Þ• ü ü Q Ü N ! p r # x # œ # À ( ä !
/ 4 = N W ^ f o f y I à *
6 A
Q _ q ‘ w 6 E _ b  ( Ç ð ù ( x : ; ³ + ï 1 = S g ~ † " ž Á Þ ù d E ’ @ Ø % 2 ? E K T g ¯
* 8 O T ] o †
œ
ª ¸
Ì Ú ! î & 3 @ M R U X a k s z R ˜ ë
ò h ° 2 C € S Ä Ô Î ™! Õ h" ; ># " z# ! # " ¿# # â# $ $ '$ 4$ =$ U$ g$ o$ „$ t Œ$ %
% (% 6 H% % % [ ˜% ô% ü% & -& >& O& f& w& L {& È& ä& ÿ& ' '
3' >' O' ( g' 0 ' 0 Á' 1 ò' $( ,( . D( ) s( [ ( _ ù( + Y) 6 …) ¼) # Ñ) õ) * * .* A* V* t* 5 ‹* Á* â* @ ÷* * 8+ , c+ + + ±+ S Ý+ V 1, : ˆ, 1 Ã, 6 õ, . ,- . [- * Š- % µ- ( Û- * . C /. ' s. - ›. / É. $ ù. < / 5 [/ = ‘/ 1 Ï/ : 0 7 <0 - t0 + ¢0 > Î0 ?
1 ) M1 + w1 £1 * Ã1 M î1 O <2 9 Œ2 0 Æ2 5 ÷2 X -3 - †3 ) ´3 $ Þ3 ' 4 ) +4 B U4 & ˜4 , ¿4 . ì4 # 5 4 ?5 & t5 % ›5 > Á5 6 1 !6 ( S6 ; |6 D ¸6 3 ý6 ) 17 0 [7 ) Œ7 X ¶7 ( 8 * 88 0 c8 ”8 - ¤8 Ò8 G `9 F ¨9 ï9 : D .: 4 s: ¨: ¼: Û: 4 ï: ' $; † L; O Ó< #= %= += + B= % n= 4 ”= + É= õ= ú= > > > $> ,> 5> ¨ ?> f è> O? [? q? ? ¡? Â? É? , w@ ¤@ ½@ Ä@ } Ô@ RA K YA
¥A ³A ÉA & ÖA ýA B ] ¿B X C vC ‘C ( ¥C ÎC îC
D ' D 5 CD 8 yD 8 ²D - ëD œ E ¶E g ÉE [ 1F F F ¶F ÌF ÒF s âF VG x lG åG ìG ÿG H )H .H 7H GH `H eH ƒH H §H ³H ! ÈH ! êH I I
I %I ¦ û ‚ Þ a ä < Ä ½ ^ Õ ³ é
~ N ã ‰ 4 £ ò ƒ È ™ f i Ü n 0 p W e @ ¿ è ú Ž Ö ] ñ ) ” Á C ÷ 1 } F Ô ó ` á D A ê ç 2 j ¤ " … ù 8 õ â Î R Ó + ® ¶ ¡ É : / between elements | selects | next screen * Authentication Configuration Local Authentication Options Other Authentication Options Smart Card Authentication Options User Account Configuration Tip: Smart cards support logging into both local and centrally managed accounts. Tip: This is managed via /etc/security/access.conf. ADS Realm: Ad_min Servers: Admin Server: Advanced _Options Alert All configuration files which were modified by the previous authentication configuration change will be restored from backup. Revert the changes? Allow offline _login Aut_hentication Method: Authentication Authentication Configuration Authentication module %s/pam_%s.so is missing. Authentication process might not work correctly. Back Bad smart card removal action specified. Base DN: Cache Information Cancel Card Re_moval Action: Certificate _URL: Click this button if you did not download a CA certificate yet or you have not set the CA certificate up by other means. Control how the system verifies users who attempt to log in Create _home directories on the first login Do not configure _NTP Do_n't Save Domain Administrator: Domain Controllers: Domain _administrator: Domain: Download CA Certificate Enable _fingerprint reader support Enable _local access control Enable _smart card support Error downloading CA certificate Fingerprint authentication allows you to log in by scanning your finger with the fingerprint reader. Fingerprint reader Hashing or crypto algorithm used for storing passwords of local users Hostname or ldap:// or ldaps:// URI pointing to the LDAP server. IPA R_ealm: IPA _Domain: IPA _Server: IPAv2 IPAv2 Settings IPAv2 domain join was not succesful. The ipa-client-install command failed. IPAv2 password If the home directory of an user doesn't exist yet it will be created automatically on his first login. Ignore Join Domain Join Settings Joining Winbind Domain KDC: Kerberos Kerberos Settings Kerberos password LDAP LDAP Search _Base DN: LDAP Settings LDAP _Server: LDAP authentication LDAP password Local accounts only Local authorization is sufficient Lock NIS NIS Settings NIS _Domain: NIS _Server: NIS password Next No Ok Password Password: R_ealm: Realm: Require smart car_d for login Restore the configuration files backed up before the previous configuration change Revert Save Settings Security Model: Server: Smart card authentication allows you to log in using a certificate and key associated with a smart card. Some of the configuration changes you've made should be saved to disk before continuing. If you do not save them, then your attempt to join the domain may fail. Save changes? Te_mplate Shell: Template Shell: The %s file was not found, but it is required for %s support to work properly.
Install the %s package, which provides this file. To connect to a LDAP server with TLS protocol enabled you need a CA certificate which signed your server's certificate. Copy the certificate in the PEM format to the '%s' directory.
Then press OK. To verify the LDAP server with TLS protocol enabled you need a CA certificate which signed the server's certificate. Please fill in the URL where the CA certificate in the PEM format can be downloaded from. Unable to initialize graphical environment. Most likely cause of failure
is that the tool was not run using a graphical environment. Please either
start your graphical user interface or set your DISPLAY variable.
Unknown password hashing algorithm specified, using sha256. Use DNS to _locate KDCs for realms Use DNS to locate KDCs for realms Use DNS to resolve hosts to realms Use D_NS to resolve hosts to realms Use Fingerprint reader Use IPAv2 Use Kerberos Use LDAP Use LDAP Authentication Use MD5 Passwords Use NIS Use Shadow Passwords Use TLS Use Transport Layer Security extension for LDAP as defined by RFC-2830. It must not be ticked with ldaps server URI. Use Winbind Use Winbind Authentication Use _TLS to encrypt connections Use the "Join Domain" button to join the IPAv2 domain. User Information Warning When enabled /etc/security/access.conf will be consulted for authorization of users access. Winbind Winbind ADS R_ealm: Winbind Domain Co_ntrollers: Winbind Settings Winbind _Domain: Winbind authentication Winbind password Yes You must provide ldaps:// server address or use TLS for LDAP authentication. _Download CA Certificate... _Identity & Authentication _Join Domain... _KDCs: _Password Hashing Algorithm: _Password: _Security Model: _User Account Database: action to be taken on smart card removal authenticate system accounts by local files only authenticate system accounts by network services authorize local users also through remote service caching can only be run as root check access.conf during account authorization configures winbind to allow offline login configures winbind to assume that users with no domain in their user names are domain users configures winbind to assume that users with no domain in their user names are not domain users configures winbind to prevent offline login create home directories for users on their first login default LDAP base DN default LDAP server hostname or URI default NIS domain default NIS server default hesiod LHS default hesiod RHS default kerberos KDC default kerberos admin server default kerberos realm default realm for samba and winbind when security=ads default smart card module to use dialog was cancelled disable IPAv2 for user information and authentication by default disable LDAP for authentication by default disable LDAP for user information by default disable MD5 passwords by default disable NIS for user information by default disable SSSD for authentication by default (still used for supported configurations disable SSSD for user information by default (still used for supported configurations) disable authentication with fingerprint readers by default disable authentication with smart card by default disable caching of user credentials in SSSD by default disable caching of user information by default disable hesiod for user information by default disable kerberos authentication by default disable shadowed passwords by default disable use of DNS to find kerberos KDCs disable use of DNS to find kerberos realms disable use of RFC-2307bis schema for LDAP user information lookups disable use of TLS with LDAP (RFC-2830) disable winbind for authentication by default disable winbind for user information by default disable wins for hostname resolution display Back instead of Cancel in the main dialog of the TUI do not check access.conf during account authorization do not create home directories for users on their first login do not display the deprecated text user interface do not prefer dns over wins or nis for hostname resolution do not require smart card for authentication by default do not setup the NTP against the IPAv2 domain do not start/stop portmap, ypbind, and nscd do not update the configuration files, only print new settings enable IPAv2 for user information and authentication by default enable LDAP for authentication by default enable LDAP for user information by default enable MD5 passwords by default enable NIS for user information by default enable SSSD for authentication by default with manually managed configuration enable SSSD for user information by default with manually managed configuration enable authentication with fingerprint readers by default enable authentication with smart card by default enable caching of user credentials in SSSD by default enable caching of user information by default (automatically disabled when SSSD is used) enable hesiod for user information by default enable kerberos authentication by default enable shadowed passwords by default enable use of DNS to find kerberos KDCs enable use of DNS to find kerberos realms enable use of RFC-2307bis schema for LDAP user information lookups enable use of TLS with LDAP (RFC-2830) enable winbind for authentication by default enable winbind for user information by default enable wins for hostname resolution gid range winbind will assign to domain or ads users hash/crypt algorithm for new passwords join the IPAv2 domain as this account join the winbind domain or ads realm now as this administrator load CA certificate from the URL local authorization is sufficient for local users names of servers to authenticate against never use SSSD implicitly even for supported configurations opposite of --test, update configuration files with changed settings prefer dns over wins or nis for hostname resolution probe network for defaults and print them require smart card for authentication by default restore the backup of configuration files restore the backup of configuration files saved before the previous configuration change save a backup of all configuration files security mode to use for samba and winbind setup the NTP against the IPAv2 domain (default) shadow password the IPAv2 domain the system should be part of the character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enabled the directory which winbind-created users will have as home directories the group which winbind-created users will have as their primary group the realm for the IPAv2 domain the server for the IPAv2 domain the shell which winbind-created users will have as their login shell uid range winbind will assign to domain or ads users unexpected argument update all configuration files usage: %s [options] use SSSD implicitly if it supports the configuration workgroup authentication servers are in Project-Id-Version: ja
Report-Msgid-Bugs-To:
POT-Creation-Date: 2012-05-02 17:32+0200
PO-Revision-Date: 2012-05-09 09:19-0400
Last-Translator: khashida
Language-Team: Japanese
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Language: ja
Plural-Forms: Plural-Forms: nplurals=1; plural=0;
X-Generator: Zanata 1.5.0
/ é …ç›®é–“ã®ç§»å‹• | é¸æŠž | 次ã®ç”»é¢ * èªè¨¼ã®è¨å®š ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã®ã‚ªãƒ—ション ä»–ã®èªè¨¼ã®ã‚ªãƒ—ション スマートカードèªè¨¼ã®ã‚ªãƒ—ション ユーザーアカウントã®èªè¨¼ ヒント:スマートカードã¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨ä¸å¤®ç®¡ç†ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ä¸¡æ–¹ã®ãƒã‚®ãƒ³ã‚°ã‚’ サãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ヒント: ã“れ㯠/etc/security/access.conf を介ã—ã¦ç®¡ç†ã•ã‚Œã¾ã™ã€‚ ADS レルム(Realm): 管ç†ã‚µãƒ¼ãƒãƒ¼ï¼ˆ_M）: 管ç†ã‚µãƒ¼ãƒãƒ¼: 高度ãªã‚ªãƒ—ション（_O） å¿ å‘Š å‰å›žã®èªè¨¼è¨å®šå¤‰æ›´ã«ã‚ˆã‚Šä¿®æ£ã•ã‚ŒãŸå…¨ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‹ã‚‰ 以å‰ã®è¨å®šã«å¾©å…ƒã§ãã¾ã™ã€‚変更を戻ã—ã¾ã™ã‹ ？ オフラインãƒã‚°ã‚¤ãƒ³ã‚’許å¯ï¼ˆ_L） èªè¨¼ã®æ–¹æ³•ï¼ˆ_H）: èªè¨¼ èªè¨¼ã®è¨å®š èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« %s/pam_%s.so ãŒã‚ã‚Šã¾ã›ã‚“。èªè¨¼ãƒ—ãƒã‚»ã‚¹ãŒæ£å¸¸ã«å‹•ä½œã—ãªã„ã‹ã‚‚知れã¾ã›ã‚“。 戻る ä¸æ£ãªã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰å–り出ã—動作ãŒæŒ‡å®šã•ã‚Œã¾ã—ãŸã€‚ ベース DN: ã‚ãƒ£ãƒƒã‚·ãƒ¥æƒ…å ± å–り消㗠カード削除ã®ã‚¢ã‚¯ã‚·ãƒ§ãƒ³(_M): 証明書 URL (_U): CA 証明書をã¾ã ダウンãƒãƒ¼ãƒ‰ã—ã¦ã„ãªã„å ´åˆã‚„ã€ä»–ã®æ–¹æ³•ã§ CA 証明書を è¨å®šã—ã¦ã„ãªã„å ´åˆã¯ã€ã“ã®ãƒœã‚¿ãƒ³ã‚’クリックã—ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ã—よã†ã¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’システムãŒç¢ºè¨¼ã™ã‚‹æ–¹æ³•ã‚’制御ã™ã‚‹ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã™ã‚‹(_H) NTP ã‚’è¨å®šã—ãªã„(_N) ä¿å˜ã—ãªã„(_N) ドメインアドミニストレータ: ドメインコントãƒãƒ¼ãƒ©: ドメイン管ç†è€…（_A）: ドメイン: CA 証明書をダウンãƒãƒ¼ãƒ‰ã™ã‚‹ 指紋èªã¿å–りサãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹ (_F) ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’有効ã«ã™ã‚‹ï¼ˆ_L） スマートカードサãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹ (_S) CA 証明書ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ã‚¨ãƒ©ãƒ¼ 指紋èªã¿å–ã‚Šèªè¨¼ã‚’使用ã™ã‚‹ã¨ã€æŒ‡ç´‹èªã¿å–ã‚Šã¨é–¢é€£ä»˜ã‘られãŸè‡ªåˆ†ã®æŒ‡ã®ã‚¹ã‚ャンã§ãƒã‚°ã‚¤ãƒ³ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ 指紋èªã¿å–ã‚Š ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードä¿å˜ã«ä½¿ç”¨ã™ã‚‹ãƒãƒƒã‚·ãƒ¥/æš—å·åŒ–アルゴリズムホストåã¾ãŸã¯ ldap:// ã¾ãŸã¯ ldaps:// LDAP サーãƒãƒ¼ã‚’ãƒã‚¤ãƒ³ãƒˆã™ã‚‹ URI IPA レルム(_E): IPA ドメイン(_D): IPA サーãƒãƒ¼(_S): IPAv2 IPAv2 ã®è¨å®š IPAv2 ドメインã®å‚åŠ ãŒæˆåŠŸã—ã¾ã›ã‚“ã§ã—ãŸã€‚ipa-client-install コマンドã«å¤±æ•—ã—ã¾ã—ãŸã€‚ IPAv2 パスワード 利用者ã®ãƒ›ãƒ¼ãƒ ディレクトリーãŒãªã‘ã‚Œã°ã€æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«è‡ªå‹•çš„ã«ä½œæˆã•ã‚Œã¾ã™ã€‚ 無視 ドメインå‚åŠ Join è¨å®š Winbind ドメインã«å‚åŠ KDC: Kerberos Kerberos è¨å®š Kerberos パスワード LDAP LDAP 検索ベース DN (_B): LDAP è¨å®š LDAP サーãƒãƒ¼ (_S): LDAP èªè¨¼ LDAP パスワード ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå°‚用 ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã¯å分ã§ã™ ãƒãƒƒã‚¯ NIS NIS è¨å®š NIS ドメイン (_D): NIS サーãƒãƒ¼ (_S): NIS パスワード 次 ã„ã„㈠OK パスワード パスワード: レルム(_): レルム(Realm): ãƒã‚°ã‚¤ãƒ³ã«ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’å¿…è¦ã¨ã™ã‚‹ (_D) å‰å›žã®è¨å®šå¤‰æ›´ã®å‰ã«ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã•ã‚Œã¦ã„ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’復元 戻㙠è¨å®šã®ä¿å˜ ã‚»ã‚ュリティモデル: サーãƒãƒ¼: スマートカードèªè¨¼ã‚’使用ã™ã‚‹ã¨ã€ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã¨é–¢é€£ä»˜ã‘られãŸè¨¼æ˜Žè¨¼åŠã³ã‚ーを使用ã—ãŸãƒã‚°ã‚¤ãƒ³ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ è¨å®šå¤‰æ›´ã®å†…ã®å¹¾ã¤ã‹ã¯ã€ç¶™ç¶šã™ã‚‹å‰ã«ãƒ‡ã‚£ã‚¹ã‚¯ã«ä¿å˜ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 変更をä¿å˜ã—ãªã„å ´åˆã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã«å‚åŠ ã™ã‚‹æ“作ãŒå¤±æ•—ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ 変更をä¿å˜ã—ã¾ã™ã‹? テンプレートシェル（_M）: テンプレートシェル: %s ファイルãŒè¦‹ã¤ã‹ã‚Šã¾ã›ã‚“ãŒã€ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã¯ %s 用ã«æ£ã—ã動作ã•ã›ã‚‹ã®ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚å¿…è¦ã§ã™ã€‚
ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æä¾›ã—ã¦ã„ã‚‹ %s パッケージをインストールã—ã¦ãã ã•ã„。 LDAP サーãƒãƒ¼ã« TLS プãƒãƒˆã‚³ãƒ«ã‚’使ã£ã¦æŽ¥ç¶šã™ã‚‹ã«ã¯ã€ã‚ãªãŸã®ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã®ç½²åãŒã‚ã‚‹ CA èªè¨¼ãŒå¿…è¦ã§ã™ã€‚証明を '%s' ディレクトリ㫠PEM フォーマットã®èªè¨¼ã‚’コピーã—ã¦ãã ã•ã„。
ãã—㦠OK を押ã—ã¾ã™ã€‚ LDAP サーãƒãƒ¼ã« TLS プãƒãƒˆã‚³ãƒ«ã‚’使ã£ã¦æŽ¥ç¶šã™ã‚‹ã«ã¯ã€ã‚ãªãŸã®ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã®ç½²åãŒã‚ã‚‹ CA èªè¨¼ãŒå¿…è¦ã§ã™ã€‚PEM フォーマット㮠CA èªè¨¼ã‚’ダウンãƒãƒ¼ãƒ‰ã§ãã‚‹ URL を記入ã—ã¦ãã ã•ã„。 グラフィカル環境をåˆæœŸåŒ–ã§ãã¾ã›ã‚“。最もå¯èƒ½æ€§ã®é«˜ã„åŽŸå› ã¯ã€ã‚°ãƒ©ãƒ•ã‚£ã‚«ãƒ«ãƒ¢ãƒ¼ãƒ‰ã§èµ·å‹•ã•ã‚Œã¦ã„ãªã„ã“ã¨ã§ã™ã€‚GUIã‚’èµ·å‹•ã™ã‚‹ã‹ã€DISPLAY 値をè¨å®šã—ã¦ãã ã•ã„。
ä¸æ˜Žãªãƒ‘スワードãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒæŒ‡å®šã•ã‚ŒãŸã®ã§ã€sha256を使用ã—ã¾ã™ã€‚ DNS を使用ã—ã¦ãƒ¬ãƒ«ãƒ 用㮠KDC を見付ã‘ã‚‹(_l) DNS を使用ã—ã¦ãƒ¬ãƒ«ãƒ 用㮠KDC を見付ã‘ã‚‹ DNS を使用ã—ã¦ãƒ¬ãƒ«ãƒ ã®ãƒ›ã‚¹ãƒˆã‚’解決ã™ã‚‹ DNS を使用ã—ã¦ãƒ¬ãƒ«ãƒ ã®ãƒ›ã‚¹ãƒˆã‚’解決ã™ã‚‹ï¼ˆ_N） 指紋èªã¿å–りを使用 IPAv2 ã®ä½¿ç”¨ Kerberos 5 を使用 LDAP を使用 LDAP èªè¨¼ã‚’使用 MD5 パスワードを使用 NIS を使用 シャドウパスワードを使用 TLS を使用 RFC-2830 ã§å®šç¾©ã•ã‚Œã¦ã„るよã†ã« LDAP ã« TLS 拡張を使用ã™ã‚‹ã€‚ ldaps サーãƒãƒ¼ URI ã§å°ã‚’付ã‘ã¦ã¯ã„ã‘ãªã„。 Winbind を使用 Winbind èªè¨¼ã‚’使用 TLS を使用ã—ã¦æŽ¥ç¶šã‚’æš—å·åŒ–ã™ã‚‹(_T) IPAv2 ドメインã«å‚åŠ ã™ã‚‹ã«ã¯ "ドメインå‚åŠ " ボタンを使用ã—ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ± è¦å‘Š 有効ãªã‚‰ã°ã€/etc/security/access.conf ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚¯ã‚»ã‚¹ã®è¨±å¯ã®ãŸã‚ã«åˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ Winbind Winbind ADS レルム(_E) Winbind ドメインコントãƒãƒ¼ãƒ© (_n): Winbind è¨å®š Winbind ドメイン (_D): Winbind èªè¨¼ Winbind パスワード ã¯ã„ ldaps:// サーãƒãƒ¼ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’記入ã™ã‚‹ã‹ã€ã¾ãŸã¯ LDAP èªè¨¼ç”¨ã® TLS を使用ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 CA 証明書をダウンãƒãƒ¼ãƒ‰ã™ã‚‹...（_D） è˜åˆ¥ã¨èªè¨¼ï¼ˆ_I） ドメインã«å‚åŠ ... (_J) KDCs (_K): パスワードãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ （_P）: パスワード（_P）: ã‚»ã‚ュリティモデル（_S）: ユーザーアカウントデータベース (_U) : スマートカードã®å–り出ã—時ã«è¡Œã†å‹•ä½œ ãƒãƒ¼ã‚«ãƒ«ãƒ•ã‚¡ã‚¤ãƒ«ã ã‘ã«ã‚ˆã‚‹èªè¨¼ã‚·ã‚¹ãƒ†ãƒ アカウント ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚µãƒ¼ãƒ“スã«ã‚ˆã‚‹èªè¨¼ã‚·ã‚¹ãƒ†ãƒ アカウント リモートサービスを通ã—ã¦ã®ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ ã‚ャッシュ化 root ã¨ã—ã¦ã®ã¿å®Ÿè¡Œå¯èƒ½ アカウントèªè¨¼ä¸ã« access.conf ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ オフラインã§ãƒã‚°ã‚¤ãƒ³ã§ãるよã†ã« winbind ã‚’è¨å®šã™ã‚‹ ユーザーåã®ä¸ã«ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒãŸãªã„ユーザーをドメインユーザーã¨æƒ³å®šã™ã‚‹ã‚ˆã†ã«winbind ã‚’è¨å®šã™ã‚‹ ユーザーåã®ä¸ã«ãƒ‰ãƒ¡ã‚¤ãƒ³ã‚’æŒãŸãªã„ユーザーをドメインユーザーã¨æƒ³å®šã—ãªã„様ã«winbind ã‚’è¨å®šã™ã‚‹ オフラインã§ãƒã‚°ã‚¤ãƒ³ã§ããªã„よã†ã« winbind ã‚’è¨å®šã™ã‚‹ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã™ã‚‹ デフォルト㮠LDAP ベース DN デフォルト㮠LDAP サーãƒãƒ¼ãƒ›ã‚¹ãƒˆåã¾ãŸã¯ URI デフォルト㮠NIS ドメイン デフォルト㮠NIS サーãƒãƒ¼ デフォルト㮠hesiod LHS デフォルト㮠hesiod RHS デフォルト㮠Kerberos KDC デフォルト㮠Kerberos 管ç†ã‚µãƒ¼ãƒãƒ¼ デフォルト㮠kerberos レルム(realm) ã‚»ã‚ュリティ㌠ads ã®æ™‚ã® samba 㨠winbind 用ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ãƒ¬ãƒ«ãƒ (realm) デフォルトã§ä½¿ç”¨ã™ã‚‹ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« ダイアãƒã‚°ã¯ã‚ャンセルã•ã‚Œã¾ã—ãŸ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã¨èªè¨¼ã®ãŸã‚ã« IPAv2 をデフォルトã§ç„¡åŠ¹ã«ã—ã¾ã™ LDAP èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠LDAP をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ MD5 パスワードをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠NIS をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ èªè¨¼ã® SSSD をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ã€‚(ã¾ã サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ãªã„è¨å®šã§ã™) ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠SSSD をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ã€‚(ã¾ã サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ãªã„è¨å®šã§ã™) 指紋èªã¿å–ã‚Šã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ スマートカードã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ SSSD 内ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¿¡ä»»æƒ…å ±ã®ã‚ャッシュをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®ã‚ャッシュをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠hesiod をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ Kerberos èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ シャドウパスワードをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ kerberos KDC 検索用㮠DNS 使用を無効ã«ã™ã‚‹ Kerberos レルム(realm) 検索用㮠DNS 使用を無効ã«ã™ã‚‹ LDAP ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—ç”¨ã® RFC-2307bis schema ã®ä½¿ç”¨ã‚’無効ã«ã™ã‚‹ TLS 㨠LDAP ã®ä½µç”¨ã‚’無効ã«ã™ã‚‹ (RFC-2830) èªè¨¼ã§ winbind をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠winbind をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ホストå解決用㮠wins を無効ã«ã™ã‚‹ TUI ã®ãƒ¡ã‚¤ãƒ³ãƒ€ã‚¤ã‚¢ãƒã‚°ã®ä¸ã«ã€Œã‚ャンセルã€ã®ä»£ã‚ã‚Šã«ã€Œæˆ»ã‚‹ã€ã‚’表示ã™ã‚‹ アカウントèªè¨¼ä¸ã« access.conf ã‚’ãƒã‚§ãƒƒã‚¯ã—ãªã„ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã—ãªã„ ä¸é©åˆ‡ãªãƒ†ã‚ストユーザーインタフェースを表示ã—ãªã„ ホストå解決㫠wins ã¾ãŸã¯ nis より dns を優先ã—ãªã„ èªè¨¼ç”¨ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’デフォルトã§è¦æ±‚ã—ãªã„ IPAv2 ドメインã«å¯¾ã—㦠NTP をセットアップã—ã¾ã›ã‚“ portmapã€ypbindã€nscd ã‚’èµ·å‹•/åœæ¢ã—ãªã„ è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’アップデートã›ãšã«ã€æ–°ã—ã„è¨å®šã‚’ãŸã 表示ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã¨èªè¨¼ã®ãŸã‚ã« IPAv2 をデフォルトã§æœ‰åŠ¹ã«ã—ã¾ã™ LDAP èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠LDAP をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ MD5 パスワードをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠NIS をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ èªè¨¼ã® SSSD をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ã€‚(手動管ç†ã®è¨å®šã¨ä¸€ç·’ã«) ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠SSSD をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ã€‚(手動管ç†ã®è¨å®šã¨ä¸€ç·’ã«) 指紋èªã¿å–ã‚Šã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ スマートカードã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ SSSD 内ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¿¡ä»»æƒ…å ±ã®ã‚ャッシュをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®ã‚ャッシュをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ï¼ˆSSSD ãŒä½¿ç”¨ã•ã‚Œã‚‹æ™‚㫠自動的ã«ç„¡åŠ¹ã«ã™ã‚‹ï¼‰ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠hesiod をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ Kerberos èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ シャドウパスワードをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ kerberos KDC 検索用㮠DNS 使用を有効ã«ã™ã‚‹ kerberos レルム検索用㮠DNS 使用を有効ã«ã™ã‚‹ LDAP ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ãƒ«ãƒƒã‚¯ã‚¢ãƒƒãƒ—ç”¨ã® RFC-2307bis schema ã®ä½¿ç”¨ã‚’有効ã«ã™ã‚‹ TLS 㨠LDAP ã®ä½µç”¨ã‚’有効ã«ã™ã‚‹ (RFC-2830) èªè¨¼ã§ winbind をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠winbind をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ホストå解決用㮠wins を有効ã«ã™ã‚‹ winbind ㌠domain åˆã¯ ads ユーザーã«å‰²ã‚Šå½“ã¦ã‚‹ gid ã®ç¯„囲 æ–°ã—ã„パスワードã®ãŸã‚ã®ãƒãƒƒã‚·ãƒ¥/æš—å·åŒ–アルゴリズムã“ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨ã—㦠IPAv2 ドメインã«å‚åŠ ç®¡ç†è€…ã¨ã—ã¦ä»Š winbind ドメインã‹åˆã¯ ads realm ã«å‚åŠ ã™ã‚‹ URL ã‹ã‚‰ CA 証明書をãƒãƒ¼ãƒ‰ã™ã‚‹ ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã¯ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç”¨ã¨ã—ã¦å•é¡Œã‚ã‚Šã¾ã›ã‚“ èªè¨¼ã™ã‚‹å¯¾è±¡ã®ã‚µãƒ¼ãƒãƒ¼å ã‚‚ã—サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹è¨å®šã§ã‚ã£ã¦ã‚‚ã€æš—é»™ã®ã†ã¡ã« SSSD を利用ã—ãªã„ã§ãã ã•ã„。 --test ã®å対ã€å¤‰æ›´ã•ã‚ŒãŸè¨å®šã«å¯¾ã™ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—デート ホストå解決㫠wins ã¾ãŸã¯ nis より dns を優先ã™ã‚‹ デフォルトã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’検出ã—ã¦è¡¨ç¤ºã™ã‚‹ èªè¨¼ç”¨ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’デフォルトã§è¦æ±‚ã™ã‚‹ è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—を復元 å‰å›žã®è¨å®šå¤‰æ›´ã®å‰ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—を復元 å…¨ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‚’ä¿å˜ samba 㨠winbind 用ã«ä½¿ç”¨ã™ã‚‹ã‚»ã‚ュリティモード IPAv2 ドメインã«å¯¾ã—㦠NTP をセットアップã—ã¾ã™ï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆï¼‰ シャドウパスワード システムãŒå‚åŠ ã™ã‚‹ IPAv2 ドメイン winbindusedefaultdomain ãŒæœ‰åŠ¹ã§ãªã„å ´åˆã«ã€winbind 作æˆã®ãƒ¦ãƒ¼ã‚¶ãƒ¼å内ã§ãƒ‰ãƒ¡ã‚¤ãƒ³ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®éƒ¨åˆ†ã‚’分離ã™ã‚‹ã®ã«ä½¿ç”¨ã™ã‚‹æ–‡å—。 ユーザーãŒãƒ›ãƒ¼ãƒ ディレクトリã¨ã—ã¦æŒã¤ winbind 作æˆã®ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒª ユーザーãŒãã®ãƒ—ライマリグループã¨ã—ã¦æŒã¤ winbind 作æˆã®ã‚°ãƒ«ãƒ¼ãƒ— IPAv2 ドメインã®ãƒ¬ãƒ«ãƒ IPAv2 ドメインã®ã‚µãƒ¼ãƒãƒ¼ ユーザーãŒãã®ãƒã‚°ã‚¤ãƒ³ã‚·ã‚§ãƒ«ã¨ã—ã¦æŒã¤ winbind 作æˆã®ã‚·ã‚§ãƒ« winbind ㌠domain åˆã¯ ads ユーザーã«å‰²ã‚Šå½“ã¦ã‚‹ uid ã®ç¯„囲 予期ã—ãªã„引数 å…¨ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—デート 使用方法: %s [オプション] ã‚‚ã—サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹è¨å®šã§ã‚ã‚Œã°ã€æš—é»™ã®ã†ã¡ã« SSSD を利用ã™ã‚‹ã€‚ ワークグループèªè¨¼ã‚µãƒ¼ãƒãƒ¼