[SSSD] [sssd PR#5724][comment] [WIP] SDAP: Continue when parsing entry fails

2021-07-22 Thread elkoniu
  URL: https://github.com/SSSD/sssd/pull/5724
Title: #5724: [WIP] SDAP: Continue when parsing entry fails

elkoniu commented:
"""
Right now this PR is placeholder as I was not able to reproduce client setup 
and trigger error to confirm it solves the issue.
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5724#issuecomment-885288079
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5724][opened] [WIP] SDAP: Continue when parsing entry fails

2021-07-22 Thread elkoniu
   URL: https://github.com/SSSD/sssd/pull/5724
Author: elkoniu
 Title: #5724: [WIP] SDAP: Continue when parsing entry fails
Action: opened

PR body:
"""
Configuration: IPA data provider with AD trust enabled
In some scenarios when processing entry fail it may lead
to marking the whole backend as offline. This PR
implements skipping broken entries instead of triggering fail.

Resolves: https://github.com/SSSD/sssd/issues/4893
"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5724/head:pr5724
git checkout pr5724
From 3126416454f641d8378e24d17d28545fe7c4eae5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Pawe=C5=82=20Po=C5=82awski?= 
Date: Fri, 23 Jul 2021 00:53:51 +0200
Subject: [PATCH] SDAP: Continue when parsing entry fails

Configuration: IPA data provider with AD trust enabled
In some scenarios when processing entry fail it may lead
to marking the whole backend as offline. This PR
implements skipping broken entries instead of triggering fail.

Resolves: https://github.com/SSSD/sssd/issues/4893
---
 src/providers/ldap/sdap_async.c | 13 +
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/src/providers/ldap/sdap_async.c b/src/providers/ldap/sdap_async.c
index da54705496..be552b50cf 100644
--- a/src/providers/ldap/sdap_async.c
+++ b/src/providers/ldap/sdap_async.c
@@ -1659,9 +1659,14 @@ static void sdap_get_generic_op_finished(struct sdap_op *op,
 case LDAP_RES_SEARCH_ENTRY:
 ret = state->parse_cb(state->sh, reply, state->cb_data);
 if (ret != EOK) {
-DEBUG(SSSDBG_CRIT_FAILURE, "reply parsing callback failed.\n");
-tevent_req_error(req, ret);
-return;
+if (ret == ENOENT) {
+DEBUG(SSSDBG_TRACE_FUNC, "reply callback found broken entry\n");
+break;
+} else {
+DEBUG(SSSDBG_CRIT_FAILURE, "reply parsing callback failed.\n");
+tevent_req_error(req, ret);
+return;
+}
 }
 
 sdap_unlock_next_reply(state->op);
@@ -2656,7 +2661,7 @@ static errno_t sdap_asq_search_parse_entry(struct sdap_handle *sh,
 if (!vals) {
 DEBUG(SSSDBG_OP_FAILURE,
   "Unknown entry type, no objectClass found for DN [%s]!\n", dn);
-ret = EINVAL;
+ret = ENOENT;
 goto done;
 }
 for (mi =0; mi < state->num_maps; mi++) {
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][comment] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

alexey-tikhonov commented:
"""
Hi,

I played with a tool a bit.

1) About `--cid` parsing:
```
# sssctl analyze request --cid
usage: sss_analyze request [-h] [--list] [--cid CID] [--pam] [--cachereq]
sss_analyze request: error: argument --cid: expected one argument
  --  ok
 
# sssctl analyze request --cid=
  -- nothing, feels weird
  
# sssctl analyze request --cid=z
 Checking nss responder for Client ID{client_id} ***
* Checking Backend for Client ID z 
  -- wouldn't it make sense to say something like "id 'z' not found"?
```

2) It seems `{client_id}` is printed instead of var value: 
```
# sssctl analyze request --cid=711
 Checking nss responder for Client ID{client_id} ***
(2021-07-22 19:58:05:232246): [nss] [cache_req_send] (0x0400): CR #: 
REQ_TRACE: New request [CID #711] 'Service by name'
* Checking Backend for Client ID 711 
```

3) Sometime line is dulicated in backend logs:
```
* Checking Backend for Client ID 711 
(2021-07-22 19:58:05): [be[ipasubid2.test]] [dp_attach_req] (0x0400): [RID#200] 
DP Request [Account #200]: REQ_TRACE: New request. [sssd.nss CID #711] Flags 
[0x0001].
(2021-07-22 19:58:05): [be[ipasubid2.test]] [dp_attach_req] (0x0400): [RID#200] 
DP Request [Account #200]: REQ_TRACE: New request. [sssd.nss CID #711] Flags 
[0x0001].
(2021-07-22 19:58:05): [be[ipasubid2.test]] [dp_attach_req] (0x0400): [RID#200] 
Number of active DP request: 1
(2021-07-22 19:58:05): [be[ipasubid2.test]] [sss_domain_get_state] (0x1000): 
[RID#200] Domain ipasubid2.test is Active
```
(`grep` yields single "DP Request [Account..." line)

4) When responder is restarted, `CID` is reset and log can contain multiple 
unrelated requests with the same CID. Tool greps everything and this might be 
misleading. There is enough info in the logs to catch this, but not very simple.

5) Probably `--merge` option to merge responder and backend logs into single 
log (sorted by timestamp) might make some sense (not sure).

6) What are we going to do with long running clients that issue thousands of 
requests per single connection? Currently tool will grep everything. It 
definitely makes sense for case like `id user`, but not for a long running 
process like db. Probably `--cr=N` option would make sense?

7) (Most important)
Currently `--list` output looks like:
```
(2021-07-22 21:33:21:956195): [nss] [accept_fd_handler] (0x0400): Client [CID 
#3][cmd id][0xd18ac0][27] connected!
```
This looks very similar to `grep` output.
At the very least I would shorten this to:
```
2021-07-22 21:33:21:956195: CID #3: cmd='id'
```
  --  all those `[nss] [accept_fd_handler] (0x0400)` doesn't add value here but 
makes reading more difficult.
Ideally output could look like following:
```
2021-07-22 21:33:21:956195: CID #3: cmd='id', cache requests:
  - 'User by name'   : 'rpc'
  - 'Group by ID': '32'
  - 'Initgroups by name' : 'rpc'
...
```
But this is, of course, not very trivial and again, we need to handle case of 
long running process that does a lot of requests under the same CID.


"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5712#issuecomment-885206857
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][-Waiting for review] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

Label: -Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][+Changes requested] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

Label: +Changes requested
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][comment] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

alexey-tikhonov commented:
"""
RHBZ: https://bugzilla.redhat.com/show_bug.cgi?id=1940517
"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5712#issuecomment-885101451
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][+Bugzilla] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

Label: +Bugzilla
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5712][+Waiting for review] Health and Support Analyzer - Add request log parsing utility

2021-07-22 Thread alexey-tikhonov
  URL: https://github.com/SSSD/sssd/pull/5712
Title: #5712: Health and Support Analyzer - Add request log parsing utility

Label: +Waiting for review
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5709][+Changes requested] General: Hardeninig getenv() usage

2021-07-22 Thread mzidek-gh
  URL: https://github.com/SSSD/sssd/pull/5709
Title: #5709: General: Hardeninig getenv() usage

Label: +Changes requested
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][closed] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
   URL: https://github.com/SSSD/sssd/pull/5721
Author: elkoniu
 Title: #5721: SYSDB: Add search index "originalADgidNumber"
Action: closed

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5721/head:pr5721
git checkout pr5721
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][-Ready to push] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: -Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][-Accepted] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: -Accepted
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][+Pushed] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: +Pushed
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][comment] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

pbrezina commented:
"""
Pushed PR: https://github.com/SSSD/sssd/pull/5721

* `sssd-1-16`
* c4b1b8208cd26916dc99b29e09df071c5659b9d4 - SYSDB: Add search index 
"originalADgidNumber"

"""

See the full comment at 
https://github.com/SSSD/sssd/pull/5721#issuecomment-884809600
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][+Ready to push] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: +Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][-branch: sssd-1-16] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: -branch: sssd-1-16
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][-Ready to push] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: -Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5721][+Ready to push] SYSDB: Add search index "originalADgidNumber"

2021-07-22 Thread pbrezina
  URL: https://github.com/SSSD/sssd/pull/5721
Title: #5721: SYSDB: Add search index "originalADgidNumber"

Label: +Ready to push
___
sssd-devel mailing list -- sssd-devel@lists.fedorahosted.org
To unsubscribe send an email to sssd-devel-le...@lists.fedorahosted.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/sssd-devel@lists.fedorahosted.org
Do not reply to spam on the list, report it: 
https://pagure.io/fedora-infrastructure


[SSSD] [sssd PR#5723][opened] Translations update from Weblate

2021-07-22 Thread weblate
   URL: https://github.com/SSSD/sssd/pull/5723
Author: weblate
 Title: #5723: Translations update from Weblate
Action: opened

PR body:
"""
Translations update from 
[Weblate](https://translate.fedoraproject.org/projects/sssd/sssd-master/) for 
SSSD/sssd.



Current translation status:

![Weblate translation 
status](https://translate.fedoraproject.org/widgets/sssd/-/sssd-master/horizontal-auto.svg)

"""

To pull the PR as Git branch:
git remote add ghsssd https://github.com/SSSD/sssd
git fetch ghsssd pull/5723/head:pr5723
git checkout pr5723
From 26351f79fdd87944261734d9616b3dd3f74f5b79 Mon Sep 17 00:00:00 2001
From: Weblate 
Date: Thu, 22 Jul 2021 11:17:35 +0200
Subject: [PATCH] po: update translations

(Russian) currently translated at 52.8% (1490 of 2821 strings)
Translation: SSSD/sssd-manpage
Translate-URL: https://translate.fedoraproject.org/projects/sssd/sssd-manpage-master/ru/
---
 src/man/po/ru.po | 662 +++
 1 file changed, 560 insertions(+), 102 deletions(-)

diff --git a/src/man/po/ru.po b/src/man/po/ru.po
index 931165a06f..0c981398c0 100644
--- a/src/man/po/ru.po
+++ b/src/man/po/ru.po
@@ -9,7 +9,7 @@ msgstr ""
 "Project-Id-Version: sssd-docs 2.3.0\n"
 "Report-Msgid-Bugs-To: sssd-de...@redhat.com\n"
 "POT-Creation-Date: 2021-07-12 20:51+0200\n"
-"PO-Revision-Date: 2021-07-20 07:04+\n"
+"PO-Revision-Date: 2021-07-22 09:17+\n"
 "Last-Translator: Olesya Gerasimenko \n"
 "Language-Team: Russian \n"
@@ -19,7 +19,7 @@ msgstr ""
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=3; plural=n%10==1 && n%100!=11 ? 0 : n%10>=2 && n"
 "%10<=4 && (n%100<10 || n%100>=20) ? 1 : 2;\n"
-"X-Generator: Weblate 4.7.1\n"
+"X-Generator: Weblate 4.7.2\n"
 
 #. type: Content of: 
 #: sss_groupmod.8.xml:5 sssd.conf.5.xml:5 sssd-ldap.5.xml:5 pam_sss.8.xml:5
@@ -63,9 +63,9 @@ msgid ""
 "replaceable>  GROUP"
 msgstr ""
-"sss_groupmod  параметры  ГРУППА"
+"sss_groupmod  options  GROUP"
 
 #. type: Content of: 
 #: sss_groupmod.8.xml:30 sssd-ldap.5.xml:21 pam_sss.8.xml:63
@@ -88,7 +88,7 @@ msgid ""
 "sss_groupmod modifies the group to reflect the changes "
 "that are specified on the command line."
 msgstr ""
-"sss_groupmod изменяет группу в соответствии с "
+"sss_groupmod изменяет параметры группы в соответствии с "
 "изменениями, внесёнными с помощью командной строки."
 
 #. type: Content of: 
@@ -106,8 +106,8 @@ msgid ""
 "-a,--append-group GROUPS"
 msgstr ""
-"-a,--append-group ГРУППЫ"
+"-a,--append-group "
+"GROUPS"
 
 #. type: Content of: 
 #: sss_groupmod.8.xml:48
@@ -117,7 +117,7 @@ msgid ""
 "a comma separated list of group names."
 msgstr ""
 "Добавить эту группу в группы, указанные с помощью параметра "
-"ГРУППЫ. Параметр ГРУППЫGROUPS. Параметр GROUPS является списком групп, разделённым запятыми."
 
 #. type: Content of: 
@@ -126,8 +126,8 @@ msgid ""
 "-r,--remove-group GROUPS"
 msgstr ""
-"-r,--remove-group ГРУППЫ"
+"-r,--remove-group "
+"GROUPS"
 
 #. type: Content of: 
 #: sss_groupmod.8.xml:62
@@ -136,7 +136,7 @@ msgid ""
 "replaceable> parameter."
 msgstr ""
 "Удалить эту группу из групп, указанных с помощью параметра "
-"ГРУППЫ."
+"GROUPS."
 
 #. type: Content of: 
 #: sssd.conf.5.xml:10 sssd.conf.5.xml:16
@@ -180,9 +180,9 @@ msgid ""
 "key2 = value2,value3\n"
 ""
 msgstr ""
-"[раздел]\n"
-"ключ = значение\n"
-"ключ2 = значение2,значение3\n"
+"[section]\n"
+"key = value\n"
+"key2 = value2,value3\n"
 ""
 
 #. type: Content of: 
@@ -438,7 +438,7 @@ msgstr ""
 #. type: Content of: 
 #: sssd.conf.5.xml:179
 msgid "Options usable in SERVICE and DOMAIN sections"
-msgstr "Параметры, используемые в разделах СЛУЖБА и ДОМЕН"
+msgstr "Параметры, используемые в разделах SERVICE и SERVICE"
 
 #. type: Content of: 
 #: sssd.conf.5.xml:183
@@ -1020,7 +1020,7 @@ msgstr ""
 #. type: Content of: 
 #: sssd.conf.5.xml:569
 msgid "ocsp_default_responder_signing_cert=NAME"
-msgstr "ocsp_default_responder_signing_cert=ИМЯ"
+msgstr "ocsp_default_responder_signing_cert=NAME"
 
 #. type: Content of: 
 #: sssd.conf.5.xml:571
@@ -3286,7 +3286,7 @@ msgstr ""
 "помощью GSSAPI. Поставщик данных поддоменов собирает данные по диапазонам "
 "SID и ID домена, к которому подключился клиент, а также удалённых доверенных "
 "доменов с локального контроллера доменов. Если PAC расшифровывается и "
-"обрабатывается, выполнятся некоторые из следующих операций:"
+"обрабатывается, выполняются некоторые из следующих операций:"
 
 #. type: Content of: 
 #: sssd.conf.5.xml:2139
@@ -4224,7 +4224,7 @@ msgid ""
 "as the user's login name reported to NSS."
 msgstr ""
 "Использовать полные имя и домен (в формате, заданном full_name_format домена)"
-" в качестве имени учётной записи пользователя, которое сообщается NSS."
+" в качестве имени для входа пользователя, которое сообщается NSS."
 
 #. type: Content of: 
 #: sssd.conf.5.xml:2823
@@ -4321,7 +4321,7 @@ msgid ""
 "sssd-ldap 5  for more inf