File: //usr/share/authconfig/authconfig.pyc
m
(Nc @ s< d k Z d k Z d k Z d k Z d k Z d k Z e i Z d k l Z d k
Z
e
i e
i d d Z
e
d o
d k Z n d e f d YZ d f d YZ d e f d
YZ e d j oa e i e i e i e i d e
d o
e Z n
e Z e i e i d
n d S( N( s OptionParsert c C s t i d i | d j S( Ni ( t syst argvt findt name( R ( ( t# /usr/share/authconfig/authconfig.pyt runsAs" s s authconfig-tuit UnihelpOptionParserc B s t Z d d Z RS( Nc C s | d j o
t i } n t i } t | d d } | p
| d j o
| } n | i | i i | i
| d d S( Nt encodingt asciit replace( t filet NoneR t stdoutt localet getpreferredencodingt srcencodingt getattrR t writet selft format_helpt decodet encode( R R R R ( ( R t
print_help) s
( t __name__t
__module__R R ( ( ( R R ( s t
Authconfigc B s} t Z d Z d Z d Z d Z d Z d Z d Z d Z d Z
d
Z d Z d Z
d
Z RS( Nc C s" t } t } t } t } t } d S( N( t Falset nis_availt kerberos_availt
ldap_availt smb_availt cache_avail( R R R R R R ( ( R t __init__3 s
c C s d S( Nt
authconfig( ( R ( ( R t module: s c C s$ t i i d | i | f d S( Ns %s: %s
( R t stderrR R R# t error( R R% ( ( R t
printError= s c C sy d } d } x\ | D]T } | d j o | d 7} n | o | t | d 7} n | | 7} | d 7} q W| d 7} | S( Ni t <t |t =i t >( t idxt helpt lt itemt addidxt str( R R- R/ R, R+ R. ( ( R t listHelp@ s
c C s t d | i } | i d j o | d 7} n t | } | i d d d d d t d | i d
d d d t d | i d d
d d d t d | i d d d d t d | i d d | i t i t
d t d | i d d d d t d | i d d d d t d | i d d t d d t d | i d d t d d t d | i d d d d t d | i d d d d t d! | i d" d d d t d# | i d$ d d d t d% | i d& d t d d t d' | i d( d t d) d t d* | i d+ d, d d d t d- | i d. d/ d d d t d0 | i d1 d t d2 d t d3 | i d4 d d d t d5 | i d6 d d d t d7 | i d8 d d d t d9 | i d: d d d t d; | i d< d t d= d t d> | i t i t } | i d? d | d t d@ | i dA d d d t dB | i dC d d d t dD | i dE d t d d t dF | i dG d t d d t dH | i dI d t dJ d t dK | i dL d d d t dM | i dN d d d t dO | i dP d d d t dQ | i dR d d d t dS | i dT d d d t dU | i dV d d d t dW | i dX d t dY d t dZ | i d[ d t d\ d t d] | i d^ d d d t d_ | i d` d d d t da | i db d d d t dc | i dd d d d t de | i df d dg d t dh | i di d t dJ d t dj | i dk d t dl d t dm | i dn d t dl d t do | i dp d dq d t dr | i ds d dt d t du | i dv d dw d t dx | i dy d dz d t d{ | i d| d d d t d} | i d~ d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d d d d t d | i d j oB | i d d d d t d | i d d d d t d n# | i d d d d d t d | i d d d d t d | i d d d d t d | i \ | _ } | o$ | i t d t i d n | i d j oL | i i o> | i i o0 | i i o" | i i o | i d g n d S( Ns usage: %s [options]R" s <--update|--test|--probe>s --enableshadows --useshadowt actiont
store_trueR, s$ enable shadowed passwords by defaults --disableshadows% disable shadowed passwords by defaults --enablemd5s --usemd5s enable MD5 passwords by defaults --disablemd5s disable MD5 passwords by defaults
--passalgot metavars& hash/crypt algorithm for new passwordss --enableniss* enable NIS for user information by defaults --disableniss+ disable NIS for user information by defaults --nisdomains <domain>s default NIS domains --nisservers <server>s default NIS servers --enableldaps+ enable LDAP for user information by defaults
--disableldaps, disable LDAP for user information by defaults --enableldapauths) enable LDAP for authentication by defaults --disableldapauths* disable LDAP for authentication by defaults --ldapservers default LDAP servers --ldapbasedns <dn>s default LDAP base DNs --enableldaptlss --enableldapssls enable use of TLS with LDAPs --disableldaptlss --disableldapssls disable use of TLS with LDAPs --ldaploadcacerts <URL>s load CA certificate from the URLs --enablesmartcards0 enable authentication with smart card by defaults --disablesmartcards1 disable authentication with smart card by defaults --enablerequiresmartcards0 require smart card for authentication by defaults --disablerequiresmartcards7 do not require smart card for authentication by defaults --smartcardmodules <module>s default smart card module to uses --smartcardactions( action to be taken on smart card removals --enablekrb5s) enable kerberos authentication by defaults
--disablekrb5s* disable kerberos authentication by defaults --krb5kdcs default kerberos KDCs --krb5adminservers default kerberos admin servers --krb5realms <realm>s default kerberos realms --enablekrb5kdcdnss' enable use of DNS to find kerberos KDCss --disablekrb5kdcdnss( disable use of DNS to find kerberos KDCss --enablekrb5realmdnss) enable use of DNS to find kerberos realmss --disablekrb5realmdnss* disable use of DNS to find kerberos realmss --enablesmbauths$ enable SMB authentication by defaults --disablesmbauths% disable SMB authentication by defaults --smbserverss <servers>s( names of servers to authenticate againsts --smbworkgroups <workgroup>s' workgroup authentication servers are ins --enablewinbinds. enable winbind for user information by defaults --disablewinbinds/ disable winbind for user information by defaults --enablewinbindauths, enable winbind for authentication by defaults --disablewinbindauths- disable winbind for authentication by defaults
--smbsecuritys <user|server|domain|ads>s* security mode to use for samba and winbinds
--smbrealms5 default realm for samba and winbind when security=adss
--smbidmapuids <lowest-highest>s4 uid range winbind will assign to domain or ads userss
--smbidmapgids4 gid range winbind will assign to domain or ads userss --winbindseparators <\>s the character which will be used to separate the domain and user part of winbind-created user names if winbindusedefaultdomain is not enableds --winbindtemplatehomedirs
</home/%D/%U>sG the directory which winbind-created users will have as home directoriess --winbindtemplateprimarygroups <nobody>sF the group which winbind-created users will have as their primary groups --winbindtemplateshells </bin/false>sD the shell which winbind-created users will have as their login shells --enablewinbindusedefaultdomains[ configures winbind to assume that users with no domain in their user names are domain userss --disablewinbindusedefaultdomains_ configures winbind to assume that users with no domain in their user names are not domain userss --enablewinbindofflines) configures winbind to allow offline logins --disablewinbindofflines+ configures winbind to prevent offline logins
--winbindjoins <Administrator>s> join the winbind domain or ads realm now as this administrators --enablewinss# enable wins for hostname resolutions
--disablewinss$ disable wins for hostname resolutions --enablepreferdnss3 prefer dns over wins or nis for hostname resolutions --disablepreferdnss: do not prefer dns over wins or nis for hostname resolutions --enablehesiods- enable hesiod for user information by defaults --disablehesiods. disable hesiod for user information by defaults --hesiodlhss <lhs>s default hesiod LHSs --hesiodrhss <rhs>s default hesiod RHSs --enablesssdsO enable SSSD for user information by default with manually managed configurations
--disablesssdsV disable SSSD for user information by default (still used for supported configurations)s --enablesssdauthsM enable SSSD for authentication by default with manually managed configurations --disablesssdauthsS disable SSSD for authentication by default (still used for supported configurationss
--enablecaches- enable caching of user information by defaults --disablecaches. disable caching of user information by defaults --enablelocauthorizes1 local authorization is sufficient for local userss --disablelocauthorizes1 authorize local users also through remote services --enablepamaccesss. check access.conf during account authorizations --disablepamaccesss5 do not check access.conf during account authorizations --enablesysnetauths0 authenticate system accounts by network servicess --disablesysnetauths0 authenticate system accounts by local files onlys --enablemkhomedirs6 create home directories for users on their first logins --disablemkhomedirs= do not create home directories for users on their first logins --nostarts+ do not start/stop portmap, ypbind, and nscds --tests> do not update the configuration files, only print new settingss authconfig-tuis --backs< display Back instead of Cancel in the main dialog of the TUIs --kickstarts1 do not display the deprecated text user interfaces --updatesD opposite of --test, update configuration files with changed settingss --updatealls update all configuration filess --probes) probe network for defaults and print thems unexpected argumenti s -h( t _R R# t usageR t parsert
add_optionR1 t authinfot password_algorithmsR t getSmartcardActionst Truet actshelpt
parse_argst optionst argsR& R t exitt probet testt updatet updateall( R R@ R7 R= R6 ( ( R t parseOptionsM sf Lc C s t i | i } | i | i o# | i o d | i | i f GHn | i o# | i o d | i | i f GHn | i
o- d | i
| i p d | i p d f GHn d S( Ns hesiod %s/%ss ldap %s/%s
s krb5 %s/%s/%s
R (
R9 t AuthInfoR R& t infoRB t hesiodLHSt hesiodRHSt
ldapServert
ldapBaseDNt
kerberosRealmt kerberosKDCt kerberosAdminServer( R RH ( ( R RB s
c C s+ t i | i | _ | i i | _ d S( N( R9 t readR R& RH t copyt pristineinfo( R ( ( R t readAuthInfo, s c C s t i t i t i o t i t i t i | _ t i t i t i | _ t i t i
t i o t i t i t i | _ t i t i
t i | _ t i t i t i | _ d S( N( t ost accessR9 t PATH_YPBINDt X_OKt PATH_LIBNSS_NISR R t
PATH_PAM_KRB5R t
PATH_PAM_LDAPt PATH_LIBNSS_LDAPR t PATH_PAM_SMBR t PATH_NSCDR ( R ( ( R t testAvailableSubsys1 s
44c C sT h d d <d d <d d <d d <d d
<d d <d
d <d d <d d <d d <d d <d d <d d <d d <d d <d d <d! d" <d# d$ <d% d& <d' d( <d) d* <d+ d, <d- d. <d/ d0 <d1 d2 <} h d3 d4 <d5 d6 <d7 d8 <d9 d: <d; d< <d= d> <d? d@ <dA dB <dC dD <dE dF <dG dH <dI dJ <dK dL <dM dN <dO dP <dQ dR <dS dT <dU dV <dW dX <dY dZ <d[ d\ <d] d^ <d_ d` <} xv | i D]h \ } } t | i da | o t | i | t
n t | i db | o t | i | t qqW| i i oY | i i | i i
j o@ | i i | i i | i _ | i i | i i | i _ n xV | i D]H \ } } t | i | d j o# t | i | t | i | qqW| i i oS | i i i dc dd } | de | i _ t | dd j o | dd | i _ qTn | i i ok y, t | i i } t i | | i _ Wqt t f j
o& | i! t" df dg | i _ qXn | i i# p> | i i$ o dh | i _% n | i i& o di | i _% qPn: | i i# t i' j o# | i! t" dj dk | i _% n d S(l Nt shadowt enableShadowt locauthorizet enableLocAuthorizet pamaccesst enablePAMAccesst
sysnetautht enableSysNetAutht mkhomedirt enableMkHomeDirt cachet enableCachet hesiodt enableHesiodt ldapt
enableLDAPt ldaptlst enableLDAPSt ldapautht enableLDAPAutht krb5t enableKerberost nist enableNISt
krb5kdcdnst kerberosKDCviaDNSt krb5realmdnst kerberosRealmviaDNSt smartcardt enableSmartcardt requiresmartcardt forceSmartcardt smbautht enableSMBt winbindt
enableWinbindt winbindautht enableWinbindAutht winbindusedefaultdomaint winbindUseDefaultDomaint winbindofflinet winbindOfflinet winst
enableWINSt sssdt
enableSSSDt sssdautht enableSSSDAutht preferdnst preferDNSinHostst passalgot passwordAlgorithmt hesiodlhsRI t hesiodrhsRJ t
ldapserverRK t
ldapbasednRL t ldaploadcacertt
ldapCacertURLt krb5realmRM t krb5kdcRN t krb5adminserverRO t smartcardmodulet smartcardModulet smartcardactiont smartcardActiont nisdomaint nisDomaint nisservert nisServert smbworkgroupt smbWorkgroupt
smbserverst
smbServerst smbsecurityt smbSecurityt smbrealmt smbRealmt smbidmapuidt smbIdmapUidt smbidmapgidt smbIdmapGidt winbindseparatort winbindSeparatort winbindtemplatehomedirt winbindTemplateHomedirt winbindtemplateprimarygroupt winbindTemplatePrimaryGroupt winbindtemplateshellt winbindTemplateShellt enablet disablet %i i s( Bad smart card removal action specified.R t md5t descrypts; Unknown password hashing algorithm specified, using sha256.t sha256(( t
bool_settingst string_settingst iteritemst optt aivalR R R? t setattrRH R< R R RM t getKerberosKDCRN t getKerberosAdminServerRO R t winbindjoint splitt lstt joinUsert lent joinPasswordR t intR+ R9 R; R t
ValueErrort
IndexErrorR& R5 R t enablemd5R t
disablemd5R: ( R R R R+ R R R ( ( R t overrideSettings: sF
& "
'
c C s t S( N( R< ( R ( ( R t doUI s c C s% | i i o | i i t n d S( N( R R? R RH t
joinDomainR< ( R ( ( R R s
c C s | i i | i i o | i i n | i i | i i o | i i n | i i | i
| i | i i | i i
d S( N( R RH t testLDAPCACertsR t downloadLDAPCACertt rehashLDAPCACertsR? RE R t writeChangedRR R t postt nostart( R ( ( R t
writeAuthInfo s
c C s | i | i i o | i t i d n | i i o7 t i d j o$ | i t
d t i d n | i | i | i
| i p5 | i i o | i t
d n t i d n | i i o | i i n | i d S( Ni s can only be run as rooti s dialog was cancelledi ( R RF R? RB R RA RC RT t getuidR& R5 RS R^ R R RH t printInfoR ( R ( ( R t run s"
!
( R R R! R# R& R1 RF RB RS R^ R R R R R ( ( ( R R 2 s
X
t
AuthconfigTUIc B s t Z d Z d Z d Z d Z d d d Z d Z d Z d Z
d Z d
Z d Z
d Z d
Z d Z d Z d Z RS( Nc C s d S( Ns authconfig-tui( ( R ( ( R R# s c C s2 | i i o! | i i o | i i t n d S( N( R R? t kickstartR RH R R< ( R ( ( R R s c C s | \ } } | i p d Sn x | oy t i | d t i pQ t d | d | d | d f } t i
| i t d | t d g n | d } q$ Wd S( Ni s The %s file was not found, but it is required for %s support to work properly.
Install the %s package, which provides this file.i i t Warningt Oki (
t datat compt warningt selectedRT RU t R_OKR5 t textt snackt ButtonChoiceWindowR t screen( R R R R R ( ( R t warnCallback s
%,c !
C sD t i t d d d g } t i t d d d g } t i t d d d g } t i t d d d g } t i t d d d g } t i
t d
d d g } t i t d d
d g } t i t d d d g }
t i t d d |
g } t i t d d | g } t i d d } t i t d } | i | d d d d d d t i t d t | i i! } } | i | d d d d d d | i$ | i% | | f t i t d t | i i& } } | i | d d d d d d t i t d t | i i( } } | i | d d d d d d | i$ | i% | | f t i t d t | i i* } } | i | d d d d d d | i$ | i% | | f t i t d t | i i, } } | i | d d d d d d t i d d! } t i t d" } | i | d d d d d d t i t d# t | i i/ d$ j } } | i | d d d d d d t i t d% t | i i1 } } | i | d d d d d d | i$ | i% | | f t i t d& t | i i3 } } | i | d d d d d d | i$ | i% | | f t i t d' t | i i5 } } | i | d d d d d d | i$ | i% | | f t i t d( t | i i7 } } | i | d d d d d d | i$ | i% | | f t i t d) t | i i9 }
} | i | d d d d d d | i$ | i% | | f t i t d* t | i i; } } | i | d d+ d d d d t i d d } | i | d d d d d, d d- d4 | i | d d d. d d, d d- d5 t i d d } t i? | i@ iA o
t d/ p
t d0 } t i? t d1 } | i | d d | i | d d t i d d } | i | d d d d | i | d d d d t iE } | iG iH | t d2 | iI | | iJ } | | j o
| iK | i _! | iK | i _& | iK | i _( | iK | i _* | iK | i _, | iK | i _1 | iK o d$ | i _/ n$ | i i/ d$ j o d3 | i _/ n | iK | i _3 | iK | i _5 | iK | i _7 |
iK | i _9 | iK | i _; n | iG iL | | j S(6 Nt cachingt nscdt Kerberost pam_krb5s LDAP authenticationt nss_ldapt LDAPt NISt ypbinds shadow passwords shadow-utilss SMB authenticationt pam_smbt Winbinds samba-clients Winbind authentications samba-commoni i s User Informationi t
anchorLeftt growxs Cache Informations
Use Hesiodi s Use LDAPi s Use NISi s Use Winbindi i t Authentications Use MD5 PasswordsR s Use Shadow Passwordss Use LDAP Authentications Use Kerbeross Use SMB Authentications Use Winbind Authentications! Local authorization is sufficienti t anchorTopt paddingt anchorRightt Backt Cancelt Nexts Authentication ConfigurationR ( i i i i ( i i i i (M R9 R] R5 R t warnCacheRY t warnKerberosRZ t warnLDAPAuthR[ t warnLDAPRV t warnNISt PATH_PWCONVt
warnShadowR\ t warnSMBt PATH_WINBIND_NETt warnWinbindNett PATH_PAM_WINBINDt warnWinbindAutht PATH_LIBNSS_WINBINDt warnWinbindR t Gridt infoGridt LabelR t setFieldt Checkboxt boolR RH Rj Ri t cbt setCallbackR Rl Rk Rn Rm Rv Ru R R t authGridR R R` R_ Rr t ldapaRt Rs R t smbR R Rb Ra t mechGridt
buttonGridt ButtonR? t backt cancelt okt mainGridt Formt formR t gridWrappedWindowt addR R t popWindow(! R Rs Rk R R R R R R Ri R R R R Rm R R R R R R Ra Ru R_ R R R R R R R
R R ( ( R t getMainChoices s ( ( ( ( ( . ( ( ( ( ( ( %%/
c C s t | } t i d | } d }
g } xx| D]p\ } } } } | d j op t i | t
t | i | } | i | | i t i d d |
d d | i | d |
d d n| d j o| t i | } | i | d |
d d d d t i d
t | i | d | } | i | | i | d |
d d nO| d
j o t i | } | i | d |
d d d d d d y# t | i | } | i | Wn t j
o | d } n Xd } g } x* | D]" } | i | | | | j f qWt i d | } | i | | i | d |
d d nV | d j oH t i d | d d d d } | i | | i | d |
d d n |
d 7}
q1 Wt i | o d p d d } t i" | } t i" | } | o t i" | p d }
| i | d d | o | i |
d d n | i | | o d p d d t i d d } | i | d d d d d d | i | d d d d d d t i) } | i+ i, | | | i. | x)t/ o!| i0 } | | j o Pn | } x | D] \ } } } } | d j o& t2 | i | | i3 d i4 q| d j o& t2 | i | | i3 d i5 q| d
j o& t2 | i | | i3 d i6 q| d j o | i3 d qqW| |
j o Pn | o | qqW| i+ i8 | | j S( Ni i t tfvalueR R i R t svalueR i( t hiddenR t rvalueR t lvaluei2 t flexDownt flexUpi ( i i i i ( i i i i ( i i i i ( i i i i (9 R t itemst rowsR R
t questionGridt rowt widgetst tt desct attrt valR R R R RH R t appendR R R t Entryt selt indexR R t
buttonlistt vt RadioBart radioBart TextboxReflowedt
anothertxtR R t canceltxtR t oktxtR t anotherR R R R R! t dtitleR" R< R t wcopyR t popR t valuet getSelectiont anothercbR# ( R RB R, R? R@ R> RG R R R RA R R7 R/ R- R4 RC R0 R R R2 R R3 R< R1 R: R. R9 ( ( R t getGenericChoicesA s
$
"
$
%
!
&
&
&
c C sl d t d d d f d t d d d f g } | i t d | t d | o
t d p
t d
S( NR& s LHS:RI i s RHS:RJ s Hesiod SettingsR R R ( R5 t questionsR RH t next( R RJ RI ( ( R t getHesiodSettings s 0c C s d t d d d f d t d d d f d t d d d f g } | i t d
| t d | o
t d p
t d
S( NR% s Use TLSRp R& s Server:RK i s Base DN:RL s
LDAP SettingsR R R ( R5 R RI R RH RJ ( R RJ RI ( ( R t getLDAPSettings s Ec C sl d t d d d f d t d d d f g } | i t d | t d | o
t d p
t d
S( NR& s Domain:R i s Server:R s NIS SettingsR R R ( R5 RI R RH RJ ( R RJ RI ( ( R t getNISSettings s 0c C s d t d d d f d t d d d f d t d d d f d t d
d d f d t d d
d f g } | i t d | t d | o
t d p
t d S( NR& s Realm:RM i s KDC:RN s
Admin Server:RO R% s" Use DNS to resolve hosts to realmsRz s! Use DNS to locate KDCs for realmsRx s Kerberos SettingsR R R ( R5 R RI R RH RJ ( R RJ RI ( ( R t getKerberosSettings s oc C s d t d d d f d t d d d f d t d d d f g } | i t d | t d
| o
t d p
t d S(
NR& s
Workgroup:R i s Servers:R s Shell:R s SMB SettingsR R R ( R5 RI R RH RJ ( R RJ RI ( ( R t getSMBSettings s Ec C s d t d d d f d t d d d f g } | i i p d | i _ n | i t d | t d
t d o; | i i | i i | i i t
| i i n t
S( NR& s Domain Administrator:R i s Password:R i t
Administrators
Join SettingsR R ( R5 RI R RH R RH R t suspendRD R R< t resume( R RI ( ( R t getJoinSettings s 0
c C s d t d d d f g } t i | i } | i | i i t
} | i i | o. | i
t d | t d t d } n | o | i i n | i t S( NR) s Some of the configuration changes you've made should be saved to disk before continuing. If you do not save them, then your attempt to join the domain may fail. Save changes?s
Save Settingst Not Yes( R5 R RI R9 RP R R& t orig_infoRD RH R t rett differsRH R RS R< ( R RW RI RV ( ( R t maybeGetJoinSettings s
c C s d d g } d d d d d d g } d } t | | } d
t d d | f d
t d d d f d
t d d d f d
t d d d f d
t d d | f g } | i t d | t d | o
t d p
t d d t d d | i S( Nt adst domains
/sbin/nologins /bin/shs /bin/bashs /bin/tcshs /bin/kshs /bin/zshc C s t i | t i S( N( RT RU t shellRW ( R\ ( ( R t shellexists s R( s Security Model:R R& s Domain:R i s Domain Controllers:R s
ADS Realm:R s Template Shell:R s Winbind SettingsR R R R> s Join DomainRG (
t securityt shellsR] t filterR5 RI R RH RJ RY ( R RJ R_ R] RI R^ ( ( R t getWinbindSettings s o)c C s d } t } x| d j o| d j o| i i | d j o | i } nn| d j o~ | i i om | i i pK | i i p> | i i
p1 | i i p$ | i i p | i i
p
| i i } | i | } qn| d j oq | i i p
| i i oS | i i
p1 | i i p$ | i i p | i i
p
| i i } | i | } qne| d j oW | i i oF | i i
p$ | i i p | i i
p
| i i } | i | } qn| d j oJ | i i
o9 | i i p | i i
p
| i i } | i | } qn | d j oX | i i oG | i i
p
| i i o, | i i
p
| i i } | i | } qnE | d j o7 | i i
p
| i i o t } | i | } qn | i i | o | d 7} q | d 8} q W| d j S(
Ni i i i i i i i i ( RJ R t rcR RH RD R$ Rl Rn Rr Rt Rv R R R t moreRK RL RM RN RO Ra ( R Rc Rb RJ ( ( R t
getChoices sH
Z
@
3
&
(
c C sB t d | i i } t i | i t d | t d g d S( Ns To connect to a LDAP server with TLS protocol enabled you need a CA certificate which signed your server's certificate. Copy the certificate in the PEM format to the '%s' directory.
Then press OK.R R ( R5 R RH t
ldapCacertDirR R R R ( R R ( ( R t displayCACertsMessage, s c C s | i i o t Sn z t i | _ | i } | i i t
d | i i d d | d | i p | i i
t Sn | i i o | i i o | i n Wd | i i
Xt S( NsN <Tab>/<Alt-Tab> between elements | <Space> selects | <F12> next screeni s - (c) 1999-2005 Red Hat, Inc.( R R? R R< R t SnackScreenR R# t packageversiont pushHelpLineR5 t drawRootTextRd t finishR RH Rp R Rf ( R Rh ( ( R R 4 s
( R R R# R R R$ R RH RK RL RM RN RO RS RY Ra Rd Rf R ( ( ( R R s r_
7 t __main__R" i ( R9 t acutilt gettextRT t signalR t lgettextR5 t optparset OptionParserR t setlocalet LC_ALLR R R R R R t SIGINTt SIG_DFLt
textdomainR# R RA ( R R# R R Ro R Rm Rn R R R9 R Rr RT R5 ( ( R t ? s* $