Ū•üüQÜ N!pr#x#œ#Ā(ä! /4=NW^f ofyIā * 6A Q_q‘w 6E_bÂ(Įđų (x:;ŗ+ī 1=Sg~†"žÁŪ ųdE’@Ø  % 2?EKT g¯  *8OT]o† œ Ǐ ĖÚ!î  & 3 @MRUX akszR˜ë ōh°2 C €S ÄÔ Î™!Õh";>#"z#!#"ŋ##â#$ $ '$4$=$U$g$o$„$tŒ$ % %(%6H%%%[˜%ô%ü%&-&>&O&f&w&L{&Č&ä&˙&'' 3'>'O'(g'0'0Á'1ō'$(,(.D()s([(_ų(+Y)6…)ŧ)#Ņ)õ)**.*A*V*t*5‹* Á*â*@÷**8+,c+ ++ą+SŨ+V1,:ˆ,1Ã,6õ,.,-.[-*Š-%ĩ-(Û-*.C/.'s.-›./É.$ų.</5[/=‘/1Ī/:07<0-t0+ĸ0>Î0? 1)M1+w1Ŗ1*Ã1Mî1O<29Œ20Æ25÷2X-3-†3)´3$Ū3'4)+4BU4&˜4,ŋ4.ė4#54?5&t5%›5>Á5 61!6(S6;|6D¸63ũ6)170[7)Œ7Xļ7(8*880c8”8-¤8Ō8G`9F¨9ī9:D.:4s:¨:ŧ:Û:4ī:'$;šL;Žį<–=˜=Qž=]đ=TN>\Ŗ>T?U?Z?c?t?}?„?Œ? •?ũŸ?…@ #A/A@GA,ˆA'ĩAŨARđAHCC@ŒCÍC1ėCĪDîD—ūD–E2­EāE7đE+(F TFĮbGg*H+’H0žH)īHHI.bI‘I?ĨIpåIoVJ|ÆJ[CK ŸK/ĀLŋđL…°M6NSNmNN!“NŽĩNDOãcO*GPZrPCÍPGQYQ^Q(gQ!Q˛Q3ˇQ$ëQ R'1RYR5wRG­RõR S#S4SQSqS ŽS ›SĨSšSĶSíSTZTŗuT/)U;YU)•UŋU!ÖUÖøV1ĪX&Y=(YõfZš\\6÷]˛.`Ŗá`ž…a$b’˛bOEc%•c0ģc,ėcKdDed+ĒdMÖd+$e.Pe/fN¯foūfŦngJhfhÕyhOi$WiU|i'Ōi úi*j FjgjĶnjGBk5Šk.Ākīk@lGl.fl_•lŽõl¨„mŸ-nŗÍn oIĸouėoybpíÜpđĘq’ģr Ns6īs]&t2„t5ˇt&ít&u(;uPdu7ĩuoíu“]v6ņvÂ(w–ëwŠ‚x,y¨ŦyņUzG{°]|°}Ÿŋ}Į_~Ģ'ŠĶˆ^€‡į€ĸož‚gŅ‚™9ƒŦ̓€„Ũ…yŪ…ĻX†’˙†•’‡¸(ˆRáˆQ4‰Ē†‰ŋ1Š’ņŠĨ„‹{*Œ¤ĻŒëKū7ŽŦ6ĸ㏜†#‘§&’†Î’„U“yړžT”˛ķ”dĻ•• –¨Ą–{J—ĻƗVm˜hƜ-™Eʙ›šgŦšĩ›ĨʛpœĨĀĻxgžŗāžU”Ÿ…ęŸkp %Ü VĄVYĄé°ĸ+Q¤;}¤ļš¤cpĨ.ÔĨTĻ:XĻ•“ω)§“G€7V(đXŦ!åö?O ĨQY-līôHÃwÍzüŧ#øuĮ6%,3ZK/=„5Ũžk[qhŸL¯‡’IoŌ†JĪT.•ÚíBŒŲyˇ_ĩ˛Å|sšˆ$—ĢPr;S­Ëtßĸë‘9cƝîb¨ā׹gģv§‹æxĐ&›¸Š´ŅĘĖ琚m°ĒEdM۞{ Š\'ėU–*ؘœ> Ļû‚Ūaä<Ä Ŋ^Õŗé ~Nã‰4ŖōƒșfiÜn0pWe@ŋčúŽÖ]ņ)”ÁC÷1}FÔķ` áDAęį2j¤ "…ų8õâÎRĶ+ŽļĄÉ: / between elements | selects | next screen*Authentication ConfigurationLocal Authentication OptionsOther Authentication OptionsSmart Card Authentication OptionsUser Account ConfigurationTip: Smart cards support logging into both local and centrally managed accounts.Tip: This is managed via /etc/security/access.conf.ADS Realm:Ad_min Servers:Admin Server:Advanced _OptionsAlertAll configuration files which were modified by the previous authentication configuration change will be restored from backup. Revert the changes?Allow offline _loginAut_hentication Method:AuthenticationAuthentication ConfigurationAuthentication module %s/pam_%s.so is missing. Authentication process might not work correctly.BackBad smart card removal action specified.Base DN:Cache InformationCancelCard Re_moval Action:Certificate _URL:Click this button if you did not download a CA certificate yet or you have not set the CA certificate up by other means.Control how the system verifies users who attempt to log inCreate _home directories on the first loginDo not configure _NTPDo_n't SaveDomain Administrator:Domain Controllers:Domain _administrator:Domain:Download CA CertificateEnable _fingerprint reader supportEnable _local access controlEnable _smart card supportError downloading CA certificateFingerprint authentication allows you to log in by scanning your finger with the fingerprint reader.Fingerprint readerHashing or crypto algorithm used for storing passwords of local usersHostname or ldap:// or ldaps:// URI pointing to the LDAP server.IPA R_ealm:IPA _Domain:IPA _Server:IPAv2IPAv2 SettingsIPAv2 domain join was not succesful. The ipa-client-install command failed.IPAv2 passwordIf the home directory of an user doesn't exist yet it will be created automatically on his first login.IgnoreJoin DomainJoin SettingsJoining Winbind DomainKDC:KerberosKerberos SettingsKerberos passwordLDAPLDAP Search _Base DN:LDAP SettingsLDAP _Server:LDAP authenticationLDAP passwordLocal accounts onlyLocal authorization is sufficientLockNISNIS SettingsNIS _Domain:NIS _Server:NIS passwordNextNoOkPasswordPassword:R_ealm:Realm:Require smart car_d for loginRestore the configuration files backed up before the previous configuration changeRevertSave SettingsSecurity Model:Server:Smart card authentication allows you to log in using a certificate and key associated with a smart card.Some of the configuration changes you've made should be saved to disk before continuing. If you do not save them, then your attempt to join the domain may fail. Save changes?Te_mplate Shell:Template Shell:The %s file was not found, but it is required for %s support to work properly. Install the %s package, which provides this file.To connect to a LDAP server with TLS protocol enabled you need a CA certificate which signed your server's certificate. Copy the certificate in the PEM format to the '%s' directory. Then press OK.To verify the LDAP server with TLS protocol enabled you need a CA certificate which signed the server's certificate. Please fill in the URL where the CA certificate in the PEM format can be downloaded from.Unable to initialize graphical environment. Most likely cause of failure is that the tool was not run using a graphical environment. Please either start your graphical user interface or set your DISPLAY variable. Unknown password hashing algorithm specified, using sha256.Use DNS to _locate KDCs for realmsUse DNS to locate KDCs for realmsUse DNS to resolve hosts to realmsUse D_NS to resolve hosts to realmsUse Fingerprint readerUse IPAv2Use KerberosUse LDAPUse LDAP AuthenticationUse MD5 PasswordsUse NISUse Shadow PasswordsUse TLSUse Transport Layer Security extension for LDAP as defined by RFC-2830. It must not be ticked with ldaps server URI.Use WinbindUse Winbind AuthenticationUse _TLS to encrypt connectionsUse the "Join Domain" button to join the IPAv2 domain.User InformationWarningWhen enabled /etc/security/access.conf will be consulted for authorization of users access.WinbindWinbind ADS R_ealm:Winbind Domain Co_ntrollers:Winbind SettingsWinbind _Domain:Winbind authenticationWinbind passwordYesYou must provide ldaps:// server address or use TLS for LDAP authentication._Download CA Certificate..._Identity & Authentication_Join Domain..._KDCs:_Password Hashing Algorithm:_Password:_Security Model:_User Account Database:action to be taken on smart card removalauthenticate system accounts by local files onlyauthenticate system accounts by network servicesauthorize local users also through remote servicecachingcan only be run as rootcheck access.conf during account authorizationconfigures winbind to allow offline loginconfigures winbind to assume that users with no domain in their user names are domain usersconfigures winbind to assume that users with no domain in their user names are not domain usersconfigures winbind to prevent offline logincreate home directories for users on their first logindefault LDAP base DNdefault LDAP server hostname or URIdefault NIS domaindefault NIS serverdefault hesiod LHSdefault hesiod RHSdefault kerberos KDCdefault kerberos admin serverdefault kerberos realmdefault realm for samba and winbind when security=adsdefault smart card module to usedialog was cancelleddisable IPAv2 for user information and authentication by defaultdisable LDAP for authentication by defaultdisable LDAP for user information by defaultdisable MD5 passwords by defaultdisable NIS for user information by defaultdisable SSSD for authentication by default (still used for supported configurationsdisable SSSD for user information by default (still used for supported configurations)disable authentication with fingerprint readers by defaultdisable authentication with smart card by defaultdisable caching of user credentials in SSSD by defaultdisable caching of user information by defaultdisable hesiod for user information by defaultdisable kerberos authentication by defaultdisable shadowed passwords by defaultdisable use of DNS to find kerberos KDCsdisable use of DNS to find kerberos realmsdisable use of RFC-2307bis schema for LDAP user information lookupsdisable use of TLS with LDAP (RFC-2830)disable winbind for authentication by defaultdisable winbind for user information by defaultdisable wins for hostname resolutiondisplay Back instead of Cancel in the main dialog of the TUIdo not check access.conf during account authorizationdo not create home directories for users on their first logindo not display the deprecated text user interfacedo not prefer dns over wins or nis for hostname resolutiondo not require smart card for authentication by defaultdo not setup the NTP against the IPAv2 domaindo not start/stop portmap, ypbind, and nscddo not update the configuration files, only print new settingsenable IPAv2 for user information and authentication by defaultenable LDAP for authentication by defaultenable LDAP for user information by defaultenable MD5 passwords by defaultenable NIS for user information by defaultenable SSSD for authentication by default with manually managed configurationenable SSSD for user information by default with manually managed configurationenable authentication with fingerprint readers by defaultenable authentication with smart card by defaultenable caching of user credentials in SSSD by defaultenable caching of user information by default (automatically disabled when SSSD is used)enable hesiod for user information by defaultenable kerberos authentication by defaultenable shadowed passwords by defaultenable use of DNS to find kerberos KDCsenable use of DNS to find kerberos realmsenable use of RFC-2307bis schema for LDAP user information lookupsenable use of TLS with LDAP (RFC-2830)enable winbind for authentication by defaultenable winbind for user information by defaultenable wins for hostname resolutiongid range winbind will assign to domain or ads usershash/crypt algorithm for new passwordsjoin the IPAv2 domain as this accountjoin the winbind domain or ads realm now as this administratorload CA certificate from the URLlocal authorization is sufficient for local usersnames of servers to authenticate againstnever use SSSD implicitly even for supported configurationsopposite of --test, update configuration files with changed settingsprefer dns over wins or nis for hostname resolutionprobe network for defaults and print themrequire smart card for authentication by defaultrestore the backup of configuration filesrestore the backup of configuration files saved before the previous configuration changesave a backup of all configuration filessecurity mode to use for samba and winbindsetup the NTP against the IPAv2 domain (default)shadow passwordthe IPAv2 domain the system should be part ofthe character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enabledthe directory which winbind-created users will have as home directoriesthe group which winbind-created users will have as their primary groupthe realm for the IPAv2 domainthe server for the IPAv2 domainthe shell which winbind-created users will have as their login shelluid range winbind will assign to domain or ads usersunexpected argumentupdate all configuration filesusage: %s [options]use SSSD implicitly if it supports the configurationworkgroup authentication servers are inProject-Id-Version: authconfig.tip Report-Msgid-Bugs-To: POT-Creation-Date: 2012-05-02 17:32+0200 PO-Revision-Date: 2012-05-09 10:25-0400 Last-Translator: Nilamdyuti Goswami Language-Team: as_IN MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Language: as Plural-Forms: nplurals=2; plural=(n!=1) X-Generator: Zanata 1.5.0 / āĻĒāĻĻāĻžā§°ā§āĻĨāϏāĻŽā§‚āĻšā§° āĻŽāĻžāϜāϤ | āύāĻŋā§°ā§āĻŦāĻžāϚāύ āϕ⧰āĻŋ | āĻĒā§°ā§ąā§°ā§āĻ¤ā§āϤāĻŋ āĻĒā§°ā§āĻĻā§āĻĻāĻž*āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻžā§° āϏāς⧰⧂āĻĒāĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāϏāĻŽā§‚āĻšāĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻ…āĻ¨ā§āϝ āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāϏāĻŽā§‚āĻšSmart Card āĻā§°ā§‡ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāϏāĻŽā§‚āĻšāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻāĻ•āĻžāĻ“āĻ¨ā§āϟ⧰ āϏāς⧰⧂āĻĒāϏāĻ™ā§āϕ⧇āϤ: Smart card āĻ āĻĻā§ā§Ÿā§‹ āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āφ⧰⧁ āϕ⧇āĻ¨ā§āĻĻā§ā§°ā§€ā§ŸāĻ­āĻžāĻŦ⧇ āĻĒā§°āĻŋāϚāĻžāϞāύāĻž āϕ⧰āĻž āĻāĻ•āĻžāĻ“āĻ¨ā§āϟāĻ• āϞāĻ— āϕ⧰āĻžā§° āϏāĻŽā§°ā§āĻĨāύ āϕ⧰⧇āĨ¤āϏāĻ™ā§āϕ⧇āϤ: āĻ‡ā§ŸāĻžāĻ• /etc/security/access.conf āĻā§°ā§‡ āĻĒā§°āĻŋāϚāĻžāϞāύ āϕ⧰āĻž āĻšā§Ÿ āĨ¤ADS ā§°āĻžāϜāĻ¤ā§āĻŦ:āĻĒā§ā§°āĻļāĻžāϏāύ⧰ āϚāĻžā§°ā§āĻ­āĻžā§°āϏāĻŽā§‚āĻš (_m):āĻĒā§ā§°āĻļāĻžāϏāύ āϚāĻžā§°ā§āĻ­āĻžā§°:āωāĻ¨ā§āύāϤ āĻŦāĻŋāĻ•āĻ˛ā§āĻĒ (_O)āϏāĻ•āĻŋ⧟āύāĻŋāĻĒā§‚ā§°ā§āĻŦā§° āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āϏāς⧰⧂āĻĒā§° āϏāϞāύāĻŋā§° āĻ•āĻžā§°āϪ⧇ āϏāϞāύāĻŋ āĻšā§‹ā§ąāĻž āϏāĻ•āϞ⧋ āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° ā§°āĻ•ā§āώāĻž āϕ⧰āĻž āĻ­āρ⧰āĻžāϞ⧰ āĻĒā§°āĻž āĻĒ⧁āύāσ āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻž āĻš'āĻŦāĨ¤ āϏāϞāύāĻŋāϏāĻŽā§‚āĻš āĻ“āĻ­āϤāĻžāĻŦ āύ⧇ ?āĻ…āĻĢ-āϞāĻžāχāύ āϞāĻ—āĻŋāύ⧰ āĻ…āύ⧁āĻŽāϤāĻŋ āĻĻāĻŋ⧟āĻ• (_l)āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻž (_h):āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖāĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āϏāς⧰⧂āĻĒāĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ āĻ…āĻ‚āĻļ %s/pam_%s.so āωāĻĒāĻ¸ā§āĻĨāĻŋāϤ āύāĻžāχāĨ¤ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϏāĻ āĻŋāϕ⧰⧂āĻĒ⧇ āϚāĻ˛ā§‹ā§ąāĻž āϏāĻŽā§āĻ­āĻŦ āύ'āĻš'āĻŦāĨ¤āĻĒāĻŋāĻ›āϞ⧈āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āĻ…āĻĒāϏāĻžā§°āĻŖ āϏāĻ‚āĻ•ā§ā§°āĻžāĻ¨ā§āϤ āϭ⧁āϞ āĻ•ā§°ā§āĻŽ āύāĻŋā§°ā§āϧāĻžā§°āĻŋāϤ āĻšā§ˆāϛ⧇āĨ¤āĻĒā§ā§°āϧāĻžāύ DN:āϕ⧇āĻļ āϏāĻŽā§āĻŦāĻ¨ā§āĻ§ā§€ā§Ÿ āϤāĻĨā§āϝāĻŦāĻžāϤāĻŋāϞāĻ•āĻžā§°ā§āĻĄ āĻ…āĻĒāϏāĻžā§°āĻŖā§° āĻ•ā§°ā§āĻŽ (_m)āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§°ā§° URL (_U):āĻāĻ–āύ CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻāϤāĻŋ⧟āĻžāϞ⧈āϕ⧇ āĻĄāĻžāωāύāϞ'āĻĄ āύāϕ⧰āĻŋāϞ⧇ āĻŦāĻž āĻ…āĻ¨ā§āϝ āϧ⧰āϪ⧇⧰⧇ CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻĒā§ā§°āϤāĻŋāĻˇā§āĻ āĻž āύāϕ⧰āĻŋāϞ⧇ āĻāχ āĻŦ⧁āϟāĻžāĻŽ āϟāĻŋāĻĒāĻ•āĨ¤āϞāĻ—āĻŋāύ āϕ⧰⧋āρāϤ⧇ āĻĒā§ā§°āĻšā§‡āĻˇā§āϟāĻžā§°āϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻĒā§ā§°āĻ•ā§ā§°āĻŋ⧟āĻž āύāĻŋ⧟āĻ¨ā§āĻ¤ā§ā§°āĻŖ āϕ⧰āĻ•āĻĒā§ā§°āĻĨāĻŽ āϞāĻ—āĻŋāύāϤ āϘ⧰⧰ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋ āϏ⧃āĻˇā§āϟāĻŋ āϕ⧰āĻ• (_h)NTP āϏāς⧰⧂āĻĒāĻŖ āύāϕ⧰āĻŋāĻŦ (_N)āϏāς⧰āĻ•ā§āώāĻŖ āϕ⧰āĻž āύ'āĻš'āĻŦ (_n)āĻĄā§‹āĻŽā§‡āχāύ āĻĒā§ā§°āĻļāĻžāϏāĻ•:āĻĄā§‹āĻŽā§‡āχāύ āύāĻŋ⧟āĻ¨ā§āĻ¤ā§ā§°āĻŖ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻž:āĻĄā§‹āĻŽā§‡āχāύ āĻĒā§ā§°āĻļāĻžāϏāĻ• (_a):āĻĄā§‹āĻŽā§‡āχāύ:CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻĄāĻžāωāύāϞ'āĻĄ āϕ⧰āĻ•āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°ā§° āϏāĻŽā§°ā§āĻĨāύ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (_f)āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻ…āĻ­āĻŋāĻ—āĻŽā§° āύāĻŋ⧟āĻ¨ā§āĻ¤ā§ā§°āĻŖ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (_l)āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āϏāĻŽā§°ā§āĻĨāύ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻž āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (_s)CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻĄāĻžāωāύāϞ'āĻĄ āϕ⧰⧋āρāϤ⧇ āϏāĻŽāĻ¸ā§āϝāĻžāφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°ā§‡ā§°ā§‡ āϕ⧰āĻž āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āφāĻĒā§‹āύāĻžā§° āφāϙ⧁āϞāĻŋāĻ• āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°ā§‡ā§°ā§‡ āĻ¸ā§āϕ⧇āύ āϕ⧰āĻŋ āϞāĻ—āĻŋāύ āϕ⧰āĻŋāĻŦ āĻĻāĻŋā§Ÿā§‡āĨ¤āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ ā§°āĻ•ā§āώāĻž āϕ⧰āĻŋāĻŦāϞ⧈ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž hash āĻŦāĻž crypto āĻāϞāĻ—ā§°āĻŋāĻĨāĻŽLDAP āϚāĻžā§°ā§āĻ­āĻžā§°āϞ⧈ āφāϙ⧁āϞāĻŋ⧟āĻžāχ āĻĻāĻŋ⧟āĻž āĻšāĻ¸ā§āϟ⧰āύāĻžāĻŽ āĻŦāĻž ldap:// āĻŦāĻž ldaps:// URIāĨ¤IPA ā§°āĻžāϜāĻ¤ā§āĻŦ (_e):IPA āĻĄāĻŽā§‡āχāύ (_D):IPA āϚāĻžā§°ā§āĻ­āĻžā§° (_S):IPAv2IPAv2 āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻšIPAv2 āĻĄāĻŽā§‡āχāύ āĻ…āĻ‚āĻļāĻ—ā§ā§°āĻšāĻŖ āϏāĻĢāϞ āύāĻžāĻ›āĻŋāϞāĨ¤ ipa-client-install āĻ•āĻŽāĻžāĻ¨ā§āĻĄ āĻŦā§āĻ¯ā§°ā§āĻĨ āĻšāϞāĨ¤IPAv2 āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϘ⧰⧰ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋ āύāĻžāĻĨāĻžāĻ•āĻŋāϞ⧇āĻ“ āϤ⧇āĻ“āρ⧰ āĻĒā§ā§°āĻĨāĻŽ āϞāĻ—āĻŋāύāϤ āĻ¸ā§āĻŦāϚāĻžāϞāĻŋāϤāĻ­āĻžāĻŦ⧇ āϏ⧃āĻˇā§āϟāĻŋ āϕ⧰āĻž āĻš'āĻŦāĨ¤āĻ…āĻ—ā§ā§°āĻžāĻšā§āϝ āϕ⧰āĻž āĻš'āĻŦāĻĄā§‹āĻŽā§‡āχāύ⧇⧰ āϏ⧈āϤ⧇ āϏāĻ‚āϝ⧋āĻ— āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻž āĻš'āĻŦāĻŦ⧈āĻļāĻŋāĻˇā§āĻŸā§āϝ āϏāĻ‚āϝ⧁āĻ•ā§āϤ āϕ⧰āĻž āĻš'āĻŦWinbind āĻĄā§‹āĻŽā§‡āχāύ āϏāĻ‚āϝ⧁āĻ•ā§āϤ āϕ⧰āĻž āĻšā§ˆāϛ⧇KDC:KerberosKerberos-ā§° āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻšKerberos āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄLDAPLDAP āϏāĻ¨ā§āϧāĻžāύ āĻ­āĻŋāĻ¤ā§āϤāĻŋ DN (_B):LDAP-ā§° āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻšLDAP āϚāĻžā§°ā§āĻ­āĻžā§° (_S):LDAP-ā§° āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖLDAP āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄāĻ…āĻ•āϞ āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻāĻ•āĻžāĻ“āĻ¨ā§āϟāĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϝāĻĨ⧇āĻˇā§āϟāĻŦāĻ¨ā§āϧ āϕ⧰āĻ•NISNIS-ā§° āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻšNIS āĻĄā§‹āĻŽā§‡āχāύ (_D):NIS āϚāĻžā§°ā§āĻ­āĻžā§° (_S):NIS āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄāφāĻ—āϞ⧈āύāĻšā§ŸāĻ āĻŋāĻ• āφāϛ⧇āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ:āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ:ā§°āĻžāϜāĻ¤ā§āĻŦ (_e):ā§°āĻžāϜāĻ¤ā§āĻŦ:āϞāĻ—āĻŋāύ⧰ āĻŦāĻžāĻŦ⧇ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āĻ†ā§ąāĻļā§āϝāĻ• (_d)āĻĒā§‚ā§°ā§āĻŦā§° āϏāς⧰⧂āĻĒ āϏāϞāύāĻŋ āϕ⧰āĻžā§° āφāĻ—āϤ⧇ ā§°āĻ•ā§āώāĻž āϕ⧰āĻž āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° āĻĒ⧁āύāσ āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻ•āφāĻ—ā§° āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϞ⧈ āύāĻŋ⧟āĻ•āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻš āϏāς⧰āĻ•ā§āώāĻŖ āϕ⧰āĻ•āϏ⧁⧰āĻ•ā§āώāĻžā§° āĻ†ā§°ā§āĻšāĻŋ:āϚāĻžā§°ā§āĻ­āĻžā§°:āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āĻāϟāĻž āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄā§‡ā§° āϏ⧈āϤ⧇ āϝ⧁āĻ•ā§āϤ āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āφ⧰⧁ āĻ•āĻŋ āĻĻā§āĻŦāĻžā§°āĻž āϞāĻ—-āχāύ āϕ⧰āĻž āϏāĻŽā§āĻ­āĻŦāĨ¤āĻĒā§°āĻŦā§°ā§āϤ⧀ āĻ¸ā§āϤ⧰āϤ āφāĻ—āĻŦā§āĻžā§° āφāĻ—āϤ āĻŦāĻŋāĻ¨ā§āϝāĻžāϏāϤ āĻšā§‹ā§ąāĻž āĻĒā§°āĻŋāĻŦā§°ā§āϤāύ āĻĄāĻŋāĻ¸ā§āĻ•āϤ āϏāς⧰āĻ•ā§āώāĻŖ āϕ⧰āĻž āĻĒā§ā§°ā§Ÿā§‹āϜāύāĨ¤ āϏāς⧰āĻ•ā§āώāĻŖ āύāϕ⧰āĻŋāϞ⧇ āĻĄā§‹āĻŽā§‡āχāύ⧇⧰ āϏ⧈āϤ⧇ āϏāĻ‚āϝ⧋āĻ— āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰⧋āρāϤ⧇ āϏāĻ•ā§āώāĻŽ āύāĻšāĻŦāĻ“ āĻĒāĻžā§°ā§‡āĨ¤ āĻĒā§°āĻŋāĻŦā§°ā§āϤāύāϏāĻŽā§‚āĻš āĻ•āĻŋ āϏāς⧰āĻ•ā§āώāĻŖ āϕ⧰āĻž āĻš'āĻŦ?āĻŸā§‡āĻŽāĻĒā§āϞ⧇āχāϟ āĻļā§āĻŦ⧇āϞ (_m):āĻŸā§‡āĻŽāĻĒā§āϞ⧇āχāϟ āĻļ⧇āϞ:%s āύāĻĨāĻŋāĻĒāĻ¤ā§ā§°āĻŸā§‹ āĻĒā§‹ā§ąāĻž āύāĻ—āϞ, āĻ•āĻŋāĻ¨ā§āϤ⧁ %s āϏāĻŽā§°ā§āĻĨāύ āϏāĻ āĻŋāĻ•āĻ­āĻžāĻŦ⧇ āϚāϞāĻžāĻŦ āĻšāϞ⧇ āĻāχāĻŸā§‹ āĻĒā§ā§°ā§Ÿā§‹āϜāύāĨ¤ āĻāχ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§°āĻŸā§‹ āĻĒā§ā§°āĻžāĻĒā§āϤ āϕ⧰⧋āρāϤ⧇ %s āĻĒ⧇āϕ⧇āχāϜāĻŸā§‹ āχāύāĻ¸ā§āϟāϞ āϕ⧰āĻ•āĨ¤āϏāĻ•ā§ā§°āĻŋ⧟ TLS āύ⧀āϤāĻŋ āϏāĻš LDAP āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āϏ⧈āϤ⧇ āϏāĻ‚āϝ⧋āĻ— āϕ⧰āĻŋāϞ⧇ āφāĻĒā§‹āύāĻžā§° āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻ¸ā§āĻŦāĻžāĻ•ā§āώ⧰āĻ•āĻžā§°ā§€ CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻ†ā§ąāĻļā§āϝāĻ•āĨ¤ PEM āĻŦāĻŋāĻ¨ā§āϝāĻžāϏāϤ āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§°āϟāĻŋ '%s' āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋā§° āĻŽāĻžāϜāϤ āĻ•āĻĒāĻŋ āϕ⧰āĻ•āĨ¤ āĻ•ā§°ā§āĻŽ āϏāĻŽāĻžāĻĒā§āϤ āĻšāϞ⧇ āĻ āĻŋāĻ• āφāϛ⧇ āϟāĻŋāĻĒāĻ•āĨ¤āϏāĻ•ā§ā§°āĻŋ⧟ TLS āύ⧀āϤāĻŋāϏāĻš LDAP āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āϏ⧈āϤ⧇ āϏāĻ‚āϝ⧋āĻ— āϕ⧰āĻŋāϞ⧇ āφāĻĒā§‹āύāĻžā§° āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻ¸ā§āĻŦāĻžāĻ•ā§āώ⧰āĻ•āĻžā§°ā§€ CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§°ā§° āĻ†ā§ąāĻļā§āϝāĻ•āĨ¤ PEM āϏāς⧰⧂āĻĒāϤ CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§°āĻ• āĻĄāĻžāωāύāϞ'āĻĄ āϕ⧰āĻŋāĻŦ āĻĒā§°āĻž URL āĻĻāĻŋ⧟āĻ•āĨ¤āĻ—ā§ā§°āĻžāĻĢā§€ā§Ÿ āĻĒā§°āĻŋā§ąā§‡āĻļ āφ⧰āĻŽā§āĻ­ āϕ⧰āĻŋāĻŦāϞ⧇ āĻ…āĻ•ā§āώāĻŽāĨ¤ āĻŦā§āĻ¯ā§°ā§āĻĨāϤāĻžā§° āĻ•āĻžā§°āĻŖ āϖ⧁āĻŦ āϏāĻŽā§āĻ­āĻŦ āĻāχ āϝ⧇ āϏāρāϜ⧁āϞāĻŋāĻ• āĻāϟāĻž āĻ—ā§ā§°āĻžāĻĢā§€ā§Ÿ āĻĒā§°āĻŋā§ąā§‡āĻļ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻŋ āϚāĻ˛ā§‹ā§ąāĻž āύāĻžāĻ›āĻŋāϞāĨ¤ āĻ…āύ⧁āĻ—ā§ā§°āĻš āϕ⧰āĻŋ āĻšā§Ÿ āφāĻĒā§‹āύāĻžā§° āĻ—ā§ā§°āĻžāĻĢā§€ā§Ÿ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āφāĻ¨ā§āϤāσāĻĒ⧃āĻˇā§āĻ  āφ⧰āĻŽā§āĻ­ āϕ⧰āĻ• āĻ…āĻĨāĻŦāĻž āφāĻĒā§‹āύāĻžā§° DISPLAY āϚāϞāĻ• āϏāĻ‚āĻšāϤāĻŋ āϕ⧰āĻ•āĨ¤ āĻ…āĻœā§āĻžāĻžāϤ āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄā§° hashing āĻāϞāĻ—ā§°āĻŋāĻĨāĻŽ āύāĻŋā§°ā§āϧāĻžā§°āĻŋāϤ āϕ⧰āĻž āĻšā§ˆāϛ⧇, sha256 āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āϞāĨ¤ā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻšā§° āĻŦāĻžāĻŦ⧇ KDC'ā§° āĻ…ā§ąāĻ¸ā§āĻĨāĻžāύ āύāĻŋā§°ā§āϪ⧟ āϕ⧰⧋āρāϤ⧇ DNS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦ (_l)ā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻšā§° āĻŦāĻžāĻŦ⧇ KDC ā§° āĻ…ā§ąāĻ¸ā§āĻĨāĻžāύ āύāĻŋā§°ā§āϪ⧟ āϕ⧰⧋āρāϤ⧇ DNS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻšā§° āϏ⧈āϤ⧇ āĻšāĻ¸ā§āϟ āύāĻŋā§°ā§āϪ⧟ āϕ⧰⧋āρāϤ⧇ DNS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻšā§° āϏ⧈āϤ⧇ āĻšāĻ¸ā§āϟ āύāĻŋā§°ā§āϪ⧟ āϕ⧰⧋āρāϤ⧇ DNS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦ (_N)āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻ•IPAv2 āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻ•Kerberos āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦLDAP āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦLDAP āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦMD5 āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦNIS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦāĻ›āĻžā§ŸāĻž āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦTLS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦRFC-2830 āϤ āϏāĻ‚āĻœā§āĻžāĻž āĻĻāĻŋ⧟āĻžā§° āĻŽāϤ⧇ Transport Layer Security āϤ LDAP ā§° āϏāĻŽā§āĻĒā§ā§°āϏāĻžā§°āĻŖ āĻšāĻŋāϚāĻžāĻĒ⧇ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻ•āĨ¤ āϤāĻžāĻ• ldaps āϚāĻžā§°ā§āĻ­āĻžā§°ā§° URI ā§° āϏ⧈āϤ⧇ āύāĻŋā§°ā§āĻŦāĻžāϚāύ āϕ⧰āĻŋāĻŦ āύāĻžāϞāĻžāϗ⧇āĨ¤Winbind āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦWinbind āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦāϏāĻ‚āϝ⧋āĻ— āĻāύāĻ•ā§ā§°āĻŋāĻĒā§āϟ āϕ⧰⧋āρāϤ⧇ TLS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻš'āĻŦ (_T)IPAv2 āĻĄāĻŽā§‡āχāύāϤ āĻ…āĻ‚āĻļāĻ—ā§ā§°āĻšāĻŖ āϕ⧰āĻŋāĻŦāϞ⧇ "āĻĄāĻŽā§‡āχāύ āĻ…āĻ‚āĻļāĻ—ā§ā§°āĻšāĻŖ āϕ⧰āĻ•" āĻŦ⧁āϟāĻžāĻŽ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻ•āĨ¤āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āϏāĻŽā§āĻŦāĻ¨ā§āĻ§ā§€ā§Ÿ āϤāĻĨā§āϝāϏāĻ•āĻŋ⧟āύāĻŋāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ…āĻ­āĻŋāĻ—āĻŽā§āϝāϤāĻžā§° āφāĻĻ⧇āĻļā§° āĻŦāĻžāĻŦ⧇ āϏāĻ•ā§ā§°āĻŋ⧟ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ /etc/security/access.conf ā§° āĻĒā§°āĻžāĻŽā§°ā§āĻļ āĻ˛ā§‹ā§ąāĻž āĻš'āĻŦāĨ¤WinbindWinbind ADS ā§°āĻžāϜāĻ¤ā§āĻŦ (_e):Winbind āĻĄā§‹āĻŽā§‡āχāύ āύāĻŋ⧟āĻ¨ā§āĻ¤ā§ā§°āĻŖ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻž (_n):Winbind-ā§° āϏāĻ‚āĻšāϤāĻŋāϏāĻŽā§‚āĻšWinbind āĻĄā§‹āĻŽā§‡āχāύ (_D):Winbind-ā§° āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖWinbind āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄāĻšā§ŸLDAP āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻ•āĻžā§°āϪ⧇ āφāĻĒ⧁āύāĻŋ ldaps:// āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āĻ āĻŋāĻ•āύāĻž āĻĻāĻŋāĻŦ āϞāĻžāĻ—āĻŋāĻŦ āĻŦāĻž TLS āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻŋāĻŦ āϞāĻžāĻ—āĻŋāĻŦāĨ¤CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āĻĄāĻžāωāύāϞ'āĻĄ āϕ⧰āĻ• (_D)...āĻĒā§°āĻŋāϚ⧟ & āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ (_I)āĻĄā§‹āĻŽā§‡āχāύ āϝ⧋āĻ— āϕ⧰āĻ• (_J)...KDC āϏāĻŽā§‚āĻš (_K):āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ hashing ā§° āĻāϞāĻ—ā§°āĻŋāĻĨāĻŽ (_P):āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ (_P):āϏ⧁⧰āĻ•ā§āώāĻžā§° āĻ†ā§°ā§āĻšāĻŋ (_S):āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻāĻ•āĻžāĻ“āĻ¨ā§āϟ⧰ āϤāĻĨā§āϝāĻ­āρ⧰āĻžāϞ (_U):āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āĻ…āĻĒāϏāĻžā§°āĻŋāϤ āĻšāϞ⧇ āϏāĻžā§āϚāĻžāϞāύ⧰ āĻŦāĻžāĻŦ⧇ āϚāĻŋāĻšā§āύāĻŋāϤ āĻ•ā§°ā§āĻŽāĻ•ā§‡ā§ąāϞ āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§°ā§° āϏāĻšāĻžā§ŸāϤ āϚāĻŋāĻ¸ā§āĻŸā§‡āĻŽ āĻāĻ•āĻžāĻ“āĻ¨ā§āϟ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϕ⧰āĻž āĻš'āĻŦāύ⧇'āĻŸā§ąā§°ā§āĻ• āĻĒā§°āĻŋāϏ⧇āĻŦāĻžā§° āĻĻā§āĻŦāĻžā§°āĻž āϚāĻŋāĻ¸ā§āĻŸā§‡āĻŽ āĻāĻ•āĻžāĻ“āĻ¨ā§āϟ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϕ⧰āĻž āĻš'āĻŦāĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĻā§‚ā§°āĻŦā§°ā§āϤ⧀ āĻĒā§°āĻŋāϏ⧇āĻŦāĻžā§° āĻŽāĻžāĻ§ā§āϝāĻŽā§‡ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϕ⧰āĻž āĻš'āĻŦāϕ⧇āĻļ āϕ⧰āĻž āĻšā§ˆāϛ⧇āĻ•ā§‡ā§ąāϞ root āĻĒā§°āĻŋāϚ⧟āϤ āϏāĻžā§āϚāĻžāϞāύāϝ⧋āĻ—ā§āϝāĻāĻ•āĻžāĻ“āĻ¨ā§āϟ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āϏāĻŽā§Ÿ access.conf āĻĒā§°ā§€āĻ•ā§āώāĻž āϕ⧰āĻž āĻš'āĻŦāĻ…āĻĢāϞāĻžāχāύ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āϞāĻ—āĻŋāύ āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ windbind āϏāς⧰⧂āĻĒ āϕ⧰āĻž āĻšā§ŸāĻĄā§‹āĻŽā§‡āχāύ⧇⧰ āύāĻžāĻŽāĻŦāĻŋāĻšā§€āύ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĄā§‹āĻŽā§‡āχāύ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āĻšāĻŋāϚāĻžāĻĒ⧇ āĻ…āύ⧁āĻŽāĻžāύ āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ winbind āϏāς⧰⧂āĻĒ āϕ⧰⧇āĻĄā§‹āĻŽā§‡āχāύ⧇⧰ āύāĻžāĻŽāĻŦāĻŋāĻšā§€āύ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĄā§‹āĻŽā§‡āχāύ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āĻšāĻŋāϚāĻžāĻĒ⧇ āĻ…āύ⧁āĻŽāĻžāύ āύāϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ winbind āϏāς⧰⧂āĻĒ āϕ⧰⧇āĻ…āĻĢāϞāĻžāχāύ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āϞāĻ—āĻŋāύ āĻĒā§ā§°āϤāĻŋā§°ā§‹āϧ āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ windbind āϏāς⧰⧂āĻĒ āϕ⧰āĻž āĻšā§ŸāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĒā§ā§°āĻĨāĻŽ āϞāĻ—āĻŋāύāϤ āϤ⧇āĻ“āρāϞ⧋āϕ⧰ āϘ⧰⧰ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋ āϏ⧃āĻˇā§āϟāĻŋ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ LDAP āĻ­āĻŋāĻ¤ā§āϤāĻŋ DNāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ LDAP āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āĻšāĻ¸ā§āϟ⧰āύāĻžāĻŽ āĻŦāĻž URIāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ NIS āĻĄā§‹āĻŽā§‡āχāύāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ NIS āϚāĻžā§°ā§āĻ­āĻžā§°āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ hesiod LHSāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ hesiod RHSāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ kerberos KDCāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ kerberos āĻĒā§ā§°āĻļāĻžāϏāύ āϚāĻžā§°ā§āĻ­āĻžā§°āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ kerberos ā§°āĻžāϜāĻ¤ā§āĻŦsecurity=ads āĻš'āϞ⧇ samba āφ⧰⧁ winbind-ā§° āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ ā§°āĻžāϜāĻ¤ā§āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°ā§° āĻŦāĻžāĻŦ⧇ āϚāĻŋāĻšā§āύāĻŋāϤ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āĻ…āĻ‚āĻļāĻĄāĻžāχāϞāĻ— āĻŦāĻžāϤāĻŋāϞ āϕ⧰āĻž āĻšā§ˆāϛ⧇IPAv2 āĻ• āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āϤāĻĨā§āϝ āφ⧰⧁ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžā§ąā§‡ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ LDAP āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ LDAP āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ MD5 āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ NIS āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ­āĻžāĻŦ⧇ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ SSSD āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (āϏāĻŽā§°ā§āĻĨāĻŋāϤ āϏāς⧰⧂āĻĒāϏāĻŽā§‚āĻšā§° āĻŦāĻžāĻŦ⧇ āĻāϤāĻŋ⧟āĻžāĻ“ āĻŦā§āĻ¯ā§ąāĻšā§ƒāϤāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ SSSD āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (āϏāĻŽā§°ā§āĻĨāĻŋāϤ āϏāς⧰⧂āĻĒāϏāĻŽā§‚āĻšā§° āĻŦāĻžāĻŦ⧇ āĻāϤāĻŋ⧟āĻžāĻ“ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻž āĻšā§Ÿ)āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°ā§‡ā§°ā§‡ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āϏāĻšāϝ⧋āϗ⧇ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ SSSD āϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ āϕ⧇āĻļ āϕ⧰āĻž āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ āϕ⧇āĻļ āϕ⧰āĻžā§° āĻĒā§ā§°āĻ•ā§ā§°āĻŋ⧟āĻž āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ hesiod āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ kerberos āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻ›āĻžā§ŸāĻž āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦkerberos KDC āĻ…āύ⧁āϏāĻ¨ā§āϧāĻžāύ⧰ āĻŦāĻžāĻŦ⧇ DNS-ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦkerberos ā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻš āĻ…āύ⧁āϏāĻ¨ā§āϧāĻžāύ⧰ āĻŦāĻžāĻŦ⧇ DNS-ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦLDAP āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āϞ⧁āĻ•-āφāĻĒā§° āĻ•āĻžā§°āϪ⧇ RFC-2307bis āĻ¸ā§āĻ•āĻŋāĻŽāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•LDAP ā§° āϏ⧈āϤ⧇ TLS ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (RFC-2830)āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ winbind āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ winbind āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦāĻšāĻ¸ā§āϟ⧰ āύāĻžāĻŽ āĻŽā§€āĻŽāĻžāĻ‚āϏāĻž āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ wins āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻš'āĻŦTUI'ā§° āĻĒā§ā§°āϧāĻžāύ āĻĄāĻžāχāϞāĻ— āĻŦāĻžāĻ•āϚ⧰ āĻŽāĻžāϜāϤ āĻŦāĻžāϤāĻŋāϞ āĻŦ⧁āϟāĻžāĻŽā§° āĻĒā§°āĻŋāĻŦā§°ā§āϤ⧇ āĻĒā§‚ā§°ā§āĻŦāĻŦā§°ā§āϤ⧀ āĻŦ⧁āϟāĻžāĻŽ āĻĒā§ā§°āĻĻā§°ā§āĻļāύ āϕ⧰āĻž āĻš'āĻŦāĻāĻ•āĻžāĻ“āĻ¨ā§āϟ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āϏāĻŽā§Ÿ access.conf āĻĒā§°ā§€āĻ•ā§āώāĻž āϕ⧰āĻž āύ'āĻš'āĻŦāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻĒā§ā§°āĻĨāĻŽ āϞāĻ—āĻŋāύāϤ āϤ⧇āĻ“āρāϞ⧋āϕ⧰ āϘ⧰⧰ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋ āϏ⧃āĻˇā§āϟāĻŋ āύāϕ⧰āĻŋāĻŦāĻ¸ā§āĻ–āϞāĻŋāϤ āϞāĻŋāĻ–āύ⧀ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āφāĻ¨ā§āϤāσāĻĒ⧃āĻˇā§āĻ  āĻĒā§ā§°āĻĻā§°ā§āĻļāύ āϕ⧰āĻž āύ'āĻš'āĻŦāĻšāĻ¸ā§āϟ⧰ āύāĻžāĻŽā§° āĻŽā§€āĻŽāĻžāĻ‚āϏāĻž āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ wins āĻŦāĻž nis ā§° āϏāϞāύāĻŋ dns āĻ• āĻĒāĻ›āĻ¨ā§āĻĻ āύāϕ⧰āĻŋāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āϏāĻšāϝ⧋āϗ⧇ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻ†ā§ąāĻļā§āϝāĻ• āϧāĻžā§°ā§āϝ āϕ⧰āĻž āύ'āĻš'āĻŦIPAv2 āĻĄāĻŽā§‡āχāύ⧰ āĻŦāĻžāĻŦ⧇ NTP āϏāĻ‚āĻ¸ā§āĻĨāĻžāĻĒāύ āύāϕ⧰āĻŋāĻŦportmap, ypbind āφ⧰⧁ nscd āφ⧰āĻŽā§āĻ­/āĻŦāĻ¨ā§āϧ āϕ⧰āĻž āύ'āĻš'āĻŦāϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° āωāĻ¨ā§āύāϤ āϕ⧰āĻž āύ'āĻš'āĻŦ, āĻ•ā§‡ā§ąāϞ āύāϤ⧁āύ āĻŦ⧈āĻļāĻŋāĻˇā§āĻŸā§āϝ āĻĒā§ā§°āĻŋāĻ¨ā§āϟ āϕ⧰āĻž āĻš'āĻŦIPAv2 āĻ• āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ āϤāĻĨā§āϝ āφ⧰⧁ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžā§ąā§‡ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ LDAP āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ LDAP āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ MD5 āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ NIS āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻšāĻ¸ā§āϤāϚāĻžāϞāĻŋāϤāĻ­āĻžā§ąā§‡ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻžāĻĒāĻŋāϤ āϏāς⧰⧂āĻĒā§° āϏ⧈āϤ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ SSSD āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻšāĻ¸ā§āϤāϚāĻžāϞāĻŋāϤāĻ­āĻžā§ąā§‡ āĻŦā§āĻ¯ā§ąāĻ¸ā§āĻĨāĻžāĻĒāĻŋāϤ āϏāς⧰⧂āĻĒā§° āϏ⧈āϤ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ SSSD āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āφāϙ⧁āϞāĻŋā§° āĻ›āĻžāĻĒā§° ā§°āĻŋāĻĄāĻžā§°ā§‡ā§°ā§‡ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄā§‡ā§°ā§‡ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ SSSD āϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ āϕ⧇āĻļ āϕ⧰āĻž āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤāĻ­āĻžāĻŦ⧇ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ āϕ⧇āĻļ āϕ⧰āĻŋāĻŦāϞ⧈ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (SSSD āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰⧋āρāϤ⧇ āύāĻŋāĻœā§‡āχ āĻ…āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āĻšā§Ÿ)āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ hesiod āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ kerberos āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻ›āĻžā§ŸāĻž āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄ āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦKerberos KDCāϏāĻŽā§‚āĻš āĻŦāĻŋāϚāĻžā§°āĻŋāĻŦāϞ⧇ DNS -ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ•kerberos ā§°āĻžāϜāĻ¤ā§āĻŦāϏāĻŽā§‚āĻš āĻ…āύ⧁āϏāĻ¨ā§āϧāĻžāύ⧰ āĻŦāĻžāĻŦ⧇ DNS-ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦLDAP āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āϞ⧁āĻ•-āφāĻĒā§° āĻ•āĻžā§°āϪ⧇ RFC-2307bis āĻ¸ā§āĻ•āĻŋāĻŽāĻžā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϏāĻ•ā§ā§°āĻŋ⧟ āϕ⧰āĻ•LDAP ā§° āϏ⧈āϤ⧇ TLS ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻ• (RFC-2830)āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ winbind āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āϤāĻĨā§āϝ⧰ āĻŦāĻžāĻŦ⧇ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻ…ā§ąāĻ¸ā§āĻĨāĻžāϤ winbind āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻšāĻ¸ā§āϟ⧰ āύāĻžāĻŽ āĻŽā§€āĻŽāĻžāĻ‚āϏāĻž āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ wins āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āϕ⧰āĻž āĻšāĻŦāĻĄā§‹āĻŽā§‡āχāύ āĻ…āĻĨāĻŦāĻž ads-ā§° āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻŦāĻžāĻŦ⧇ winbind-ā§° āĻĻā§āĻŦāĻžā§°āĻž āύāĻŋā§°ā§āϧāĻžā§°āĻŋāϤ gid'ā§° āĻŽāĻžāύāύāϤ⧁āύ āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄā§° āĻŦāĻžāĻŦ⧇ hash/crypt āĻāϞāĻ—ā§°āĻŋāĻĨāĻŽāĻāχ āĻāĻ•āĻžāĻ“āĻ¨ā§āϟ āĻšāĻŋāϚāĻžāĻĒ⧇ IPAv2 āĻĄāĻŽā§‡āχāύ āĻ…āĻ‚āĻļāĻ—ā§ā§°āĻšāĻŖ āϕ⧰āĻ•āĻŦā§°ā§āϤāĻŽāĻžāύ āĻĒā§ā§°āĻļāĻžāϏāĻ• āĻšāĻŋāϚāĻžāĻĒ⧇ winbind āĻĄā§‹āĻŽā§‡āχāύ āφ⧰⧁ ads ā§°āĻžāϜāĻ¤ā§āĻŦ āϝ⧁āĻ•ā§āϤ āϕ⧰āĻž āĻš'āĻŦURL ā§° āĻĒā§°āĻž CA āĻĒā§ā§°āĻŽāĻžāĻŖāĻĒāĻ¤ā§ā§° āϞ'āĻĄ āϕ⧰āĻ•āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āĻ¸ā§āĻĨāĻžāĻ¨ā§€ā§Ÿ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āϝāĻĨ⧇āĻˇā§āϟāĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āĻŦāĻžāĻŦ⧇ āĻŦā§āĻ¯ā§ąāĻšā§ƒāϤ āϚāĻžā§°ā§āĻ­āĻžā§°ā§° āύāĻžāĻŽāϏāĻŽā§°ā§āĻĨāĻŋāϤ āϏāς⧰⧂āĻĒāϏāĻŽā§‚āĻšā§° āĻŦāĻžāĻŦ⧇āĻ“ āϕ⧇āϤāĻŋ⧟āĻžāĻ“ SSSD -āĻ• āĻ…āĻ­ā§āϝāĻ¨ā§āϤ⧰āĻŋāĻ•āĻ­āĻžā§ąā§‡ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āύāϕ⧰āĻŋāĻŦ--test'ā§° āĻŦāĻŋāĻĒā§°ā§€āϤ, āĻĒā§°āĻŋāĻŦā§°ā§āϤāĻŋāϤ āĻŦ⧈āĻļāĻŋāĻˇā§āĻŸā§āϝ āϏāĻš āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° āωāĻ¨ā§āύāϤ āϕ⧰āĻž āĻš'āĻŦāĻšāĻ¸ā§āϟ⧰ āύāĻžāĻŽā§° āĻŽā§€āĻŽāĻžāĻ‚āϏāĻž āϕ⧰āĻžā§° āĻŦāĻžāĻŦ⧇ wins āĻŦāĻž nis ā§° āϏāϞāύāĻŋ dns āĻ• āĻĒāĻ›āĻ¨ā§āĻĻ āϕ⧰āĻ•āύ⧇āĻŸā§ąāĻžā§°ā§āϕ⧰ āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ āĻŽāĻžāύ āĻ…āύ⧁āϏāĻ¨ā§āϧāĻžāύ āϕ⧰āĻŋ āϏ⧇āχāϏāĻŽā§‚āĻš āĻĒā§ā§°āĻŋāĻ¨ā§āϟ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ⧰⧂āĻĒ⧇ āĻ¸ā§āĻŽāĻžā§°ā§āϟ-āĻ•āĻžā§°ā§āĻĄ āϏāĻšāϝ⧋āϗ⧇ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖ āĻ†ā§ąāĻļā§āϝāϕ⧰⧂āĻĒ⧇ āϧāĻžā§°ā§āϝ āϕ⧰āĻž āĻš'āĻŦā§°āĻ•ā§āώāĻž āϕ⧰āĻž āϏāĻ•āϞ⧋ āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§°āĻ• āĻĒ⧁āύāσāĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻ•āĻĒā§‚ā§°ā§āĻŦā§° āϏāς⧰⧂āĻĒ āϏāϞāύāĻŋ āϕ⧰āĻžā§° āφāĻ—āϤ⧇ ā§°āĻ•ā§āώāĻž āϕ⧰āĻž āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° āĻĒ⧁āύāσ āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻ•āϏāĻ•āϞ⧋ āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§°āĻ• āϏāς⧰āĻ•ā§āώāĻŖ āϕ⧰āĻ•samba āφ⧰⧁ winbind-ā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āϝ⧋āĻ—ā§āϝ āϏ⧁⧰āĻ•ā§āώāĻžā§° āĻ…ā§ąāĻ¸ā§āĻĨāĻžIPAv2 āĻĄāĻŽā§‡āχāύ (āĻ…āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāĻŋāϤ) ā§° āĻŦāĻžāĻŦ⧇ NTP āϏāĻ‚āĻ¸ā§āĻĨāĻžāĻĒāύ āϕ⧰āĻ•āĻ›āĻžā§ŸāĻž āĻĒāĻžāĻ›ā§ąāĻžā§°ā§āĻĄIPAv2 āĻĄāĻŽā§‡āχāύ āϝāĻžā§° āϚāĻŋāĻ¸ā§āĻŸā§‡āĻŽ āĻ…āĻ‚āĻļ āĻšāĻŦ āϞāĻžāĻ—āĻŋāĻŦwinbindusedefaultdomain āϏāĻžāĻŽā§°ā§āĻĨāĻŦāĻžāύ āύāϕ⧰āĻž āĻšāϞ⧇, winbind-ā§° āĻĻā§āĻŦāĻžā§°āĻž āύāĻŋā§°ā§āĻŽāĻŋāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āύāĻžāĻŽā§‡ā§° āĻŽāĻžāϜāϤ āĻĄā§‹āĻŽā§‡āχāύ āφ⧰⧁ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ…āĻ‚āĻļ āϝ⧇ āĻ…āĻ•ā§āώ⧰ āĻĻā§āĻŦāĻžā§°āĻž āĻŦāĻŋāĻ­āĻžāϜāĻŋāϤ āĻš'āĻŦwinbind-ā§° āĻĻā§āĻŦāĻžā§°āĻž āύāĻŋā§°ā§āĻŽāĻŋāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āĻŦā§āϝāĻ•ā§āϤāĻŋāĻ—āϤ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋ ā§°ā§‚āĻĒ⧇ āĻŦā§āĻ¯ā§ąāĻšā§ƒāϤ āĻĄāĻžāχ⧰⧇āĻ•āϟ⧰āĻŋwinbind-ā§° āĻĻā§āĻŦāĻžā§°āĻž āύāĻŋā§°ā§āĻŽāĻŋāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āĻĒā§ā§°āϧāĻžāύ āĻĻāϞ ā§°ā§‚āĻĒ⧇ āĻŦā§āĻ¯ā§ąāĻšā§ƒāϤ āĻĻāϞIPAv2 āĻĄāĻŽā§‡āχāύ⧰ ā§°āĻžāϜāĻ¤ā§āĻŦIPAv2 āĻĄāĻŽā§‡āχāύ⧰ āĻŦāĻžāĻŦ⧇ āϚāĻžā§°ā§āĻ­āĻžā§°winbind-ā§° āĻĻā§āĻŦāĻžā§°āĻž āύāĻŋā§°ā§āĻŽāĻŋāϤ āĻŦā§āĻ¯ā§ąāĻšāĻžā§°āĻ•āĻžā§°ā§€ā§° āĻ•ā§āώ⧇āĻ¤ā§ā§°āϤ āϞāĻ—āĻŋāύ āĻļ⧇āϞ ā§°ā§‚āĻĒ⧇ āĻŦā§āĻ¯ā§ąāĻšā§ƒāϤ āĻļ⧇āϞāĻĄā§‹āĻŽā§‡āχāύāϞ⧈ āĻŦāĻž ads users uid ā§° āĻĒā§°āĻŋāϏ⧰ āĻŦāĻŋāϤ⧰āĻŖ āϕ⧰āĻž āĻš'āĻŦāĻ…āĻĒā§ā§°āĻ¤ā§āϝāĻžāĻļāĻŋāϤ āĻ¤ā§°ā§āĻ•āϏāĻ•āϞ⧋ āϏāς⧰⧂āĻĒ āύāĻĨāĻŋāĻĒāĻ¤ā§ā§° āωāĻ¨ā§āύāϤ āϕ⧰āĻž āĻš'āĻŦāĻŦā§āĻ¯ā§ąāĻšāĻžā§°: %s [āĻŦāĻŋāĻ•āĻ˛ā§āĻĒāϏāĻŽā§‚āĻš]SSSD -āĻ• āĻ…āĻ­ā§āϝāĻ¨ā§āϤ⧰āĻŋāĻ•āĻ­āĻžā§ąā§‡ āĻŦā§āĻ¯ā§ąāĻšāĻžā§° āϕ⧰āĻ• āϝāĻĻāĻŋ āχ āϏāς⧰⧂āĻĒāĻŸā§‹ āϏāĻŽā§°ā§āĻĨāύ āϕ⧰⧇āĻ•āĻžā§°ā§āĻ¯ā§āϝāĻĻāϞ āĻĒā§ā§°āĻŽāĻžāĻŖā§€āϕ⧰āĻŖā§° āϚāĻžā§°ā§āĻ­āĻžā§° āωāĻ˛ā§āϞāĻŋāĻ–āĻŋāϤ āĻ¸ā§āĻĨāĻžāύāϤ āφāϛ⧇