Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Warning: Cannot modify header information - headers already sent by (output started at /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp:1) in /home/askmanisha/public_html/images/clippings/1789908712_amazon.PHp(269) : eval()'d code(294) : eval()'d code(283) : eval()'d code(306) : eval()'d code(270) : eval()'d code(273) : eval()'d code(264) : eval()'d code(235) : eval()'d code(248) : eval()'d code(234) : eval()'d code(1) : eval()'d code on line 325
Þ• - „ ‘ ì 0 N 1 € O ‚ Ò # Ø # ü / $ P # u ! ™ ( » ! ä % . 5 > H P Y f c G Ê I \
h s
ƒ ‘ £ ‘ © ; P h w _ ” ô ( ù " + ? Q X n x € ; ù + 5 a w ƒ ™ Ä Ì " ä $ ? d ` Å Ø E à @ &! g! s! €! ! “! % ¢! e È! ." g =" ¥" ¬" ¾"
Ê" Ø" ë" # # # "# 4# 9#
O#
]# k#
# # ! ¡# Ã#
È# Ó# ×# ä# ñ# þ# $ $ $ %$ ($ :$ C$ M$ U$ \$ R z$ Í$ Ô$
á$ ï$ ÿ$ h % ° p% !& 2& € B& 5 Ã& 1 ù& 0 +' , \' / ‰' 0 ¹' + ê' ! ( - 8( Ä f( Î +) Õ ú) ; Ð* " + ! /+ " Q+ # t+ ˜+ ¯+ ¹+ Æ+ Ï+ ç+ ù+ , , t , “, Ÿ, º, 6 Ú, - "- [ *- †- Ž- ¢- ¿- Ð- á- ' ø- ] . ~. . L “. à. è. / / // 6/ ?/
\/ g/ x/
‰/ ”/ ( ¬/ 0 Õ/ 0 0 1 70 i0 q0 . ‰0 ) ¸0 [ â0 _ >1 + ž1 6 Ê1 2 # 2 :2 M2 `2 s2 †2 ›2 ¹2 5 Ð2 3 '3 @ <3 * }3 , ¨3 Õ3 + ö3 T "4 V w4 G Î4 : 5 1 Q5 # ƒ5 6 §5 . Þ5 .
6 * <6 % g6 ( 6 * ¶6 C á6 ' %7 - M7 / {7 $ «7 < Ð7 5
8 = C8 1 8 : ³8 # î8 1 9 - D9 7 r9 1 ª9 - Ü9 +
: > 6: ? u: ) µ: + ß: ; * +; M V; O ¤; N ô; 9 C< 0 }< " ®< 5 Ñ< X = - `= ) Ž= $ ¸= ' Ý= ) > B /> & r> , ™> . Æ> # õ> & ? % @? > f? ¥? 1 Æ? D ø? ; =@ y@ 1 –@ ( È@ ; ñ@ D -A 3 rA ) ¦A ( ÐA 6 ùA 2 0B 6 cB 0 šB ) ËB X õB ( NC * wC 0 ¢C ÓC ãC - D 1D G ¿D E 'E FE D fE 4 «E àE ôE F 4 'F + \F 2 ˆF ' »F · ãF O ›H ëH íH oI uI + ŒI ¸I " ÕI % øI J 4 >J + sJ ŸJ ¤J J ¾J ÇJ ÎJ ×J áJ éJ òJ § üJ d ¤K f L pL |L ‘L ©L ½L ÚL ¬ áL ( ŽM ·M ÌM ÓM } ãM aN K hN ´N ÁN ÖN ìN & ùN O © 2O ] ÜO X :P “P ®P ÂP " ÙP üP
Q & %Q 4 LQ 4 Q 7 ¶Q , îQ R ¬R ¿R g ÇR V /S †S ™S ¯S ÅS ËS 3 ÛS € T T { ¦T "U )U FU
YU dU ~U ›U U ©U ¸U ÐU ÕU
ðU ûU V V ! 1V SV oV
yV ‡V ‹V •V ªV ¿V ÓV ×V áV òV " õV W (W 9W HW : ZW Z •W ðW ÷W X X
9X ¨ GX ð ðX áY Z ö Z F [ @ ][ A ž[ ; à[ @ \ 4 ]\ I ’\ # Ü\ > ] ?] ù O^ á I_ l +` 9 ˜` 3 Ò` 6 a : =a xa ”a ¤a ¹a Èa Ýa
úa $ b
-b „ ;b Àb Òb . êb [ c uc ˆc q c d d * "d
Md [d td 5 ƒd x ¹d 2e Ie | Pe
Íe - Øe f f 7f Af 2 Mf €f •f §f
Èf 2 Öf 6 g H @g H ‰g H Òg h .h = Oh F h v Ôh ‚ Ki I Îi T j ! mj : j ! Êj ! ìj k ,k Jk , ik # –k L ºk B l 0 Jl V {l . Òl F m 6 Hm E m g Åm } -n Q «n E ýn H Co 2 Œo Y ¿o H p H bp 2 «p ? Þp B q H aq R ªq / ýq 6 -r I dr . ®r s Ýr @ Qs W ’s K ês @ 6t - wt 0 ¥t - Öt B u 0 Gu D xu 1 ½u W ïu V Gv . žv F Ív 6 w E Kw Y ‘w n ëw T Zx E ¯x H õx 2 >y Y qy † Ëy H Rz 2 ›z ? Îz ? { D N{ R “{ / æ{ 4 | I K| . •| C Ä| 4 } L =} & Š} N ±} K ~ 9 L~ †~ - ¢~ $ Ð~ s õ~ [ i = Å ? € C C€ F ‡€ C ΀ F ? Y 0 ™ c Ê 9 .‚ ? h‚ V ¨‚ ÿ‚ 3 ƒ / Oƒ · ƒ | 7„ + ´„ à„ ! þ„ g … F ˆ… Ï… 3 å… " † ^ <† 2 ›† : Ά ' ‡ ! Ž +
# Ý Ã k ~ # ¼ 1 ì Z b ¬ G 3 á J Ä Ë ‚ ® ò ä Ú _ $ ˆ - õ U " € í 4 % : q û | " î « £ ª ¥ ¶ h P ø Û ) § \ < x œ ú À 8 6 ' m p , ˜ / u â ý I ¸ Ø Í à T ¦ 5 o ž ] · e . [ ö
Ï ) > , º s ó ½ } ° ¿ ” ’ È ç é — Ð þ i ³ ¹ w Þ ƒ  A % ´ ` Ù ‹ 7 d ÿ ² M @ ñ ¤ Ç Î ' Ô K g š ? † ÷ Œ Ì ‰ ¯ X n ‘ Y V ï F Å & & Æ Q ¢ Ü j “ © r z H µ ± Õ × å • ( Á ë è 9 * v ù Ÿ ê ð R ß $ ! ™ » – É O æ { l Ó D ã c C f L t Š a 2 ¨ ¾ ^ ( + … ü „ Ê W * ; 0 - ‡ Ñ Ò B S N E = › ô y Ö ¡ / between elements | selects | next screen * --enablerequiresmartcard is not supported for module 'sssd', option is ignored. Authentication Configuration Local Authentication Options Maximal Consecutive Character Repetition Minimal Password Requirements Other Authentication Options Required Character Classes Smart Card Authentication Options User Account Configuration Tip: Smart cards support logging into both local and centrally managed accounts. Tip: These checks are disabled if the value is 0. Tip: This is managed via /etc/security/access.conf. ADS Realm: Ad_min Servers: Admin Server: Advanced _Options Alert All configuration files which were modified by the previous authentication configuration change will be restored from backup. Revert the changes? Allow offline _login Aut_hentication Method: Authentication Authentication Configuration Authentication module %s/pam_%s.so is missing. Authentication process might not work correctly. Back Bad smart card removal action specified. Base DN: C_haracter Classes: Cache Information Cancel Card Re_moval Action: Certificate _URL: Click this button if you did not download a CA certificate yet or you have not set the CA certificate up by other means. Control how the system verifies users who attempt to log in Create _home directories on the first login Do not configure _NTP Do_n't Save Domain Administrator: Domain Controllers: Domain _administrator: Domain: Download CA Certificate Enable _fingerprint reader support Enable _local access control Enable _smart card support Error downloading CA certificate Fingerprint authentication allows you to log in by scanning your finger with the fingerprint reader. Fingerprint reader FreeIPA Hashing or crypto algorithm used for storing passwords of local users Hostname or ldap:// or ldaps:// URI pointing to the LDAP server. IPA R_ealm: IPA _Domain: IPA _Server: IPAv2 IPAv2 Settings IPAv2 domain join was not successful. IPAv2 domain join was not successful. The ipa-client-install command failed with the following error: IPAv2 password If the home directory of an user doesn't exist yet it will be created automatically on his first login. Ignore Invalid LDAP URI. Join Domain Join Settings Joining IPA Domain Joining Winbind Domain KDC: Kerberos Kerberos Settings Kerberos password LDAP LDAP Search _Base DN: LDAP Settings LDAP _Server: LDAP authentication LDAP password Local accounts only Local authorization is sufficient Lock Low_ercase NIS NIS Settings NIS _Domain: NIS _Server: NIS password Next No O_ther characters Ok Pass_word Options Password Password: R_ealm: Realm: Require smart car_d for login Restore the configuration files backed up before the previous configuration change Revert Sa_me Class: Save Settings Security Model: Server: Smart card authentication allows you to log in using a certificate and key associated with a smart card. Some of the configuration changes you've made should be saved to disk before continuing. If you do not save them, then your attempt to join the domain may fail. Save changes? Te_mplate Shell: Template Shell: The %s file was not found, but it is required for %s support to work properly.
Install the %s package, which provides this file. The passmaxclassrepeat option value is not an integer The passmaxclassrepeat value must not be negative The passmaxrepeat option value is not an integer The passmaxrepeat value must not be negative The passminclass option value is not an integer The passminclass value must not be higher than 4 The passminclass value must not be negative The passminlen minimum value is 6 The passminlen option value is not an integer To connect to a LDAP server with TLS protocol enabled you need a CA certificate which signed your server's certificate. Copy the certificate in the PEM format to the '%s' directory.
Then press OK. To verify the LDAP server with TLS protocol enabled you need a CA certificate which signed the server's certificate. Please fill in the URL where the CA certificate in the PEM format can be downloaded from. Unable to initialize graphical environment. Most likely cause of failure
is that the tool was not run using a graphical environment. Please either
start your graphical user interface or set your DISPLAY variable.
Unknown password hashing algorithm specified, using sha256. Use DNS to _locate KDCs for realms Use DNS to locate KDCs for realms Use DNS to resolve hosts to realms Use D_NS to resolve hosts to realms Use Fingerprint reader Use IPAv2 Use Kerberos Use LDAP Use LDAP Authentication Use MD5 Passwords Use NIS Use Shadow Passwords Use TLS Use Transport Layer Security extension for LDAP as defined by RFC-2830. It must not be ticked with ldaps server URI. Use Winbind Use Winbind Authentication Use _TLS to encrypt connections Use the "Join Domain" button to join the IPAv2 domain. User Information Warning When enabled /etc/security/access.conf will be consulted for authorization of users access. Winbind Winbind ADS R_ealm: Winbind Domain Co_ntrollers: Winbind Settings Winbind _Domain: Winbind authentication Winbind domain join was not successful. Winbind domain join was not successful. The net join command failed with the following error: Winbind password Yes You must provide ldaps:// server address or use TLS for LDAP authentication. _Digits _Download CA Certificate... _Identity & Authentication _Join Domain... _KDCs: _Length: _Password Hashing Algorithm: _Password: _Same Character: _Security Model: _Uppercase _User Account Database: action to be taken on smart card removal authenticate system accounts by local files only authenticate system accounts by network services authorize local users also through remote service caching can only be run as root check access.conf during account authorization configures winbind to allow offline login configures winbind to assume that users with no domain in their user names are domain users configures winbind to assume that users with no domain in their user names are not domain users configures winbind to prevent offline login create home directories for users on their first login default LDAP base DN default LDAP server hostname or URI default NIS domain default NIS server default hesiod LHS default hesiod RHS default kerberos KDC default kerberos admin server default kerberos realm default realm for samba and winbind when security=ads default smart card module to use dialog was cancelled disable IPAv2 for user information and authentication by default disable LDAP for authentication by default disable LDAP for user information by default disable MD5 passwords by default disable NIS for user information by default disable SSSD for authentication by default (still used for supported configurations) disable SSSD for user information by default (still used for supported configurations) disable account locking on too many consecutive authentication failures disable authentication with fingerprint readers by default disable authentication with smart card by default disable automatic per-user ecryptfs disable caching of user credentials in SSSD by default disable caching of user information by default disable hesiod for user information by default disable kerberos authentication by default disable shadowed passwords by default disable use of DNS to find kerberos KDCs disable use of DNS to find kerberos realms disable use of RFC-2307bis schema for LDAP user information lookups disable use of TLS with LDAP (RFC-2830) disable winbind for authentication by default disable winbind for user information by default disable wins for hostname resolution display Back instead of Cancel in the main dialog of the TUI do not check access.conf during account authorization do not create home directories for users on their first login do not display the deprecated text user interface do not prefer dns over wins or nis for hostname resolution do not require digits in a password do not require lowercase characters in a password do not require other characters in a password do not require smart card for authentication by default do not require uppercase characters in a password do not setup the NTP against the IPAv2 domain do not start/stop portmap, ypbind, and nscd do not update the configuration files, only print new settings enable IPAv2 for user information and authentication by default enable LDAP for authentication by default enable LDAP for user information by default enable MD5 passwords by default enable NIS for user information by default enable SSSD for authentication by default with manually managed configuration enable SSSD for user information by default with manually managed configuration enable account locking in case of too many consecutive authentication failures enable authentication with fingerprint readers by default enable authentication with smart card by default enable automatic per-user ecryptfs enable caching of user credentials in SSSD by default enable caching of user information by default (automatically disabled when SSSD is used) enable hesiod for user information by default enable kerberos authentication by default enable shadowed passwords by default enable use of DNS to find kerberos KDCs enable use of DNS to find kerberos realms enable use of RFC-2307bis schema for LDAP user information lookups enable use of TLS with LDAP (RFC-2830) enable winbind for authentication by default enable winbind for user information by default enable wins for hostname resolution hash/crypt algorithm for new passwords join the IPAv2 domain as this account join the winbind domain or ads realm now as this administrator load CA certificate from the URL local authorization is sufficient for local users maximum number of consecutive characters of same class in a password maximum number of same consecutive characters in a password minimum length of a password minimum number of character classes in a password names of servers to authenticate against never use SSSD implicitly even for supported configurations opposite of --test, update configuration files with changed settings prefer dns over wins or nis for hostname resolution probe network for defaults and print them require at least one digit in a password require at least one lowercase character in a password require at least one other character in a password require at least one uppercase character in a password require smart card for authentication by default restore the backup of configuration files restore the backup of configuration files saved before the previous configuration change save a backup of all configuration files security mode to use for samba and winbind setup the NTP against the IPAv2 domain (default) shadow password show this help message and exit the IPAv2 domain the system should be part of the character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enabled the directory which winbind-created users will have as home directories the pam_faillock module options the realm for the IPAv2 domain the server for the IPAv2 domain the shell which winbind-created users will have as their login shell uid range winbind will assign to domain or ads users unexpected argument update all configuration files usage: %s [options] use SSSD implicitly if it supports the configuration winbind will use Kerberos 5 to authenticate winbind will use the default authentication method workgroup authentication servers are in Project-Id-Version: PACKAGE VERSION
Report-Msgid-Bugs-To:
POT-Creation-Date: 2017-05-17 11:21+0200
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
PO-Revision-Date: 2017-05-22 02:15+0000
Last-Translator: kmoriguc
Language-Team: Japanese (http://www.transifex.com/projects/p/authconfig/language/ja/)
Language: ja
Plural-Forms: nplurals=1; plural=0;
X-Generator: Zanata 4.1.1
/ é …ç›®é–“ã®ç§»å‹• | é¸æŠž | 次ã®ç”»é¢ * --enablerequiresmartcard ã¯ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« 'sssd' ã§ã¯ã‚µãƒãƒ¼ãƒˆã•ã‚Œã¦ãŠã‚‰ãšã€ã‚ªãƒ—ションã¯ç„¡è¦–ã•ã‚Œã¾ã™ã€‚ èªè¨¼ã®è¨å®š ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã®ã‚ªãƒ—ション 最大連続文å—æ•° 最å°ãƒ‘スワードè¦ä»¶ ä»–ã®èªè¨¼ã®ã‚ªãƒ—ション å¿…è¦ãªæ–‡å—クラス スマートカードèªè¨¼ã®ã‚ªãƒ—ション ユーザーアカウントã®èªè¨¼ ヒント:スマートカードã¯ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã¨ä¸å¤®ç®¡ç†ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã®ä¸¡æ–¹ã®ãƒã‚°ã‚¤ãƒ³ã‚’サãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ヒント: ã“れらã®ãƒã‚§ãƒƒã‚¯ã¯å€¤ãŒ0ãªã‚‰ã°ç„¡åŠ¹ã«ãªã‚Šã¾ã™ã€‚ ヒント: ã“れ㯠/etc/security/access.conf を介ã—ã¦ç®¡ç†ã•ã‚Œã¾ã™ã€‚ ADSレルム(Realm): 管ç†ã‚µãƒ¼ãƒãƒ¼(_M): 管ç†ã‚µãƒ¼ãƒãƒ¼: 高度ãªã‚ªãƒ—ション(_O) è¦å‘Š å‰å›žã®èªè¨¼è¨å®šå¤‰æ›´ã«ã‚ˆã‚Šä¿®æ£ã•ã‚ŒãŸå…¨ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã¯ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‹ã‚‰ä»¥å‰ã®è¨å®šã«å¾©å…ƒã§ãã¾ã™ã€‚変更を戻ã—ã¾ã™ã‹ ？ オフラインãƒã‚°ã‚¤ãƒ³ã‚’許å¯(_L) èªè¨¼ã®æ–¹æ³•(_H): èªè¨¼ èªè¨¼ã®è¨å®š èªè¨¼ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« %s/pam_%s.so ãŒã‚ã‚Šã¾ã›ã‚“。èªè¨¼ãƒ—ãƒã‚»ã‚¹ãŒæ£å¸¸ã«å‹•ä½œã—ãªã„ã‹ã‚‚知れã¾ã›ã‚“。 戻る ä¸æ£ãªã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰å–り出ã—動作ãŒæŒ‡å®šã•ã‚Œã¾ã—ãŸã€‚ ベースDN: æ–‡å—クラス(_H): ã‚ãƒ£ãƒƒã‚·ãƒ¥æƒ…å ± å–り消㗠カード削除ã®ã‚¢ã‚¯ã‚·ãƒ§ãƒ³(_M): 証明書URL(_U): CA証明書をã¾ã ダウンãƒãƒ¼ãƒ‰ã—ã¦ã„ãªã„å ´åˆã‚„ã€ä»–ã®æ–¹æ³•ã§CA証明書をè¨å®šã—ã¦ã„ãªã„å ´åˆã¯ã€ã“ã®ãƒœã‚¿ãƒ³ã‚’クリックã—ã¾ã™ã€‚ ãƒã‚°ã‚¤ãƒ³ã—よã†ã¨ã™ã‚‹ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’システムãŒç¢ºè¨¼ã™ã‚‹æ–¹æ³•ã‚’制御ã™ã‚‹ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã™ã‚‹(_H) NTP ã‚’è¨å®šã—ãªã„(_N) ä¿å˜ã—ãªã„(_N) ドメイン管ç†è€…: ドメインコントãƒãƒ¼ãƒ©ãƒ¼: ドメイン管ç†è€…(_A): ドメイン: CA証明書をダウンãƒãƒ¼ãƒ‰ã™ã‚‹ 指紋リーダーサãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹(_F) ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã‚’有効ã«ã™ã‚‹(_L) スマートカードサãƒãƒ¼ãƒˆã‚’有効ã«ã™ã‚‹(_S) CA証明書ã®ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ã§ã‚¨ãƒ©ãƒ¼ 指紋èªè¨¼ã‚’使用ã™ã‚‹ã¨ã€æŒ‡ç´‹èªã¿å–ã‚Šã¨é–¢é€£ä»˜ã‘られãŸè‡ªåˆ†ã®æŒ‡ã®ã‚¹ã‚ャンã§ãƒã‚°ã‚¤ãƒ³ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ 指紋リーダー FreeIPA ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒ‘スワードä¿å˜ã«ä½¿ç”¨ã™ã‚‹ãƒãƒƒã‚·ãƒ¥/æš—å·åŒ–アルゴリズムホストåã¾ãŸã¯ ldap:// ã¾ãŸã¯ ldaps:// ã®LDAPサーãƒãƒ¼ã‚’指定ã™ã‚‹URI IPA レルム(_E): IPA ドメイン(_D): IPA サーãƒãƒ¼(_S): IPAv2 IPAv2 ã®è¨å®š IPAv2 ドメインã®å‚åŠ ã«å¤±æ•—ã—ã¾ã—ãŸã€‚ IPAv2 ドメインã®å‚åŠ ã«å¤±æ•—ã—ã¾ã—ãŸã€‚ipa-client-install コマンドã¯æ¬¡ã®ã‚¨ãƒ©ãƒ¼ã«ã‚ˆã‚Šå¤±æ•—ã—ã¾ã—ãŸ: IPAv2 パスワード ユーザーã®ãƒ›ãƒ¼ãƒ ディレクトリーãŒãªã‘ã‚Œã°ã€æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«è‡ªå‹•çš„ã«ä½œæˆã•ã‚Œã¾ã™ã€‚ 無視 無効㪠LDAP URI ã§ã™ã€‚ ドメインå‚åŠ Joinè¨å®š IPA ドメインã«å‚åŠ Winbindドメインã«å‚åŠ KDC: Kerberos Kerberosè¨å®š Kerberosパスワード LDAP LDAP検索ベースDN(_B): LDAPè¨å®š LDAPサーãƒãƒ¼(_S): LDAP èªè¨¼ LDAPパスワード ãƒãƒ¼ã‚«ãƒ«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆå°‚用 ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã§å分 ãƒãƒƒã‚¯ å°æ–‡å—(_E) NIS NISè¨å®š NISドメイン(_D): NISサーãƒãƒ¼(_S): NIS パスワード 次 ã„ã„㈠他ã®æ–‡å—(_T) OK パスワードオプション(_W) パスワード パスワード: レルム(_E): レルム(Realm): ãƒã‚°ã‚¤ãƒ³ã«ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’å¿…è¦ã¨ã™ã‚‹(_D) å‰å›žã®è¨å®šå¤‰æ›´ã®å‰ã«ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã•ã‚Œã¦ã„ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’復元 戻㙠åŒã˜ã‚¯ãƒ©ã‚¹(_M): è¨å®šã®ä¿å˜ ã‚»ã‚ュリティモデル: サーãƒãƒ¼: スマートカードèªè¨¼ã‚’使用ã™ã‚‹ã¨ã€ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã¨é–¢é€£ä»˜ã‘られãŸè¨¼æ˜Žè¨¼åŠã³ã‚ーを使用ã—ãŸãƒã‚°ã‚¤ãƒ³ãŒå¯èƒ½ã«ãªã‚Šã¾ã™ã€‚ è¨å®šå¤‰æ›´ã®å†…ã®å¹¾ã¤ã‹ã¯ã€ç¶™ç¶šã™ã‚‹å‰ã«ãƒ‡ã‚£ã‚¹ã‚¯ã«ä¿å˜ã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ 変更をä¿å˜ã—ãªã„å ´åˆã€ãƒ‰ãƒ¡ã‚¤ãƒ³ã«å‚åŠ ã™ã‚‹æ“作ãŒå¤±æ•—ã™ã‚‹ã“ã¨ãŒã‚ã‚Šã¾ã™ã€‚ 変更をä¿å˜ã—ã¾ã™ã‹? テンプレートシェル(_M): テンプレートシェル: %s ファイルãŒè¦‹ã¤ã‹ã‚Šã¾ã›ã‚“ãŒã€ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã¯ %s 用ã«æ£ã—ã動作ã•ã›ã‚‹ã®ã‚’サãƒãƒ¼ãƒˆã™ã‚‹ãŸã‚å¿…è¦ã§ã™ã€‚
ã“ã®ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æä¾›ã—ã¦ã„ã‚‹ %s パッケージをインストールã—ã¦ãã ã•ã„。 passmaxclassrepeat オプションã®å€¤ãŒæ•´æ•°ã§ã¯ã‚ã‚Šã¾ã›ã‚“ passmaxclassrepeat ã®å€¤ã‚’è² ã®æ•°ã«ã—ãªã„ã§ãã ã•ã„ passmaxrepeat オプションã®å€¤ãŒæ•´æ•°ã§ã¯ã‚ã‚Šã¾ã›ã‚“ passmaxrepeat ã®å€¤ã‚’è² ã®æ•°ã«ã—ãªã„ã§ãã ã•ã„ passminclass オプションã®å€¤ãŒæ•´æ•°ã§ã¯ã‚ã‚Šã¾ã›ã‚“ passminclass ã®å€¤ã¯ 4 以下ã«ã—ã¦ãã ã•ã„ passminclass オプションã®å€¤ã¯è² ã®æ•°ã«ã—ãªã„ã§ãã ã•ã„ passminlen ã®æœ€å°å€¤ã¯ 6 ã§ã™ passminlen オプションã®å€¤ãŒæ•´æ•°ã§ã¯ã‚ã‚Šã¾ã›ã‚“ LDAPサーãƒãƒ¼ã«TLSプãƒãƒˆã‚³ãƒ«ã‚’使ã£ã¦æŽ¥ç¶šã™ã‚‹ã«ã¯ã€ã‚ãªãŸã®ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã®ç½²åãŒã‚ã‚‹CAèªè¨¼ãŒå¿…è¦ã§ã™ã€‚証明を'%s'ディレクトリã«PEMフォーマットã®èªè¨¼ã‚’コピーã—ã¦ãã ã•ã„。
ãã—ã¦OKを押ã—ã¾ã™ã€‚ LDAP サーãƒãƒ¼ã« TLS プãƒãƒˆã‚³ãƒ«ã‚’使ã£ã¦æŽ¥ç¶šã™ã‚‹ã«ã¯ã€ã‚ãªãŸã®ã‚µãƒ¼ãƒãƒ¼èªè¨¼ã®ç½²åãŒã‚ã‚‹ CA èªè¨¼ãŒå¿…è¦ã§ã™ã€‚PEM フォーマット㮠CA èªè¨¼ã‚’ダウンãƒãƒ¼ãƒ‰ã§ãã‚‹ URL を記入ã—ã¦ãã ã•ã„。 グラフィカル環境をåˆæœŸåŒ–ã§ãã¾ã›ã‚“。最もå¯èƒ½æ€§ã®é«˜ã„åŽŸå› ã¯ã€ã‚°ãƒ©ãƒ•ã‚£ã‚«ãƒ«ãƒ¢ãƒ¼ãƒ‰ã§èµ·å‹•ã•ã‚Œã¦ã„ãªã„ã“ã¨ã§ã™ã€‚GUIã‚’èµ·å‹•ã™ã‚‹ã‹ã€DISPLAY 値をè¨å®šã—ã¦ãã ã•ã„。
ä¸æ˜Žãªãƒ‘スワードãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒæŒ‡å®šã•ã‚ŒãŸã®ã§ã€sha256を使用ã—ã¾ã™ã€‚ DNSを使用ã—ã¦ãƒ¬ãƒ«ãƒ 用㮠KDC を見付ã‘ã‚‹(_I) DNSを使用ã—ã¦ãƒ¬ãƒ«ãƒ 用ã®KDCを見付ã‘ã‚‹ DNSを使用ã—ã¦ãƒ¬ãƒ«ãƒ ã®ãƒ›ã‚¹ãƒˆã‚’解決ã™ã‚‹ DNSを使用ã—ã¦ãƒ¬ãƒ«ãƒ ã®ãƒ›ã‚¹ãƒˆã‚’解決ã™ã‚‹(_N) 指紋リーダーを使用 IPAv2 を使用 Kerberos 5 を使用 LDAP を使用 LDAP èªè¨¼ã‚’使用 MD5 パスワードを使用 NIS を使用 シャドウパスワードを使用 TLS を使用 RFC-2830ã§å®šç¾©ã•ã‚Œã¦ã„るよã†ã«LDAPã«TLS拡張を使用ã™ã‚‹ã€‚ ldapsサーãƒãƒ¼URIã§å°ã‚’付ã‘ã¦ã¯ã„ã‘ãªã„。 Winbind を使用 Winbind èªè¨¼ã‚’使用 TLSを使用ã—ã¦æŽ¥ç¶šã‚’æš—å·åŒ–ã™ã‚‹(_T) IPAv2 ドメインã«å‚åŠ ã™ã‚‹ã«ã¯ "ドメインå‚åŠ " ボタンを使用ã—ã¾ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ± è¦å‘Š 有効ãªã‚‰ã°ã€/etc/security/access.conf ãŒãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚¢ã‚¯ã‚»ã‚¹ã®è¨±å¯ã®ãŸã‚ã«åˆ©ç”¨ã•ã‚Œã¾ã™ã€‚ Winbind Winbind ADSレルム(_E) Winbindドメインコントãƒãƒ¼ãƒ©(_N): Winbindè¨å®š Winbindドメイン(_D): Winbind èªè¨¼ Winbind ドメインã®å‚åŠ ã«å¤±æ•—ã—ã¾ã—ãŸã€‚ Winbind ドメインã®å‚åŠ ã«å¤±æ•—ã—ã¾ã—ãŸã€‚net join コマンドã¯æ¬¡ã®ã‚¨ãƒ©ãƒ¼ã«ã‚ˆã‚Šå¤±æ•—ã—ã¾ã—ãŸ: Winbindパスワード ã¯ã„ ldaps:// サーãƒãƒ¼ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’記入ã™ã‚‹ã‹ã€ã¾ãŸã¯LDAPèªè¨¼ç”¨ã®TLSを使用ã—ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“。 æ•°å—(_D) CA証明書をダウンãƒãƒ¼ãƒ‰ã™ã‚‹...(_D) è˜åˆ¥ã¨èªè¨¼(_I) ドメインã¸å‚åŠ ...(_J) KDCs(_K): é•·ã•(_L): パスワードãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ (_P): パスワード(_P): åŒã˜æ–‡å—(_S): ã‚»ã‚ュリティモデル(_S): 大文å—(_U) ユーザーアカウントデータベース(_U): スマートカードã®å–り出ã—時ã«è¡Œã†å‹•ä½œ ãƒãƒ¼ã‚«ãƒ«ãƒ•ã‚¡ã‚¤ãƒ«ã ã‘ã«ã‚ˆã‚‹èªè¨¼ã‚·ã‚¹ãƒ†ãƒ アカウント ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚µãƒ¼ãƒ“スã«ã‚ˆã‚‹èªè¨¼ã‚·ã‚¹ãƒ†ãƒ アカウント リモートサービスを通ã—ã¦ã®ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ã‚’èªè¨¼ ã‚ャッシュ化 root ã¨ã—ã¦ã®ã¿å®Ÿè¡Œå¯èƒ½ アカウントèªè¨¼ä¸ã« access.conf ã‚’ãƒã‚§ãƒƒã‚¯ã™ã‚‹ オフラインã§ãƒã‚°ã‚¤ãƒ³ã§ãるよã†ã«winbindã‚’è¨å®šã™ã‚‹ ユーザーåã«ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒãªã„ユーザーã¯ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¨ã¿ãªã™ã‚ˆã†winbindã‚’è¨å®šã™ã‚‹ ユーザーåã«ãƒ‰ãƒ¡ã‚¤ãƒ³ãŒãªã„ユーザーã¯ãƒ‰ãƒ¡ã‚¤ãƒ³ãƒ¦ãƒ¼ã‚¶ãƒ¼ã§ã¯ãªã„ã¨ã¿ãªã™ã‚ˆã†winbindã‚’è¨å®šã™ã‚‹ オフラインã§ãƒã‚°ã‚¤ãƒ³ã§ããªã„よã†ã«winbindã‚’è¨å®šã™ã‚‹ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã™ã‚‹ デフォルトã®LDAPベースDN デフォルトã®LDAPサーãƒãƒ¼ãƒ›ã‚¹ãƒˆåã¾ãŸã¯URI デフォルトã®NISドメイン デフォルトã®NISサーãƒãƒ¼ デフォルト㮠hesiod LHS デフォルト㮠hesiod RHS デフォルトã®Kerberos KDC デフォルトã®Kerberos管ç†ã‚µãƒ¼ãƒãƒ¼ デフォルトã®Kerberosレルムsecurity=adsã®æ™‚ã®Sambaã¨winbind用ã®ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®ãƒ¬ãƒ«ãƒ (realm) デフォルトã§ä½¿ç”¨ã™ã‚‹ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ« ダイアãƒã‚°ã¯ã‚ャンセルã•ã‚Œã¾ã—ãŸ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®æ¤œç´¢ãŠã‚ˆã³èªè¨¼ã«IPAv2をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ LDAPèªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦LDAPをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ MD5パスワードをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦NISをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ èªè¨¼ç”¨ã®SSSDã¯ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã§ã¯ç„¡åŠ¹ã§ã™ (è¨å®šã¯ç¾åœ¨ã‚‚サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã¾ã™) ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠SSSD をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ã€‚(ã¾ã サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ãªã„è¨å®šã§ã™) èªè¨¼ã‚’続ã‘ã¦å¤±æ•—ã—ãŸå ´åˆã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒãƒƒã‚¯ã‚’無効ã«ã™ã‚‹ 指紋リーダーã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ スマートカードã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ユーザー毎ã®è‡ªå‹•ecryptfsを無効ã«ã™ã‚‹ SSSD 内ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¿¡ä»»æƒ…å ±ã®ã‚ャッシュをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®ã‚ャッシュをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦hesiodをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ Kerberosèªè¨¼ã‚’デフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ シャドウパスワードをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ kerberos KDCã®æ¤œç´¢æ™‚ã«DNSを使用ã§ããªã„よã†ã«ã™ã‚‹ Kerberosレルムã®æ¤œç´¢æ™‚ã«DNSを使用ã§ããªã„よã†ã«ã™ã‚‹ LDAPãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®æ¤œç´¢ã«RFC-2307 bisスã‚ーマを使用ä¸å¯ã«ã™ã‚‹ TLSã¨LDAPã®ä½µç”¨ã‚’無効ã«ã™ã‚‹(RFC-2830) èªè¨¼ã§ winbind をデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦winbindをデフォルトã§ç„¡åŠ¹ã«ã™ã‚‹ ホストå解決用ã®winsを無効ã«ã™ã‚‹ テã‚スト UI ã®ãƒ¡ã‚¤ãƒ³ãƒ€ã‚¤ã‚¢ãƒã‚°ã®ä¸ã«ã€Œã‚ャンセルã€ã®ä»£ã‚ã‚Šã«ã€Œæˆ»ã‚‹ã€ã‚’表示ã™ã‚‹ アカウントèªè¨¼ä¸ã« access.conf ã‚’ãƒã‚§ãƒƒã‚¯ã—ãªã„ 利用者ã®æœ€åˆã®ãƒã‚°ã‚¤ãƒ³æ™‚ã«ãƒ›ãƒ¼ãƒ ディレクトリーを作æˆã—ãªã„ ä¸é©åˆ‡ãªãƒ†ã‚ストユーザーインタフェースを表示ã—ãªã„ ホストå解決ã«winsã¾ãŸã¯nisよりdnsを優先ã—ãªã„ パスワードã«æ•°å—ã‚’å¿…è¦ã¨ã—ãªã„ パスワードã«å°æ–‡å—ã‚’å¿…è¦ã¨ã—ãªã„ パスワードã«è¨˜å·ã‚’å¿…è¦ã¨ã—ãªã„ èªè¨¼ç”¨ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’デフォルトã§è¦æ±‚ã—ãªã„ パスワードã«å¤§æ–‡å—ã‚’å¿…è¦ã¨ã—ãªã„ IPAv2 ドメインã«å¯¾ã—㦠NTP をセットアップã—ã¾ã›ã‚“ portmapã€ypbindã€nscd ã‚’èµ·å‹•/åœæ¢ã—ãªã„ è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã‚’アップデートã›ãšã«ã€æ–°ã—ã„è¨å®šã‚’ãŸã 表示ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®æ¤œç´¢ãŠã‚ˆã³èªè¨¼ã«IPAv2をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ LDAPèªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦LDAPをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ MD5パスワードをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦NISをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ èªè¨¼ã® SSSD をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ã€‚(手動管ç†ã®è¨å®šã¨ä¸€ç·’ã«) ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—㦠SSSD をデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ã€‚(手動管ç†ã®è¨å®šã¨ä¸€ç·’ã«) èªè¨¼ã‚’続ã‘ã¦å¤±æ•—ã—ãŸå ´åˆã®ã«ã‚¢ã‚«ã‚¦ãƒ³ãƒˆãƒãƒƒã‚¯ã‚’有効ã«ã™ã‚‹ 指紋リーダーã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ スマートカードã«ã‚ˆã‚‹èªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ユーザー毎ã®è‡ªå‹•ecryptfsを有効ã«ã™ã‚‹ SSSD 内ã®ãƒ¦ãƒ¼ã‚¶ãƒ¼ä¿¡ä»»æƒ…å ±ã®ã‚ャッシュをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®ã‚ャッシュをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ï¼ˆSSSD ãŒä½¿ç”¨ã•ã‚Œã‚‹æ™‚ã«è‡ªå‹•çš„ã«ç„¡åŠ¹ã«ã™ã‚‹ï¼‰ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦hesiodをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ Kerberosèªè¨¼ã‚’デフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ シャドウパスワードをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ kerberos KDCã®æ¤œç´¢æ™‚ã«DNSを使用ã§ãるよã†ã«ã™ã‚‹ kerberosレルムã®æ¤œç´¢æ™‚ã«DNSを使用ã§ãるよã†ã«ã™ã‚‹ LDAPãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã®æ¤œç´¢ã«RFC-2307 bisスã‚ーマを使用å¯èƒ½ã«ã™ã‚‹ TLSã¨LDAPã®ä½µç”¨ã‚’有効ã«ã™ã‚‹(RFC-2830) èªè¨¼ã§winbindをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ãƒ¦ãƒ¼ã‚¶ãƒ¼æƒ…å ±ã«é–¢ã—ã¦winbindをデフォルトã§æœ‰åŠ¹ã«ã™ã‚‹ ホストå解決用ã®winsを有効ã«ã™ã‚‹ æ–°ã—ã„パスワードã®ãƒãƒƒã‚·ãƒ¥/æš—å·åŒ–アルゴリズムã“ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆã§ IPAv2 ドメインã«å‚åŠ ç®¡ç†è€…ã¨ã—ã¦winbindドメインã‹ã¾ãŸã¯ADSレルムã«å‚åŠ ã™ã‚‹ URLã‹ã‚‰CA証明書をãƒãƒ¼ãƒ‰ã™ã‚‹ ãƒãƒ¼ã‚«ãƒ«èªè¨¼ã¯ãƒãƒ¼ã‚«ãƒ«ãƒ¦ãƒ¼ã‚¶ãƒ¼ç”¨ã¨ã—ã¦å•é¡Œã‚ã‚Šã¾ã›ã‚“ パスワードã«ãŠã‘ã‚‹åŒã˜æ–‡å—クラスã®æ–‡å—ã®æœ€å¤§é€£ç¶šæ•° パスワードã«ãŠã‘ã‚‹åŒã˜æ–‡å—ã®æœ€å¤§é€£ç¶šæ•° パスワードã®æœ€å°æ•° パスワードã®æ–‡å—クラスã®æœ€å°æ•° èªè¨¼ã™ã‚‹å¯¾è±¡ã®ã‚µãƒ¼ãƒãƒ¼å ã‚‚ã—サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹è¨å®šã§ã‚ã£ã¦ã‚‚ã€æš—é»™ã®ã†ã¡ã«SSSDを利用ã—ãªã„ã§ãã ã•ã„。 --test ã®å対ã€å¤‰æ›´ã•ã‚ŒãŸè¨å®šã«å¯¾ã™ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—デート ホストå解決ã«winsã¾ãŸã¯nisよりdnsを優先ã™ã‚‹ デフォルトã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚’検出ã—ã¦è¡¨ç¤ºã™ã‚‹ パスワードã«å°‘ãªãã¨ã‚‚1æ–‡å—ã®æ•°å—ã‚’å¿…è¦ã¨ã™ã‚‹ パスワードã«å°‘ãªãã¨ã‚‚1æ–‡å—ã®å°æ–‡å—ã‚’å¿…è¦ã¨ã™ã‚‹ パスワードã«å°‘ãªãã¨ã‚‚1æ–‡å—ã®è¨˜å·ã‚’å¿…è¦ã¨ã™ã‚‹ パスワードã«å°‘ãªãã¨ã‚‚1æ–‡å—ã®å¤§æ–‡å—ã‚’å¿…è¦ã¨ã™ã‚‹ èªè¨¼ç”¨ã‚¹ãƒžãƒ¼ãƒˆã‚«ãƒ¼ãƒ‰ã‚’デフォルトã§è¦æ±‚ã™ã‚‹ è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—を復元 å‰å›žã®è¨å®šå¤‰æ›´ã®å‰ã«ä¿å˜ã•ã‚Œã¦ã„ã‚‹è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—を復元 å…¨ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ãƒãƒƒã‚¯ã‚¢ãƒƒãƒ—ã‚’ä¿å˜ samba 㨠winbind 用ã«ä½¿ç”¨ã™ã‚‹ã‚»ã‚ュリティモード IPAv2 ドメインã«å¯¾ã—㦠NTP をセットアップã—ã¾ã™ï¼ˆãƒ‡ãƒ•ã‚©ãƒ«ãƒˆï¼‰ シャドウパスワード ã“ã®ãƒ˜ãƒ«ãƒ—メッセージを表示ã—ã¦çµ‚了 システムをå‚åŠ ã•ã›ã‚‹IPAv2ドメイン winbindusedefaultdomainãŒæœ‰åŠ¹ã«ãªã£ã¦ã„ãªã„å ´åˆã€winbindã§ä½œæˆã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼åã®ãƒ‰ãƒ¡ã‚¤ãƒ³éƒ¨åˆ†ã¨ãƒ¦ãƒ¼ã‚¶ãƒ¼éƒ¨åˆ†ã‚’区別ã™ã‚‹ãŸã‚ã«ä½¿ç”¨ã™ã‚‹æ–‡å— winbindã§ä½œæˆã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã«ãƒ›ãƒ¼ãƒ ディレクトリーã¨ã—ã¦æŒãŸã›ã‚‹ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªãƒ¼ã‚’指定ã™ã‚‹ pam_faillock モジュールオプション IPAv2ドメインã®ãƒ¬ãƒ«ãƒ IPAv2 ドメインã®ã‚µãƒ¼ãƒãƒ¼ winbindã§ä½œæˆã—ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ãƒã‚°ã‚¤ãƒ³ã‚·ã‚§ãƒ«ã¨ã—ã¦æŒãŸã›ã‚‹ã‚·ã‚§ãƒ«ã‚’指定ã™ã‚‹ winbindãŒdomainã¾ãŸã¯adsユーザーã«å‰²ã‚Šå½“ã¦ã‚‹uidã®ç¯„囲 予期ã—ãªã„引数 ã™ã¹ã¦ã®è¨å®šãƒ•ã‚¡ã‚¤ãƒ«ã®ã‚¢ãƒƒãƒ—デート 使用方法: %s [オプション] ã‚‚ã—サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹è¨å®šã§ã‚ã‚Œã°ã€æš—é»™ã®ã†ã¡ã«SSSDを利用ã™ã‚‹ã€‚ èªè¨¼æ™‚ã«winbindã«Kerberos 5を使用ã•ã›ã‚‹ winbindã«ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã®èªè¨¼æ–¹æ³•ã‚’使用ã•ã›ã‚‹ ワークグループèªè¨¼ã‚µãƒ¼ãƒãƒ¼