Debian Handbook/11_network-services — Chinese (Simplified) @ Hosted Weblate: <computeroutput># </computeroutput><userinput>adduser openldap ssl-cert </userinput><computeroutput>Adding user `openldap' to group `ssl-cert' …

Translation

Source change

<computeroutput># </computeroutput><userinput>adduser openldap ssl-cert
</userinput><computeroutput>Adding user `openldap' to group `ssl-cert' ...
Adding user openldap to group ssl-cert
Done.
# </computeroutput><userinput>mv pki/private/ldap.falcot.com.key /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>chown root:.ssl-cert /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>chmod 0640 /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>./eassyrsa gen-dh
</userinput><computeroutput>
Note: using Easy-RSA configuratiomv pki/issued/ldap.falcot.com.crt /etc/ssl/certs/ldap.falcot.com.pem
</userinput><computeroutput># </computeroutput><userinput>chown from: ./vars

Using SSL: openssl OpenSSL 1.1.1c 28 May 2019
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
........................................................+..........................................................................+...............................................................................+............
[...]
DH parameters of size 2048 created at /home/roland/pki/dh.pem

ot.root /etc/ssl/certs/ldap.falcot.com.pem
</userinput><computeroutput># </computeroutput><userinput>~~mv pki/dh.pem~~chmod 0644 /etc/ssl/certs/ldap.falcot.com.pem
</userinput>

English

Chinese (Simplified)

Using SSL: openssl OpenSSL 1.1.1c  28 May 2019
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
........................................................+..........................................................................+...............................................................................+............
[...]
DH parameters of size 2048 created at /home/roland/pki/dh.pem

# </computeroutput><userinput>mv pki/dh.pem /etc/ssl/certs/ldap.falcot.com.pem
</userinput>

Needs editing

Skip

	English	Chinese (Simplified)	Actions
	<primary><emphasis>easy-rsa</emphasis></primary>	<primary><emphasis>slapd</emphasis></primary>
	The first step is to create a key pair (comprising a public key and a private key) for the LDAP server. The Falcot administrators reuse <emphasis>easy-rsa</emphasis> to generate it (see <xref linkend="sect.easy-rsa" />). Running <command>./easyrsa build-server-full ldap.falcot.com nopass</command> will ask you about the “common name”. The answer to that question <emphasis>must</emphasis> be the fully-qualified hostname for the LDAP server; in our case, <literal>ldap.falcot.com</literal>.	第一步是为 LDAP 服务器创建密钥对（包括公钥和私钥）。Falcot 公司的管理员重复使用 <emphasis>easy-rsa</emphasis> 来生成它（请参见 <xref linkend="sect.easy-rsa" />）。运行 <command>./easyrsa build-server-full ldap.falcot.com nopass</command> 会询问有关“通用名称”。对问题的回答<emphasis>必须</emphasis>是 LDAP 服务器完全合格的主机名；在我们的例子中是 <literal>ldap.falcot.com</literal>。
	This command creates a certificate in the <filename>pki/issued/ldap.falcot.com.crt</filename> file; the corresponding private key is stored in <filename>pki/private/ldap.falcot.com.key</filename>.	这个命令在 <filename>pki/issued/ldap.falcot.com.crt</filename> 文件中创建了证书；相应的私钥存储在 <filename>pki/private/ldap.falcot.com.key</filename> 中。
	Now these keys have to be installed in their standard location, and we must make sure that the private file is readable by the LDAP server which runs under the <literal>openldap</literal> user identity:	现在这些密钥必须安装到其标准位置上，并且我们必须确定私有文件可以被<literal>openldap</literal>身份下运行的 LDAP 服务器读取：
	<primary><filename>/etc</filename></primary><secondary><filename>/etc/ssl/</filename></secondary>	<primary>Apache</primary><secondary><filename>.htaccess</filename></secondary>
	<computeroutput># </computeroutput><userinput>adduser openldap ssl-cert </userinput><computeroutput>Adding user `openldap' to group `ssl-cert' ... Adding user openldap to group ssl-cert Done. # </computeroutput><userinput>mv pki/private/ldap.falcot.com.key /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>chown root.ssl-cert /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>chmod 0640 /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>mv pki/issued/ldap.falcot.com.crt /etc/ssl/certs/ldap.falcot.com.pem </userinput><computeroutput># </computeroutput><userinput>chown root.root /etc/ssl/certs/ldap.falcot.com.pem </userinput><computeroutput># </computeroutput><userinput>chmod 0644 /etc/ssl/certs/ldap.falcot.com.pem </userinput>	<computeroutput># </computeroutput><userinput>adduser openldap ssl-cert </userinput><computeroutput>Adding user `openldap' to group `ssl-cert' ... Adding user openldap to group ssl-cert Done. # </computeroutput><userinput>mv pki/private/ldap.falcot.com.key /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>chown root:ssl-cert /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>chmod 0640 /etc/ssl/private/ldap.falcot.com.key </userinput><computeroutput># </computeroutput><userinput>./eassyrsa gen-dh </userinput><computeroutput> Note: using Easy-RSA configuration from: ./vars Using SSL: openssl OpenSSL 1.1.1c 28 May 2019 Generating DH parameters, 2048 bit long safe prime, generator 2 This is going to take a long time ........................................................+..........................................................................+...............................................................................+............ [...] DH parameters of size 2048 created at /home/roland/pki/dh.pem # </computeroutput><userinput>mv pki/dh.pem /etc/ssl/certs/ldap.falcot.com.pem </userinput>
	The <command>slapd</command> daemon also needs to be told to use these keys for encryption. The LDAP server configuration is managed dynamically: the configuration can be updated with normal LDAP operations on the <literal>cn=config</literal> object hierarchy, and the server updates <filename>/etc/ldap/slapd.d</filename> in real time to make the configuration persistent. <command>ldapmodify</command> is thus the right tool to update the configuration:	还需要告知 <command>slapd</command> 守护进程使用这些密钥来加密。LDAP 服务器的配置被动态地管理：可以在 <literal>cn=config</literal> 对象层次结构上通过正常的 LDAP 操做来更新配置；并且服务器实时更新 <filename>/etc/ldap/slapd.d</filename> 而使配置持续。这样 <command>ldapmodify</command> 就是更新配置的合适工具了：
	<primary>OpenLDAP</primary><secondary><filename>/etc/ldap/slapd.d/</filename></secondary>	<primary>NFS</primary><secondary><filename>/etc/exports</filename></secondary>
	<primary>server</primary><secondary><command>slapd</command></secondary>	<primary>Samba</primary><secondary><command>smbd</command></secondary>
	<primary><command>slapd</command></primary>	<primary><command>ldapvi</command></primary>
	<primary>OpenLDAP</primary><secondary><command>slapd</command></secondary>	<primary>Apache</primary><secondary><command>a2enmod</command></secondary>

Loading…

None

String updated in the repository

English

Chinese (Simplified) 1199 characters edited Current translation Needs editing

<computeroutput># </computeroutput><userinput>adduser openldap ssl-cert
</userinput><computeroutput>Adding user `openldap' to group `ssl-cert' ...
Adding user openldap to group ssl-cert
Done.
# </computeroutput><userinput>mv pki/private/ldap.falcot.com.key /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>chown root:ssl-cert /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>chmod 0640 /etc/ssl/private/ldap.falcot.com.key
</userinput><computeroutput># </computeroutput><userinput>./eassyrsa gen-dh
</userinput><computeroutput>
Note: using Easy-RSA configuration from: ./vars

Using SSL: openssl OpenSSL 1.1.1c 28 May 2019
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
........................................................+..........................................................................+...............................................................................+............
[...]
DH parameters of size 2048 created at /home/roland/pki/dh.pem

# </computeroutput><userinput>mv pki/dh.pem /etc/ssl/certs/ldap.falcot.com.pem
</userinput>

a year ago

None

Source string changed

English 490 characters edited

a year ago

Browse all string changes

Things to check

Double space

Translation contains double space

Fix string

Reset

Mismatching line breaks

Number of new lines in translation does not match source

Reset

XML markup

XML tags in translation do not match source

Reset

Glossary

English	Chinese (Simplified)
key	按键	Debian Handbook
root		Debian Handbook
根用户

String information

Flags

xml-text

String age

a year ago

Last updated

11 months ago

Source string age

a year ago

Translation file

zh-CN/11_network-services.po, string 953