/SSSDConfig/sssdoptions.py:302
+ msgid "Active Directory domain"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:301
++#: src/config/SSSDConfig/sssdoptions.py:303
+ msgid "Enabled Active Directory domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:302
++#: src/config/SSSDConfig/sssdoptions.py:304
+ msgid "Active Directory server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:303
++#: src/config/SSSDConfig/sssdoptions.py:305
+ msgid "Active Directory backup server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:304
++#: src/config/SSSDConfig/sssdoptions.py:306
+ msgid "Active Directory client hostname"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:306
+-#: src/config/SSSDConfig/sssdoptions.py:500
++#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:502
+ msgid "LDAP filter to determine access privileges"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:307
++#: src/config/SSSDConfig/sssdoptions.py:309
+ msgid "Whether to use the Global Catalog for lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:308
++#: src/config/SSSDConfig/sssdoptions.py:310
+ msgid "Operation mode for GPO-based access control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:309
++#: src/config/SSSDConfig/sssdoptions.py:311
+ msgid ""
+ "The amount of time between lookups of the GPO policy files against the AD "
+ "server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:310
++#: src/config/SSSDConfig/sssdoptions.py:312
+ msgid ""
+ "PAM service names that map to the GPO (Deny)InteractiveLogonRight policy "
+ "settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:312
++#: src/config/SSSDConfig/sssdoptions.py:314
+ msgid ""
+ "PAM service names that map to the GPO (Deny)RemoteInteractiveLogonRight "
+ "policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:314
++#: src/config/SSSDConfig/sssdoptions.py:316
+ msgid ""
+ "PAM service names that map to the GPO (Deny)NetworkLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:315
++#: src/config/SSSDConfig/sssdoptions.py:317
+ msgid ""
+ "PAM service names that map to the GPO (Deny)BatchLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:316
++#: src/config/SSSDConfig/sssdoptions.py:318
+ msgid ""
+ "PAM service names that map to the GPO (Deny)ServiceLogonRight policy settings"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:317
++#: src/config/SSSDConfig/sssdoptions.py:319
+ msgid "PAM service names for which GPO-based access is always granted"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:318
++#: src/config/SSSDConfig/sssdoptions.py:320
+ msgid "PAM service names for which GPO-based access is always denied"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:319
++#: src/config/SSSDConfig/sssdoptions.py:321
+ msgid ""
+ "Default logon right (or permit/deny) to use for unmapped PAM service names"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:320
++#: src/config/SSSDConfig/sssdoptions.py:322
+ msgid "a particular site to be used by the client"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:321
++#: src/config/SSSDConfig/sssdoptions.py:323
+ msgid ""
+ "Maximum age in days before the machine account password should be renewed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:323
++#: src/config/SSSDConfig/sssdoptions.py:325
+ msgid "Option for tuning the machine account renewal task"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:324
++#: src/config/SSSDConfig/sssdoptions.py:326
+ msgid "Whether to update the machine account password in the Samba database"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:326
++#: src/config/SSSDConfig/sssdoptions.py:328
+ msgid "Use LDAPS port for LDAP and Global Catalog requests"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:327
++#: src/config/SSSDConfig/sssdoptions.py:329
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:330
+-#: src/config/SSSDConfig/sssdoptions.py:331
++#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:333
+ msgid "Kerberos server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:332
++#: src/config/SSSDConfig/sssdoptions.py:334
+ msgid "Kerberos backup server address"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:333
++#: src/config/SSSDConfig/sssdoptions.py:335
+ msgid "Kerberos realm"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:334
++#: src/config/SSSDConfig/sssdoptions.py:336
+ msgid "Authentication timeout"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:335
++#: src/config/SSSDConfig/sssdoptions.py:337
+ msgid "Whether to create kdcinfo files"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:336
++#: src/config/SSSDConfig/sssdoptions.py:338
+ msgid "Where to drop krb5 config snippets"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:339
++#: src/config/SSSDConfig/sssdoptions.py:341
+ msgid "Directory to store credential caches"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:340
++#: src/config/SSSDConfig/sssdoptions.py:342
+ msgid "Location of the user's credential cache"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:341
++#: src/config/SSSDConfig/sssdoptions.py:343
+ msgid "Location of the keytab to validate credentials"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:342
++#: src/config/SSSDConfig/sssdoptions.py:344
+ msgid "Enable credential validation"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:343
++#: src/config/SSSDConfig/sssdoptions.py:345
+ msgid "Store password if offline for later online authentication"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:344
++#: src/config/SSSDConfig/sssdoptions.py:346
+ msgid "Renewable lifetime of the TGT"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:345
++#: src/config/SSSDConfig/sssdoptions.py:347
+ msgid "Lifetime of the TGT"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:346
++#: src/config/SSSDConfig/sssdoptions.py:348
+ msgid "Time between two checks for renewal"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:347
++#: src/config/SSSDConfig/sssdoptions.py:349
+ msgid "Enables FAST"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:348
++#: src/config/SSSDConfig/sssdoptions.py:350
+ msgid "Selects the principal to use for FAST"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:349
++#: src/config/SSSDConfig/sssdoptions.py:351
+ msgid "Enables principal canonicalization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:350
++#: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "Enables enterprise principals"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:351
++#: src/config/SSSDConfig/sssdoptions.py:353
+ msgid "Enables using of subdomains realms for authentication"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:352
++#: src/config/SSSDConfig/sssdoptions.py:354
+ msgid "A mapping from user names to Kerberos principal names"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:355
+-#: src/config/SSSDConfig/sssdoptions.py:356
++#: src/config/SSSDConfig/sssdoptions.py:357
++#: src/config/SSSDConfig/sssdoptions.py:358
+ msgid "Server where the change password service is running if not on the KDC"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:359
++#: src/config/SSSDConfig/sssdoptions.py:361
+ msgid "ldap_uri, The URI of the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:360
++#: src/config/SSSDConfig/sssdoptions.py:362
+ msgid "ldap_backup_uri, The URI of the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:361
++#: src/config/SSSDConfig/sssdoptions.py:363
+ msgid "The default base DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:362
++#: src/config/SSSDConfig/sssdoptions.py:364
+ msgid "The Schema Type in use on the LDAP server, rfc2307"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:363
++#: src/config/SSSDConfig/sssdoptions.py:365
+ msgid "Mode used to change user password"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:364
++#: src/config/SSSDConfig/sssdoptions.py:366
+ msgid "The default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:365
++#: src/config/SSSDConfig/sssdoptions.py:367
+ msgid "The type of the authentication token of the default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:366
++#: src/config/SSSDConfig/sssdoptions.py:368
+ msgid "The authentication token of the default bind DN"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:367
++#: src/config/SSSDConfig/sssdoptions.py:369
+ msgid "Length of time to attempt connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:368
++#: src/config/SSSDConfig/sssdoptions.py:370
+ msgid "Length of time to attempt synchronous LDAP operations"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:369
++#: src/config/SSSDConfig/sssdoptions.py:371
+ msgid "Length of time between attempts to reconnect while offline"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:370
++#: src/config/SSSDConfig/sssdoptions.py:372
+ msgid "Use only the upper case for realm names"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:371
++#: src/config/SSSDConfig/sssdoptions.py:373
+ msgid "File that contains CA certificates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:372
++#: src/config/SSSDConfig/sssdoptions.py:374
+ msgid "Path to CA certificate directory"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:373
++#: src/config/SSSDConfig/sssdoptions.py:375
+ msgid "File that contains the client certificate"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:374
++#: src/config/SSSDConfig/sssdoptions.py:376
+ msgid "File that contains the client key"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:375
++#: src/config/SSSDConfig/sssdoptions.py:377
+ msgid "List of possible ciphers suites"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:376
++#: src/config/SSSDConfig/sssdoptions.py:378
+ msgid "Require TLS certificate verification"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:377
++#: src/config/SSSDConfig/sssdoptions.py:379
+ msgid "Specify the sasl mechanism to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:378
++#: src/config/SSSDConfig/sssdoptions.py:380
+ msgid "Specify the sasl authorization id to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:379
++#: src/config/SSSDConfig/sssdoptions.py:381
+ msgid "Specify the sasl authorization realm to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:380
++#: src/config/SSSDConfig/sssdoptions.py:382
+ msgid "Specify the minimal SSF for LDAP sasl authorization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:381
++#: src/config/SSSDConfig/sssdoptions.py:383
+ msgid "Specify the maximal SSF for LDAP sasl authorization"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:382
++#: src/config/SSSDConfig/sssdoptions.py:384
+ msgid "Kerberos service keytab"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:383
++#: src/config/SSSDConfig/sssdoptions.py:385
+ msgid "Use Kerberos auth for LDAP connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:384
++#: src/config/SSSDConfig/sssdoptions.py:386
+ msgid "Follow LDAP referrals"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:385
++#: src/config/SSSDConfig/sssdoptions.py:387
+ msgid "Lifetime of TGT for LDAP connection"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:386
++#: src/config/SSSDConfig/sssdoptions.py:388
+ msgid "How to dereference aliases"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:387
++#: src/config/SSSDConfig/sssdoptions.py:389
+ msgid "Service name for DNS service lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:388
++#: src/config/SSSDConfig/sssdoptions.py:390
+ msgid "The number of records to retrieve in a single LDAP query"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:389
++#: src/config/SSSDConfig/sssdoptions.py:391
+ msgid "The number of members that must be missing to trigger a full deref"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:390
++#: src/config/SSSDConfig/sssdoptions.py:392
+ msgid ""
+ "Whether the LDAP library should perform a reverse lookup to canonicalize the "
+ "host name during a SASL bind"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:392
++#: src/config/SSSDConfig/sssdoptions.py:394
+ msgid ""
+ "Allows to retain local users as members of an LDAP group for servers that "
+ "use the RFC2307 schema."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:395
++#: src/config/SSSDConfig/sssdoptions.py:397
+ msgid "entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:396
++#: src/config/SSSDConfig/sssdoptions.py:398
+ msgid "lastUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:398
++#: src/config/SSSDConfig/sssdoptions.py:400
+ msgid "How long to retain a connection to the LDAP server before disconnecting"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:401
++#: src/config/SSSDConfig/sssdoptions.py:403
+ msgid "Disable the LDAP paging control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:402
++#: src/config/SSSDConfig/sssdoptions.py:404
+ msgid "Disable Active Directory range retrieval"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:405
++#: src/config/SSSDConfig/sssdoptions.py:407
+ msgid "Length of time to wait for a search request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:406
++#: src/config/SSSDConfig/sssdoptions.py:408
+ msgid "Length of time to wait for a enumeration request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:407
++#: src/config/SSSDConfig/sssdoptions.py:409
+ msgid "Length of time between enumeration updates"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:408
++#: src/config/SSSDConfig/sssdoptions.py:410
+ msgid "Length of time between cache cleanups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:409
++#: src/config/SSSDConfig/sssdoptions.py:411
+ msgid "Require TLS for ID lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:410
++#: src/config/SSSDConfig/sssdoptions.py:412
+ msgid "Use ID-mapping of objectSID instead of pre-set IDs"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:411
++#: src/config/SSSDConfig/sssdoptions.py:413
+ msgid "Base DN for user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:412
++#: src/config/SSSDConfig/sssdoptions.py:414
+ msgid "Scope of user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:413
++#: src/config/SSSDConfig/sssdoptions.py:415
+ msgid "Filter for user lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:414
++#: src/config/SSSDConfig/sssdoptions.py:416
+ msgid "Objectclass for users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:415
++#: src/config/SSSDConfig/sssdoptions.py:417
+ msgid "Username attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:416
++#: src/config/SSSDConfig/sssdoptions.py:418
+ msgid "UID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:417
++#: src/config/SSSDConfig/sssdoptions.py:419
+ msgid "Primary GID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:418
++#: src/config/SSSDConfig/sssdoptions.py:420
+ msgid "GECOS attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:419
++#: src/config/SSSDConfig/sssdoptions.py:421
+ msgid "Home directory attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:420
++#: src/config/SSSDConfig/sssdoptions.py:422
+ msgid "Shell attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:421
++#: src/config/SSSDConfig/sssdoptions.py:423
+ msgid "UUID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:422
+-#: src/config/SSSDConfig/sssdoptions.py:460
++#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:462
+ msgid "objectSID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:423
++#: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Active Directory primary group attribute for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:424
++#: src/config/SSSDConfig/sssdoptions.py:426
+ msgid "User principal attribute (for Kerberos)"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:425
++#: src/config/SSSDConfig/sssdoptions.py:427
+ msgid "Full Name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:426
++#: src/config/SSSDConfig/sssdoptions.py:428
+ msgid "memberOf attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:427
++#: src/config/SSSDConfig/sssdoptions.py:429
+ msgid "Modification time attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:428
++#: src/config/SSSDConfig/sssdoptions.py:430
+ msgid "shadowLastChange attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:429
++#: src/config/SSSDConfig/sssdoptions.py:431
+ msgid "shadowMin attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:430
++#: src/config/SSSDConfig/sssdoptions.py:432
+ msgid "shadowMax attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:431
++#: src/config/SSSDConfig/sssdoptions.py:433
+ msgid "shadowWarning attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:432
++#: src/config/SSSDConfig/sssdoptions.py:434
+ msgid "shadowInactive attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:433
++#: src/config/SSSDConfig/sssdoptions.py:435
+ msgid "shadowExpire attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:434
++#: src/config/SSSDConfig/sssdoptions.py:436
+ msgid "shadowFlag attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:435
++#: src/config/SSSDConfig/sssdoptions.py:437
+ msgid "Attribute listing authorized PAM services"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:436
++#: src/config/SSSDConfig/sssdoptions.py:438
+ msgid "Attribute listing authorized server hosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:437
++#: src/config/SSSDConfig/sssdoptions.py:439
+ msgid "Attribute listing authorized server rhosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:438
++#: src/config/SSSDConfig/sssdoptions.py:440
+ msgid "krbLastPwdChange attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:439
++#: src/config/SSSDConfig/sssdoptions.py:441
+ msgid "krbPasswordExpiration attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:440
++#: src/config/SSSDConfig/sssdoptions.py:442
+ msgid "Attribute indicating that server side password policies are active"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:441
++#: src/config/SSSDConfig/sssdoptions.py:443
+ msgid "accountExpires attribute of AD"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:442
++#: src/config/SSSDConfig/sssdoptions.py:444
+ msgid "userAccountControl attribute of AD"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:443
++#: src/config/SSSDConfig/sssdoptions.py:445
+ msgid "nsAccountLock attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:444
++#: src/config/SSSDConfig/sssdoptions.py:446
+ msgid "loginDisabled attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:445
++#: src/config/SSSDConfig/sssdoptions.py:447
+ msgid "loginExpirationTime attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:446
++#: src/config/SSSDConfig/sssdoptions.py:448
+ msgid "loginAllowedTimeMap attribute of NDS"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:447
++#: src/config/SSSDConfig/sssdoptions.py:449
+ msgid "SSH public key attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:448
++#: src/config/SSSDConfig/sssdoptions.py:450
+ msgid "attribute listing allowed authentication types for a user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:449
++#: src/config/SSSDConfig/sssdoptions.py:451
+ msgid "attribute containing the X509 certificate of the user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:450
++#: src/config/SSSDConfig/sssdoptions.py:452
+ msgid "attribute containing the email address of the user"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:451
++#: src/config/SSSDConfig/sssdoptions.py:453
+ msgid "A list of extra attributes to download along with the user entry"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:453
++#: src/config/SSSDConfig/sssdoptions.py:455
+ msgid "Base DN for group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:454
++#: src/config/SSSDConfig/sssdoptions.py:456
+ msgid "Objectclass for groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:455
++#: src/config/SSSDConfig/sssdoptions.py:457
+ msgid "Group name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:456
++#: src/config/SSSDConfig/sssdoptions.py:458
+ msgid "Group password"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:457
++#: src/config/SSSDConfig/sssdoptions.py:459
+ msgid "GID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:458
++#: src/config/SSSDConfig/sssdoptions.py:460
+ msgid "Group member attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:459
++#: src/config/SSSDConfig/sssdoptions.py:461
+ msgid "Group UUID attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:461
++#: src/config/SSSDConfig/sssdoptions.py:463
+ msgid "Modification time attribute for groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:462
++#: src/config/SSSDConfig/sssdoptions.py:464
+ msgid "Type of the group and other flags"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:463
++#: src/config/SSSDConfig/sssdoptions.py:465
+ msgid "The LDAP group external member attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:464
++#: src/config/SSSDConfig/sssdoptions.py:466
+ msgid "Maximum nesting level SSSD will follow"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:465
++#: src/config/SSSDConfig/sssdoptions.py:467
+ msgid "Filter for group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:466
++#: src/config/SSSDConfig/sssdoptions.py:468
+ msgid "Scope of group lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:468
++#: src/config/SSSDConfig/sssdoptions.py:470
+ msgid "Base DN for netgroup lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:469
++#: src/config/SSSDConfig/sssdoptions.py:471
+ msgid "Objectclass for netgroups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:470
++#: src/config/SSSDConfig/sssdoptions.py:472
+ msgid "Netgroup name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:471
++#: src/config/SSSDConfig/sssdoptions.py:473
+ msgid "Netgroups members attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:472
++#: src/config/SSSDConfig/sssdoptions.py:474
+ msgid "Netgroup triple attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:473
++#: src/config/SSSDConfig/sssdoptions.py:475
+ msgid "Modification time attribute for netgroups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:475
++#: src/config/SSSDConfig/sssdoptions.py:477
+ msgid "Base DN for service lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:476
++#: src/config/SSSDConfig/sssdoptions.py:478
+ msgid "Objectclass for services"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:477
++#: src/config/SSSDConfig/sssdoptions.py:479
+ msgid "Service name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:478
++#: src/config/SSSDConfig/sssdoptions.py:480
+ msgid "Service port attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:479
++#: src/config/SSSDConfig/sssdoptions.py:481
+ msgid "Service protocol attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:481
++#: src/config/SSSDConfig/sssdoptions.py:483
+ msgid "Lower bound for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:482
++#: src/config/SSSDConfig/sssdoptions.py:484
+ msgid "Upper bound for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:483
++#: src/config/SSSDConfig/sssdoptions.py:485
+ msgid "Number of IDs for each slice when ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:484
++#: src/config/SSSDConfig/sssdoptions.py:486
+ msgid "Use autorid-compatible algorithm for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:485
++#: src/config/SSSDConfig/sssdoptions.py:487
+ msgid "Name of the default domain for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:486
++#: src/config/SSSDConfig/sssdoptions.py:488
+ msgid "SID of the default domain for ID-mapping"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:487
++#: src/config/SSSDConfig/sssdoptions.py:489
+ msgid "Number of secondary slices"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:489
++#: src/config/SSSDConfig/sssdoptions.py:491
+ msgid "Whether to use Token-Groups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:490
++#: src/config/SSSDConfig/sssdoptions.py:492
+ msgid "Set lower boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:491
++#: src/config/SSSDConfig/sssdoptions.py:493
+ msgid "Set upper boundary for allowed IDs from the LDAP server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:492
++#: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "DN for ppolicy queries"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:493
++#: src/config/SSSDConfig/sssdoptions.py:495
+ msgid "How many maximum entries to fetch during a wildcard request"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:494
++#: src/config/SSSDConfig/sssdoptions.py:496
+ msgid "Set libldap debug level"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:497
++#: src/config/SSSDConfig/sssdoptions.py:499
+ msgid "Policy to evaluate the password expiration"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:501
++#: src/config/SSSDConfig/sssdoptions.py:503
+ msgid "Which attributes shall be used to evaluate if an account is expired"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:502
++#: src/config/SSSDConfig/sssdoptions.py:504
+ msgid "Which rules should be used to evaluate access control"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:505
++#: src/config/SSSDConfig/sssdoptions.py:507
+ msgid "URI of an LDAP server where password changes are allowed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:506
++#: src/config/SSSDConfig/sssdoptions.py:508
+ msgid "URI of a backup LDAP server where password changes are allowed"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:507
++#: src/config/SSSDConfig/sssdoptions.py:509
+ msgid "DNS service name for LDAP password change server"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:508
++#: src/config/SSSDConfig/sssdoptions.py:510
+ msgid ""
+ "Whether to update the ldap_user_shadow_last_change attribute after a "
+ "password change"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:512
++#: src/config/SSSDConfig/sssdoptions.py:514
+ msgid "Base DN for sudo rules lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:513
++#: src/config/SSSDConfig/sssdoptions.py:515
+ msgid "Automatic full refresh period"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:514
++#: src/config/SSSDConfig/sssdoptions.py:516
+ msgid "Automatic smart refresh period"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:515
++#: src/config/SSSDConfig/sssdoptions.py:517
+ msgid "Whether to filter rules by hostname, IP addresses and network"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:516
++#: src/config/SSSDConfig/sssdoptions.py:518
+ msgid ""
+ "Hostnames and/or fully qualified domain names of this machine to filter sudo "
+ "rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:517
++#: src/config/SSSDConfig/sssdoptions.py:519
+ msgid "IPv4 or IPv6 addresses or network of this machine to filter sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:518
++#: src/config/SSSDConfig/sssdoptions.py:520
+ msgid "Whether to include rules that contains netgroup in host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:519
++#: src/config/SSSDConfig/sssdoptions.py:521
+ msgid ""
+ "Whether to include rules that contains regular expression in host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:520
++#: src/config/SSSDConfig/sssdoptions.py:522
+ msgid "Object class for sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:521
++#: src/config/SSSDConfig/sssdoptions.py:523
+ msgid "Name of attribute that is used as object class for sudo rules"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:522
++#: src/config/SSSDConfig/sssdoptions.py:524
+ msgid "Sudo rule name"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:523
++#: src/config/SSSDConfig/sssdoptions.py:525
+ msgid "Sudo rule command attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:524
++#: src/config/SSSDConfig/sssdoptions.py:526
+ msgid "Sudo rule host attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:525
++#: src/config/SSSDConfig/sssdoptions.py:527
+ msgid "Sudo rule user attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:526
++#: src/config/SSSDConfig/sssdoptions.py:528
+ msgid "Sudo rule option attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:527
++#: src/config/SSSDConfig/sssdoptions.py:529
+ msgid "Sudo rule runas attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:528
++#: src/config/SSSDConfig/sssdoptions.py:530
+ msgid "Sudo rule runasuser attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:529
++#: src/config/SSSDConfig/sssdoptions.py:531
+ msgid "Sudo rule runasgroup attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:530
++#: src/config/SSSDConfig/sssdoptions.py:532
+ msgid "Sudo rule notbefore attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:531
++#: src/config/SSSDConfig/sssdoptions.py:533
+ msgid "Sudo rule notafter attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:532
++#: src/config/SSSDConfig/sssdoptions.py:534
+ msgid "Sudo rule order attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:535
++#: src/config/SSSDConfig/sssdoptions.py:537
+ msgid "Object class for automounter maps"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:536
++#: src/config/SSSDConfig/sssdoptions.py:538
+ msgid "Automounter map name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:537
++#: src/config/SSSDConfig/sssdoptions.py:539
+ msgid "Object class for automounter map entries"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:538
++#: src/config/SSSDConfig/sssdoptions.py:540
+ msgid "Automounter map entry key attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:539
++#: src/config/SSSDConfig/sssdoptions.py:541
+ msgid "Automounter map entry value attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:540
++#: src/config/SSSDConfig/sssdoptions.py:542
+ msgid "Base DN for automounter map lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:541
++#: src/config/SSSDConfig/sssdoptions.py:543
+ msgid "The name of the automount master map in LDAP."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:544
++#: src/config/SSSDConfig/sssdoptions.py:546
+ msgid "Base DN for IP hosts lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:545
++#: src/config/SSSDConfig/sssdoptions.py:547
+ msgid "Object class for IP hosts"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:546
++#: src/config/SSSDConfig/sssdoptions.py:548
+ msgid "IP host name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:547
++#: src/config/SSSDConfig/sssdoptions.py:549
+ msgid "IP host number (address) attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:548
++#: src/config/SSSDConfig/sssdoptions.py:550
+ msgid "IP host entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:549
++#: src/config/SSSDConfig/sssdoptions.py:551
+ msgid "Base DN for IP networks lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:550
++#: src/config/SSSDConfig/sssdoptions.py:552
+ msgid "Object class for IP networks"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:551
++#: src/config/SSSDConfig/sssdoptions.py:553
+ msgid "IP network name attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:552
++#: src/config/SSSDConfig/sssdoptions.py:554
+ msgid "IP network number (address) attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:553
++#: src/config/SSSDConfig/sssdoptions.py:555
+ msgid "IP network entryUSN attribute"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:556
++#: src/config/SSSDConfig/sssdoptions.py:558
+ msgid "Comma separated list of allowed users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:557
++#: src/config/SSSDConfig/sssdoptions.py:559
+ msgid "Comma separated list of prohibited users"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:558
++#: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:560
++#: src/config/SSSDConfig/sssdoptions.py:562
+ msgid ""
+ "Comma separated list of groups that are explicitly denied access. This "
+ "applies only to groups within this SSSD domain. Local groups are not "
+ "evaluated."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:564
++#: src/config/SSSDConfig/sssdoptions.py:566
+ msgid "Base for home directories"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:565
++#: src/config/SSSDConfig/sssdoptions.py:567
+ msgid "Indicate if a home directory should be created for new users."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:566
++#: src/config/SSSDConfig/sssdoptions.py:568
+ msgid "Indicate if a home directory should be removed for deleted users."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:567
++#: src/config/SSSDConfig/sssdoptions.py:569
+ msgid "Specify the default permissions on a newly created home directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:568
++#: src/config/SSSDConfig/sssdoptions.py:570
+ msgid "The skeleton directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:569
++#: src/config/SSSDConfig/sssdoptions.py:571
+ msgid "The mail spool directory."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:570
++#: src/config/SSSDConfig/sssdoptions.py:572
+ msgid "The command that is run after a user is removed."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:573
++#: src/config/SSSDConfig/sssdoptions.py:575
+ msgid "The number of preforked proxy children."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:576
++#: src/config/SSSDConfig/sssdoptions.py:578
+ msgid "The name of the NSS library to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:577
++#: src/config/SSSDConfig/sssdoptions.py:579
+ msgid "The name of the NSS library to use for hosts and networks lookups"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:578
++#: src/config/SSSDConfig/sssdoptions.py:580
+ msgid "Whether to look up canonical group name from cache if possible"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:581
++#: src/config/SSSDConfig/sssdoptions.py:583
+ msgid "PAM stack to use"
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:584
++#: src/config/SSSDConfig/sssdoptions.py:586
+ msgid "Path of passwd file sources."
+ msgstr ""
+ 
+-#: src/config/SSSDConfig/sssdoptions.py:585
++#: src/config/SSSDConfig/sssdoptions.py:587
+ msgid "Path of group file sources."
+ msgstr ""
+ 
+-- 
+2.21.3
+
diff --git a/SOURCES/0051-po-update-translations.patch b/SOURCES/0051-po-update-translations.patch
new file mode 100644
index 0000000..b9a1f3f
--- /dev/null
+++ b/SOURCES/0051-po-update-translations.patch
@@ -0,0 +1,729 @@
+From 341c5e358180d8297276a38f3cf6eb9dbbbc6c62 Mon Sep 17 00:00:00 2001
+From: Weblate <noreply@weblate.org>
+Date: Thu, 18 Mar 2021 11:39:24 +0100
+Subject: [PATCH] po: update translations
+
+Currently translated at 2.8% (21 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fi/
+
+Translated using Weblate (Finnish)
+
+Currently translated at 2.5% (68 of 2643 strings)
+
+Translation: SSSD/sssd-manpage
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/fi/
+
+Translated using Weblate (Chinese (Simplified) (zh_CN))
+
+Currently translated at 100.0% (726 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/zh_CN/
+
+Translated using Weblate (Japanese)
+
+Currently translated at 100.0% (726 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/ja/
+
+Translated using Weblate (French)
+
+Currently translated at 100.0% (726 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/fr/
+
+Translated using Weblate (Ukrainian)
+
+Currently translated at 100.0% (726 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/uk/
+
+Translated using Weblate (Polish)
+
+Currently translated at 100.0% (726 of 726 strings)
+
+Translation: SSSD/sssd
+Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-master/pl/
+---
+ po/fr.po    |  45 ++++++++++++++-------
+ po/ja.po    | 111 ++++++++++++++++++++++++----------------------------
+ po/zh_CN.po |  38 +++++++++---------
+ 3 files changed, 102 insertions(+), 92 deletions(-)
+
+diff --git a/po/fr.po b/po/fr.po
+index e2e906d35..5edfcfd16 100644
+--- a/po/fr.po
++++ b/po/fr.po
+@@ -11,21 +11,22 @@
+ # Ludek Janda <ljanda@redhat.com>, 2020. #zanata
+ # Pavel Brezina <pbrezina@redhat.com>, 2020. #zanata
+ # Jean-Baptiste Holcroft <jean-baptiste@holcroft.fr>, 2020.
++# Sundeep Anand <suanand@redhat.com>, 2021.
+ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+ "POT-Creation-Date: 2021-02-05 11:58+0100\n"
+-"PO-Revision-Date: 2020-08-04 05:55+0000\n"
+-"Last-Translator: Jean-Baptiste Holcroft <jean-baptiste@holcroft.fr>\n"
++"PO-Revision-Date: 2021-03-18 10:39+0000\n"
++"Last-Translator: Sundeep Anand <suanand@redhat.com>\n"
+ "Language-Team: French <https://translate.fedoraproject.org/projects/sssd/"
+-"sssd/fr/>\n"
++"sssd-master/fr/>\n"
+ "Language: fr\n"
+ "MIME-Version: 1.0\n"
+ "Content-Type: text/plain; charset=UTF-8\n"
+ "Content-Transfer-Encoding: 8bit\n"
+ "Plural-Forms: nplurals=2; plural=n > 1;\n"
+-"X-Generator: Weblate 4.1.1\n"
++"X-Generator: Weblate 4.5.1\n"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:20
+ #: src/config/SSSDConfig/sssdoptions.py:21
+@@ -259,18 +260,24 @@ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for passwd requests"
+ msgstr ""
++"Taille (en mégaoctets) de la table de données allouée dans le cache en "
++"mémoire rapide pour les demandes de mots de passe"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:76
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for group requests"
+ msgstr ""
++"Taille (en mégaoctets) de la table de données allouée dans le cache en "
++"mémoire rapide pour les requêtes de groupe"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:77
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for initgroups requests"
+ msgstr ""
++"Taille (en mégaoctets) de la table de données allouée dans le cache en "
++"mémoire rapide pour les demandes d'initgroups"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:78
+ msgid ""
+@@ -395,11 +402,11 @@ msgstr "Quand le répondeur de PAM doit-il forcer une demande d'initgroupes"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:107
+ msgid "List of PAM services that are allowed to authenticate with GSSAPI."
+-msgstr ""
++msgstr "Liste des services PAM qui sont autorisés à s'authentifier avec GSSAPI."
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:108
+ msgid "Whether to match authenticated UPN with target user"
+-msgstr ""
++msgstr "S'il faut faire correspondre l'UPN authentifié avec l'utilisateur cible"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+@@ -588,12 +595,16 @@ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+ msgstr ""
++"Une liste d'utilisateurs à exclure de l'enregistrement, séparés par des "
++"virgules, uniquement lorsque scope=all"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+ msgstr ""
++"Une liste de groupes séparés par des virgules, dont les membres doivent être "
++"exclus de l'enregistrement, uniquement lorsque scope=all. "
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+@@ -640,9 +651,8 @@ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "Si le domaine est utilisable par l'OS ou par des applications"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:185
+-#, fuzzy
+ msgid "Enable or disable the domain"
+-msgstr "Activer ou désactiver le domaine des fichiers implicites"
++msgstr "Activer ou désactiver le domaine"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+@@ -1202,6 +1212,7 @@ msgstr "Utiliser le port LDAPS pour les requêtes LDAP et Catalogue global"
+ #: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+ msgstr ""
++"Ne pas filtrer les groupes locaux d'un domaine à partir d'autres domaines"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:330
+ #: src/config/SSSDConfig/sssdoptions.py:331
+@@ -1280,7 +1291,7 @@ msgstr "Active les principals d'entreprise"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:351
+ msgid "Enables using of subdomains realms for authentication"
+-msgstr ""
++msgstr "Permet d'utiliser les domaines de sous-domaines pour l'authentification"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+@@ -1802,7 +1813,7 @@ msgstr "Combien d'entrées maximum à récupérer lors d'une demande de wildcard
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+-msgstr ""
++msgstr "Définir le niveau de débogage de libldap"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+@@ -2368,14 +2379,16 @@ msgid "The path to the proxy command must be absolute\n"
+ msgstr "Le chemin vers la commande de proxy doit être absolue\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:326
+-#, fuzzy, c-format
++#, c-format
+ msgid "sss_ssh_knownhostsproxy: unable to proxy data: %s\n"
+-msgstr "sss_ssh_knownhostsproxy : Impossible de résoudre le nom d'hôte %s\n"
++msgstr ""
++"sss_ssh_knownhostsproxy : impossible de transmettre des données par proxy : %"
++"s\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:330
+-#, fuzzy, c-format
++#, c-format
+ msgid "sss_ssh_knownhostsproxy: connect to host %s port %d: %s\n"
+-msgstr "sss_ssh_knownhostsproxy : Impossible de résoudre le nom d'hôte %s\n"
++msgstr "sss_ssh_knownhostsproxy : se connecter à l'hôte %s port %d: %s\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:334
+ #, c-format
+@@ -3052,6 +3065,10 @@ msgid ""
+ "where the main config file is located. For example if the config is set to "
+ "\"/my/path/sssd.conf\", the snippet dir \"/my/path/conf.d\" is used)"
+ msgstr ""
++"Spécifiez un répertoire (dir) de snippet non par défaut (par défaut, il doit "
++"se trouver au même endroit que le fichier de configuration principal. Par "
++"exemple, si la configuration est définie sur \"/my/path/sssd.conf\", le "
++"répertoire d'extrait \"/my/path/conf.d\" sera utilisé)"
+ 
+ #: src/tools/sssctl/sssctl_config.c:118
+ #, c-format
+diff --git a/po/ja.po b/po/ja.po
+index 25b456e8d..1a5341757 100644
+--- a/po/ja.po
++++ b/po/ja.po
+@@ -8,21 +8,22 @@
+ # Keiko Moriguchi <kemorigu@redhat.com>, 2019. #zanata
+ # Ludek Janda <ljanda@redhat.com>, 2020. #zanata
+ # Pavel Brezina <pbrezina@redhat.com>, 2020. #zanata
++# Sundeep Anand <suanand@redhat.com>, 2021.
+ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+ "POT-Creation-Date: 2021-02-05 11:58+0100\n"
+-"PO-Revision-Date: 2020-07-22 07:46-0400\n"
+-"Last-Translator: Copied by Zanata <copied-by-zanata@zanata.org>\n"
+-"Language-Team: Japanese (http://www.transifex.com/projects/p/sssd/language/"
+-"ja/)\n"
++"PO-Revision-Date: 2021-03-18 10:39+0000\n"
++"Last-Translator: Sundeep Anand <suanand@redhat.com>\n"
++"Language-Team: Japanese <https://translate.fedoraproject.org/projects/sssd/"
++"sssd-master/ja/>\n"
+ "Language: ja\n"
+ "MIME-Version: 1.0\n"
+ "Content-Type: text/plain; charset=UTF-8\n"
+ "Content-Transfer-Encoding: 8bit\n"
+ "Plural-Forms: nplurals=1; plural=0;\n"
+-"X-Generator: Zanata 4.6.2\n"
++"X-Generator: Weblate 4.5.1\n"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:20
+ #: src/config/SSSDConfig/sssdoptions.py:21
+@@ -85,9 +86,7 @@ msgstr ""
+ msgid ""
+ "Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
+ "version 2."
+-msgstr ""
+-"Indicates what is the syntax of the config file. SSSD 0.6.0 and later use "
+-"version 2."
++msgstr "設定ファイルの構文を示します。SSSD 0.6.0 以降はバージョン 2 を使用します。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:39
+ msgid "SSSD Services to start"
+@@ -161,27 +160,25 @@ msgid ""
+ "this, and will fall back to polling resolv.conf every five seconds if "
+ "inotify cannot be used."
+ msgstr ""
+-"SSSD monitors the state of resolv.conf to identify when it needs to update "
+-"its internal DNS resolver. By default, we will attempt to use inotify for "
+-"this, and will fall back to polling resolv.conf every five seconds if "
+-"inotify cannot be used."
++"SSSD は、内部 DNSリゾルバーを更新する必要があるときを識別するために resolv.conf の状態を監視します。デフォルトでは、inotify "
++"の使用を試行します。また、inotify が使用できない場合は、5 秒ごとに resolv.conf のポーリングにフォールバックします。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:59
+ msgid "Enumeration cache timeout length (seconds)"
+-msgstr "列挙キャッシュのタイムアウト（秒）"
++msgstr "列挙キャッシュのタイムアウト (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:60
+ msgid "Entry cache background update timeout length (seconds)"
+-msgstr "エントリーキャッシュのバックグラウンド更新のタイムアウト時間（秒）"
++msgstr "エントリーキャッシュのバックグラウンド更新のタイムアウト時間 (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:61
+ #: src/config/SSSDConfig/sssdoptions.py:117
+ msgid "Negative cache timeout length (seconds)"
+-msgstr "ネガティブキャッシュのタイムアウト（秒）"
++msgstr "ネガティブキャッシュのタイムアウト (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:62
+ msgid "Files negative cache timeout length (seconds)"
+-msgstr "ファイルネガティブキャッシュのタイムアウト時間（秒）"
++msgstr "ファイルネガティブキャッシュのタイムアウト時間 (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:63
+ msgid "Users that SSSD should explicitly ignore"
+@@ -243,19 +240,19 @@ msgstr "メモリー内のキャッシュレコードが有効な期間"
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for passwd requests"
+-msgstr ""
++msgstr "パスワード要求の高速インメモリーキャッシュ内で割り当てられるデータテーブルのサイズ (メガバイト)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:76
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for group requests"
+-msgstr ""
++msgstr "グループ要求の高速インメモリーキャッシュ内で割り当てられるデータテーブルのサイズ (メガバイト)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:77
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for initgroups requests"
+-msgstr ""
++msgstr "initgroups 要求の高速インメモリーキャッシュ内で割り当てられるデータテーブルのサイズ (メガバイト)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:78
+ msgid ""
+@@ -277,13 +274,12 @@ msgid ""
+ "if they are requested beyond a percentage of the entry_cache_timeout value "
+ "for the domain."
+ msgstr ""
+-"The entry cache can be set to automatically update entries in the background "
+-"if they are requested beyond a percentage of the entry_cache_timeout value "
+-"for the domain."
++"エントリーキャッシュは、ドメインの entry_cache_timeout "
++"値のパーセントを超えるリクエストが行われた場合に、バックグラウンドでエントリーを自動的に更新するように設定できます。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:87
+ msgid "How long to allow cached logins between online logins (days)"
+-msgstr "オンラインログイン中にキャッシュによるログインが許容される期間（日数）"
++msgstr "オンラインログイン中にキャッシュによるログインが許容される期間 (日数)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:88
+ msgid "How many failed logins attempts are allowed when offline"
+@@ -293,7 +289,7 @@ msgstr "オフラインの時に許容されるログイン試行失敗回数"
+ msgid ""
+ "How long (minutes) to deny login after offline_failed_login_attempts has "
+ "been reached"
+-msgstr "offline_failed_login_attempts に達した後にログインを拒否する時間（分）"
++msgstr "offline_failed_login_attempts に達した後にログインを拒否する時間 (分)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:91
+ msgid "What kind of messages are displayed to the user during authentication"
+@@ -362,11 +358,11 @@ msgstr "PAM レスポンダーが initgroups リクエストを強制すると
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:107
+ msgid "List of PAM services that are allowed to authenticate with GSSAPI."
+-msgstr ""
++msgstr "GSSAPI での認証が許可される PAM サービスの一覧。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:108
+ msgid "Whether to match authenticated UPN with target user"
+-msgstr ""
++msgstr "ターゲットユーザーと認証された UPN に一致するかどうか"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+@@ -540,13 +536,13 @@ msgstr ""
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+-msgstr ""
++msgstr "録画から除外されるユーザーのコンマ区切りリスト。scope=all の場合のみ"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+-msgstr ""
++msgstr "scope=all の場合にのみ記録から除外されるべきメンバーから成るグループのコンマ区切りリスト。 "
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+@@ -593,9 +589,8 @@ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "OS またはアプリケーションがドメインを使用できるかどうか"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:185
+-#, fuzzy
+ msgid "Enable or disable the domain"
+-msgstr "暗黙のファイルドメインを有効化または無効化する"
++msgstr "ドメインを有効または無効にする"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+@@ -630,7 +625,7 @@ msgstr "グループ検索にグループメンバーを含めない"
+ #: src/config/SSSDConfig/sssdoptions.py:207
+ #: src/config/SSSDConfig/sssdoptions.py:208
+ msgid "Entry cache timeout length (seconds)"
+-msgstr "エントリーキャッシュのタイムアウト長（秒）"
++msgstr "エントリーキャッシュのタイムアウト長 (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:193
+ msgid ""
+@@ -655,7 +650,7 @@ msgstr "単一の DNS クエリーの解決を試行する時間 (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:198
+ msgid "How long to wait for replies from DNS when resolving servers (seconds)"
+-msgstr "サーバーを名前解決する時に DNS から応答を待つ時間（秒）"
++msgstr "サーバーを名前解決する時に DNS から応答を待つ時間 (秒)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:199
+ msgid "The domain part of service discovery DNS query"
+@@ -734,7 +729,7 @@ msgstr "ユーザーにプライベートグループを自動的に作成する
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:224
+ msgid "Display a warning N days before the password expires."
+-msgstr "Display a warning N days before the password expires."
++msgstr "パスワードの期限が切れる N 日前の警告を表示します。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:225
+ msgid ""
+@@ -894,7 +889,7 @@ msgstr "ネットグループの NIS ドメイン名を含む LDAP 属性。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:270
+ msgid "The LDAP attribute that contains the names of the netgroup's members."
+-msgstr "The LDAP attribute that contains the names of the netgroup's members."
++msgstr "ネットグループのメンバーの名前を含む LDAP 属性。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:271
+ msgid ""
+@@ -1105,7 +1100,7 @@ msgstr "LDAP およびグローバルカタログのリクエストに LDAPS ポ
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+-msgstr ""
++msgstr "他のドメインからのドメインローカルグループをフィルターしない"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:330
+ #: src/config/SSSDConfig/sssdoptions.py:331
+@@ -1182,7 +1177,7 @@ msgstr "エンタープライズ・プリンシパルの有効化"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:351
+ msgid "Enables using of subdomains realms for authentication"
+-msgstr ""
++msgstr "認証にサブドメインレルムの使用を有効化"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+@@ -1432,7 +1427,7 @@ msgstr "ID マッピングの Active Directory プライマリーグループ属
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:424
+ msgid "User principal attribute (for Kerberos)"
+-msgstr "ユーザープリンシパルの属性（Kerberos 用）"
++msgstr "ユーザープリンシパルの属性 (Kerberos 用)"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:425
+ msgid "Full Name"
+@@ -1688,7 +1683,7 @@ msgstr "ワイルドカードの要求の間に取得する最大エントリー
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+-msgstr ""
++msgstr "libldap デバッグレベルの設定"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+@@ -1893,9 +1888,7 @@ msgstr "禁止ユーザーのカンマ区切り一覧"
+ msgid ""
+ "Comma separated list of groups that are allowed to log in. This applies only "
+ "to groups within this SSSD domain. Local groups are not evaluated."
+-msgstr ""
+-"Comma separated list of groups that are allowed to log in. This applies only "
+-"to groups within this SSSD domain. Local groups are not evaluated."
++msgstr "ログインが許可されるグループのカンマ区切りの一覧。これは、SSSDドメイン内のグループにのみ適用されます。ローカルグループは評価されません。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:560
+ msgid ""
+@@ -1903,9 +1896,8 @@ msgid ""
+ "applies only to groups within this SSSD domain. Local groups are not "
+ "evaluated."
+ msgstr ""
+-"Comma separated list of groups that are explicitly denied access. This "
+-"applies only to groups within this SSSD domain. Local groups are not "
+-"evaluated."
++"排他的にアクセスが拒否されたグループのカンマ区切りの一覧。これは、この SSSD "
++"ドメイン内のグループにのみ適用されます。ローカルグループは評価されません。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:564
+ msgid "Base for home directories"
+@@ -1959,19 +1951,19 @@ msgstr "使用する PAM スタック"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:584
+ msgid "Path of passwd file sources."
+-msgstr "passwd ファイルソースへのパス"
++msgstr "passwd ファイルソースへのパス。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:585
+ msgid "Path of group file sources."
+-msgstr "グループファイルソースへのパス"
++msgstr "グループファイルソースへのパス。"
+ 
+ #: src/monitor/monitor.c:2381
+ msgid "Become a daemon (default)"
+-msgstr "デーモンとして実行（デフォルト）"
++msgstr "デーモンとして実行 (デフォルト)"
+ 
+ #: src/monitor/monitor.c:2383
+ msgid "Run interactive (not a daemon)"
+-msgstr "対話的に実行（デーモンではない）"
++msgstr "対話的に実行 (デーモンではない)"
+ 
+ #: src/monitor/monitor.c:2386
+ msgid "Disable netlink interface"
+@@ -2092,7 +2084,7 @@ msgstr "エラーの説明を検索中に予期しないエラーが発生しま
+ 
+ #: src/sss_client/pam_sss.c:68
+ msgid "Permission denied. "
+-msgstr "パーミッションが拒否されました。"
++msgstr "パーミッションが拒否されました。 "
+ 
+ #: src/sss_client/pam_sss.c:69 src/sss_client/pam_sss.c:785
+ #: src/sss_client/pam_sss.c:796
+@@ -2143,7 +2135,7 @@ msgstr ""
+ 
+ #: src/sss_client/pam_sss.c:782 src/sss_client/pam_sss.c:795
+ msgid "Password change failed. "
+-msgstr "パスワードの変更に失敗しました。"
++msgstr "パスワードの変更に失敗しました。 "
+ 
+ #: src/sss_client/pam_sss.c:2044
+ msgid "New Password: "
+@@ -2236,14 +2228,14 @@ msgid "The path to the proxy command must be absolute\n"
+ msgstr "プロキシコマンドへのパスは絶対パスにする必要があります\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:326
+-#, fuzzy, c-format
++#, c-format
+ msgid "sss_ssh_knownhostsproxy: unable to proxy data: %s\n"
+-msgstr "sss_ssh_knownhostsproxy: ホスト名 %s を解決できませんでした\n"
++msgstr "sss_ssh_knownhostsproxy: データをプロキシーできません: %s\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:330
+-#, fuzzy, c-format
++#, c-format
+ msgid "sss_ssh_knownhostsproxy: connect to host %s port %d: %s\n"
+-msgstr "sss_ssh_knownhostsproxy: ホスト名 %s を解決できませんでした\n"
++msgstr "sss_ssh_knownhostsproxy: ホスト %s ポート %d に接続: %s\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:334
+ #, c-format
+@@ -2644,8 +2636,7 @@ msgid ""
+ "Set an attribute to a name/value pair. The format is attrname=value. For "
+ "multi-valued attributes, the command replaces the values already present"
+ msgstr ""
+-"名前/値のペアに属性を指定します。形式は attrname=value です。複数の値を持つ属"
+-"性の場合、コマンドがすでに存在する値に置き換えられます。"
++"名前/値のペアに属性を指定します。形式は attrname=value です。複数の値を持つ属性の場合、コマンドがすでに存在する値に置き換えられます"
+ 
+ #: src/tools/sss_usermod.c:117 src/tools/sss_usermod.c:126
+ #: src/tools/sss_usermod.c:135
+@@ -2660,9 +2651,7 @@ msgstr "変更するユーザーを指定してください\n"
+ msgid ""
+ "Cannot find user in local domain, modifying users is allowed only in local "
+ "domain\n"
+-msgstr ""
+-"ローカルドメインにユーザーを見つけられません。ユーザーの変更はローカルドメイ"
+-"ンにおいてのみ許可されます。\n"
++msgstr "ローカルドメインにユーザーを見つけられません。ユーザーの変更はローカルドメインにおいてのみ許可されます\n"
+ 
+ #: src/tools/sss_usermod.c:322
+ msgid "Could not modify user - check if group names are correct\n"
+@@ -2841,7 +2830,7 @@ msgstr "SSSD は再起動が必要です。SSSD を今、再起動しますか?"
+ #: src/tools/sssctl/sssctl_cache.c:31
+ #, c-format
+ msgid " %s is not present in cache.\n"
+-msgstr " %s はキャッシュにありません\n"
++msgstr " %s はキャッシュにありません。\n"
+ 
+ #: src/tools/sssctl/sssctl_cache.c:33
+ msgid "Name"
+@@ -2904,6 +2893,8 @@ msgid ""
+ "where the main config file is located. For example if the config is set to "
+ "\"/my/path/sssd.conf\", the snippet dir \"/my/path/conf.d\" is used)"
+ msgstr ""
++"デフォルト以外のスニペットディレクトリーを指定します (デフォルトでは、メインの設定ファイルが存在する場所と同じ場所を検索します)。たとえば、設定が \""
++"/my/path/sssd.conf\" に設定されている場合は、スニペット dir \"/my/path/conf.d\" が使用されます"
+ 
+ #: src/tools/sssctl/sssctl_config.c:118
+ #, c-format
+diff --git a/po/zh_CN.po b/po/zh_CN.po
+index ee38f25e3..e3f018d97 100644
+--- a/po/zh_CN.po
++++ b/po/zh_CN.po
+@@ -7,13 +7,14 @@
+ # Ludek Janda <ljanda@redhat.com>, 2020. #zanata
+ # Pavel Brezina <pbrezina@redhat.com>, 2020. #zanata
+ # Charles Lee <lchopn@gmail.com>, 2020.
++# Sundeep Anand <suanand@redhat.com>, 2021.
+ msgid ""
+ msgstr ""
+ "Project-Id-Version: PACKAGE VERSION\n"
+ "Report-Msgid-Bugs-To: sssd-devel@lists.fedorahosted.org\n"
+ "POT-Creation-Date: 2021-02-05 11:58+0100\n"
+-"PO-Revision-Date: 2020-08-20 14:29+0000\n"
+-"Last-Translator: Charles Lee <lchopn@gmail.com>\n"
++"PO-Revision-Date: 2021-03-18 10:39+0000\n"
++"Last-Translator: Sundeep Anand <suanand@redhat.com>\n"
+ "Language-Team: Chinese (Simplified) <https://translate.fedoraproject.org/"
+ "projects/sssd/sssd-master/zh_CN/>\n"
+ "Language: zh_CN\n"
+@@ -21,7 +22,7 @@ msgstr ""
+ "Content-Type: text/plain; charset=UTF-8\n"
+ "Content-Transfer-Encoding: 8bit\n"
+ "Plural-Forms: nplurals=1; plural=0;\n"
+-"X-Generator: Weblate 4.1.1\n"
++"X-Generator: Weblate 4.5.1\n"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:20
+ #: src/config/SSSDConfig/sssdoptions.py:21
+@@ -230,19 +231,19 @@ msgstr "内存缓存记录有效期的长度"
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for passwd requests"
+-msgstr ""
++msgstr "为 passwd 请求在快速内存缓存（in-memory cache）中分配的数据表的大小（以 MB 为单位）"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:76
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for group requests"
+-msgstr ""
++msgstr "为组请求在快速内存缓存（in-memory cache）中分配的数据表的大小（以 MB 为单位）"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:77
+ msgid ""
+ "Size (in megabytes) of the data table allocated inside fast in-memory cache "
+ "for initgroups requests"
+-msgstr ""
++msgstr "为 initgroups 请求在快速内存缓存（in-memory cache）中分配的数据表的大小（以 MB 为单位）"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:78
+ msgid ""
+@@ -349,11 +350,11 @@ msgstr "什么时候 PAM 响应者要强制发起 initgroups 请求？"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:107
+ msgid "List of PAM services that are allowed to authenticate with GSSAPI."
+-msgstr ""
++msgstr "允许使用 GSSAPI 验证的 PAM 服务列表。"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:108
+ msgid "Whether to match authenticated UPN with target user"
+-msgstr ""
++msgstr "是否与目标用户匹配认证的 UPN"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:111
+ msgid "Whether to evaluate the time-based attributes in sudo rules"
+@@ -517,13 +518,13 @@ msgstr ""
+ msgid ""
+ "A comma-separated list of users to be excluded from recording, only when "
+ "scope=all"
+-msgstr ""
++msgstr "要从记录中排除的用逗号分开的用户列表，仅当 scope=all 时"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:168
+ msgid ""
+ "A comma-separated list of groups, members of which should be excluded from "
+ "recording,  only when scope=all. "
+-msgstr ""
++msgstr "用逗号分隔的组列表，其中的成员应不记录中排除，仅在 scope=all 时。 "
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:172
+ msgid "Identity provider"
+@@ -570,9 +571,8 @@ msgid "Whether the domain is usable by the OS or by applications"
+ msgstr "域是否可以被 OS 或应用程序使用"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:185
+-#, fuzzy
+ msgid "Enable or disable the domain"
+-msgstr "启用或禁用隐式文件域"
++msgstr "启用或禁用域"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:186
+ msgid "Minimum user ID"
+@@ -1057,7 +1057,7 @@ msgstr "将 LDAPS 端口用于 LDAP 和 Global Catalog 请求"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:327
+ msgid "Do not filter domain local groups from other domains"
+-msgstr ""
++msgstr "不要从其它域过滤域本地组"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:330
+ #: src/config/SSSDConfig/sssdoptions.py:331
+@@ -1134,7 +1134,7 @@ msgstr "启用企业主体"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:351
+ msgid "Enables using of subdomains realms for authentication"
+-msgstr ""
++msgstr "启用使用子域域进行验证"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:352
+ msgid "A mapping from user names to Kerberos principal names"
+@@ -1636,7 +1636,7 @@ msgstr "在通配符请求期间要提取多少个最大条目"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:494
+ msgid "Set libldap debug level"
+-msgstr ""
++msgstr "设置 libldap debug 级别"
+ 
+ #: src/config/SSSDConfig/sssdoptions.py:497
+ msgid "Policy to evaluate the password expiration"
+@@ -2172,9 +2172,9 @@ msgid "The path to the proxy command must be absolute\n"
+ msgstr "到 proxy 命令的路径必须是绝对路径\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:326
+-#, fuzzy, c-format
++#, c-format
+ msgid "sss_ssh_knownhostsproxy: unable to proxy data: %s\n"
+-msgstr "sss_ssh_knownhostsproxy：无法解析主机名 %s\n"
++msgstr "sss_ssh_knownhostsproxy：无法到代理数据：%s\n"
+ 
+ #: src/sss_client/ssh/sss_ssh_knownhostsproxy.c:330
+ #, c-format
+@@ -2812,6 +2812,8 @@ msgid ""
+ "where the main config file is located. For example if the config is set to "
+ "\"/my/path/sssd.conf\", the snippet dir \"/my/path/conf.d\" is used)"
+ msgstr ""
++"指定非默认 snippet dir（默认为在主配置文件所在的相同位置查找）。例如，如果配置被设置为 \"/my/path/sssd.conf\", "
++"snippet dir 为 \"/my/path/conf.d\" ）"
+ 
+ #: src/tools/sssctl/sssctl_config.c:118
+ #, c-format
+@@ -3009,7 +3011,7 @@ msgstr "无法获取服务器列表\n"
+ 
+ #: src/tools/sssctl/sssctl_logs.c:46
+ msgid "\n"
+-msgstr ""
++msgstr "\n"
+ 
+ #: src/tools/sssctl/sssctl_logs.c:236
+ msgid "Delete log files instead of truncating"
+-- 
+2.21.3
+
diff --git a/SPECS/sssd.spec b/SPECS/sssd.spec
index 07ea246..15e684b 100644
--- a/SPECS/sssd.spec
+++ b/SPECS/sssd.spec
@@ -26,7 +26,7 @@
 
 Name: sssd
 Version: 2.4.0
-Release: 8%{?dist}
+Release: 9%{?dist}
 Group: Applications/System
 Summary: System Security Services Daemon
 License: GPLv3+
@@ -81,6 +81,10 @@ Patch0044: 0044-pam_sss_gss-support-authentication-indicators.patch
 Patch0045: 0045-sudo-do-not-search-by-low-usn-value-to-improve-perfo.patch
 Patch0046: 0046-ldap-fix-modifytimestamp-debugging-leftovers.patch
 Patch0047: 0047-ssh-restore-default-debug-level.patch
+Patch0048: 0048-pot-update-pot-files.patch
+Patch0049: 0049-Update-the-translations-for-the-2.4.1-release.patch
+Patch0050: 0050-pot-update-pot-files.patch
+Patch0051: 0051-po-update-translations.patch
 
 ### Downstream Patches ###
 
@@ -172,6 +176,7 @@ BuildRequires: systemtap-sdt-devel
 BuildRequires: libuuid-devel
 BuildRequires: jansson-devel
 BuildRequires: gdm-pam-extensions-devel
+BuildRequires: po4a
 
 %description
 Provides a set of daemons to manage access to remote directories and
@@ -664,7 +669,7 @@ autoreconf -ivf
 make %{?_smp_mflags} all docs
 make -C po ja.gmo
 make -C po fr.gmo
-make -C po zh_CN.po
+make -C po zh_CN.gmo
 
 %check
 export CK_TIMEOUT_MULTIPLIER=10
@@ -1261,6 +1266,9 @@ fi
                                 %{_libdir}/%{name}/modules/libwbclient.so
 
 %changelog
+* Fri Mar 19 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-9
+- Resolves: rhbz#1899712 - [sssd] RHEL 8.4 Tier 0 Localization
+
 * Fri Feb 12 2021 Alexey Tikhonov <atikhono@redhat.com> - 2.4.0-8
 - Resolves: rhbz#1926622 - Add support to verify authentication indicators in pam_sss_gss
 - Resolves: rhbz#1926454 - First smart refresh query contains modifyTimestamp even if the modifyTimestamp is 0.