[debian-edu-commits] [Git][debian-edu/debian-edu-doc][master] Update Buster manual from the wiki.

Fri Feb 8 16:07:29 GMT 2019

Holger Levsen pushed to branch master at Debian Edu / debian-edu-doc


Commits:
4b295e63 by Holger Levsen at 2019-02-08T16:06:58Z
Update Buster manual from the wiki.

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


13 changed files:

- documentation/debian-edu-buster/debian-edu-buster-manual.da.po
- documentation/debian-edu-buster/debian-edu-buster-manual.de.po
- documentation/debian-edu-buster/debian-edu-buster-manual.es.po
- documentation/debian-edu-buster/debian-edu-buster-manual.fr.po
- documentation/debian-edu-buster/debian-edu-buster-manual.it.po
- documentation/debian-edu-buster/debian-edu-buster-manual.ja.po
- documentation/debian-edu-buster/debian-edu-buster-manual.nb.po
- documentation/debian-edu-buster/debian-edu-buster-manual.nl.po
- documentation/debian-edu-buster/debian-edu-buster-manual.pl.po
- documentation/debian-edu-buster/debian-edu-buster-manual.pot
- documentation/debian-edu-buster/debian-edu-buster-manual.xml
- documentation/debian-edu-buster/debian-edu-buster-manual.zh.po
- documentation/debian-edu-buster/debian-edu-buster-manual.zh_Hant.po


Changes:

=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.da.po
=====================================
@@ -10,7 +10,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-stretch-manual\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2016-10-06 19:20+0100\n"
 "Last-Translator: Joe Hansen <joedalton2 at yahoo.dk>\n"
 "Language-Team: Danish <debian-l10n-danish at lists.debian.org>\n"
@@ -2459,7 +2459,7 @@ msgstr ""
 "Hvis du ønsker en grafisk brugerflade, så vælg Arbejdsstation eller Server "
 "for tynde klienter udover denne."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Arbejdsstation</emphasis>"
 
@@ -6186,6 +6186,111 @@ msgstr ""
 "værktøj. Vær forsigtig og ødelæg ikke LDAP-databasen, samme advarsel gælder "
 "for JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main-Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Hovedserver</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "<computeroutput>git pull</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "<computeroutput>git pull</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"og kør så <computeroutput>/usr/sbin/debian-edu-pxeinstall</computeroutput> "
+"en gang."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, en grafisk brugerflade for LDAP"
@@ -10284,6 +10389,21 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"Yderligere information om ændring af PXE-installationer kan findes i "
+"kapitlet <link linkend=\"Installation--Modifying_PXE_installations"
+"\">Installation</link>."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.de.po
=====================================
@@ -16,7 +16,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-stretch-manual.de\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2019-02-07 18:58+0100\n"
 "Last-Translator: Wolfgang Schweer <wschweer at arcor.de>\n"
 "Language-Team: German <debian-l10n-german at lists.debian.org>\n"
@@ -2220,7 +2220,7 @@ msgstr ""
 "Arbeitsumgebung. Um letztere zu erhalten, wählen Sie zusätzlich "
 "»Arbeitsplatzrechner« oder »LTSP-Server«."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Arbeitsplatzrechner</emphasis>"
 
@@ -5643,6 +5643,111 @@ msgstr ""
 "Werkzeug. Verwenden Sie es vorsichtig und richten Sie kein Durcheinander in "
 "der LDAP-Datenbank an; dies gilt auch für JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Hauptserver</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "<computeroutput>git pull</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "<computeroutput>git pull</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"und dann einmal <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+"computeroutput> ausführen."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, ein LDAP-Editor mit graphischer Benutzeroberfläche"
@@ -6817,7 +6922,6 @@ msgid "HowTos for the desktop"
 msgstr "HowTos für die graphische Arbeitsumgebung"
 
 #. type: Content of: <article><section><section><title>
-#| msgid "Using KDE Plasma, GNOME, LXDE, Xfce and/or MATE together"
 msgid "Using Xfce, GNOME, KDE Plasma, LXDE, LXQt and/or MATE together"
 msgstr ""
 "Xfce, GNOME, KDE Plasma, LXDE, LXQt und/oder MATE nebeneinander benutzen"
@@ -6831,9 +6935,6 @@ msgstr ""
 
 #. type: CDATA
 #, no-wrap
-#| msgid ""
-#| "apt update\n"
-#| " apt install education-desktop-gnome education-desktop-lxde education-desktop-xfce education-desktop-mate"
 msgid ""
 "apt update\n"
 " apt install education-desktop-gnome education-desktop-kde education-desktop-lxde education-desktop-lxqt education-desktop-mate"
@@ -6878,7 +6979,6 @@ msgstr ""
 "XXQt oder MATE</link> auch direkt erfolgen."
 
 #. type: Content of: <article><section><section><title>
-#| msgid "new optional desktop environment: MATE 1.8"
 msgid "Set up a multi-language desktop environment"
 msgstr "Eine mehrsprachige Arbeitsumgebung einrichten"
 
@@ -9442,6 +9542,23 @@ msgstr ""
 "Benutzer »root« muss vorher <computeroutput>kinit</computeroutput> ausführen "
 "damit dies funtioniert."
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "Site specific modular installation. It is now possible to install only "
+#| "those educational packages that are actually wanted. See the <link "
+#| "linkend=\"Installation--Modular_installation\">installation</link> "
+#| "chapter for more information."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"Ortsspezifische Installation. Es ist nun möglich nur die ausdrücklich "
+"gewünschten Pakete mit Lernprogrammen zu installieren. Weitere Informationen "
+"dazu gibt es im <link linkend=\"Installation--Modular_installation"
+"\">installation</link> Installationskapitel."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 msgid ""
 "Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</"
@@ -9804,8 +9921,8 @@ msgstr ""
 "translations finden Sie Informationen, wie Sie eine neue PO-Datei für Ihre "
 "Sprache anlegen und wie Übersetzungen aktualisiert werden."
 
-#. <remark>
-#. status ignore</remark>
+#.  <remark>
+#. status ignore</remark> 
 #. type: Content of: <article><section><section><section><para>
 msgid ""
 "Please keep in mind that this manual is still under development, so don't "


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.es.po
=====================================
@@ -11,7 +11,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2015-03-30 22:30+0000\n"
 "Last-Translator: Rafael Ernesto Rivas <tatotat at gmail.com>\n"
 "Language-Team: Debian Spanish <debian-l10n-spanish at lists.debian.org>\n"
@@ -2456,7 +2456,7 @@ msgstr ""
 "seleccionar la opción de estación de trabajo, o servidor de clientes ligeros "
 "para agregarla."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr ""
 
@@ -5717,6 +5717,111 @@ msgstr ""
 "poderosa. Sea cuidadoso y no dañe la base de datos de LDAP, la misma "
 "advertencia aplica para JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">LTSP client kernel</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">LTSP client kernel</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "<computeroutput>git pull</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "<computeroutput>git pull</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"y luego ejecute una vez <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+"computeroutput>"
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, una interfaz gráfica para LDAP"
@@ -8794,6 +8899,13 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.fr.po
=====================================
@@ -9,7 +9,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2015-06-22 10:34+0200\n"
 "Last-Translator: Cédric Boutillier <boutil at debian.org>\n"
 "Language-Team: French <debian-l10n-french at lists.debian.org>\n"
@@ -2519,7 +2519,7 @@ msgstr ""
 "d'interface graphique. Si vous en voulez une, installez en plus le profil "
 "Station de travail ou Serveur de clients légers."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Station de travail</emphasis>"
 
@@ -6361,6 +6361,111 @@ msgstr ""
 "puissant. Utilisez-le avec précaution pour ne pas endommager la base de "
 "données LDAP. Le même avertissement s'applique à JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main-Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Serveur principal</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "run <computeroutput>apt-get upgrade</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "exécutez <computeroutput>apt-get upgrade</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"puis exécutez la commande <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+"computeroutput>."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, une interface graphique à LDAP"
@@ -10567,6 +10672,22 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"Des informations supplémentaires sur la modification des clients en réseau "
+"sont disponibles dans le <link linkend=\"Installation--"
+"Modifying_PXE_installations\">chapitre de ce manuel sur l'installation</"
+"link>."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid "run <computeroutput>apt-get update</computeroutput>"
@@ -16306,9 +16427,6 @@ msgstr ""
 #~ "Éditez <computeroutput>/etc/apt/sources.list</computeroutput> et "
 #~ "remplacez toutes les occurrences de « wheezy » par « jessie »."
 
-#~ msgid "run <computeroutput>apt-get upgrade</computeroutput>"
-#~ msgstr "exécutez <computeroutput>apt-get upgrade</computeroutput>"
-
 #~ msgid "run <computeroutput>apt-get dist-upgrade</computeroutput>"
 #~ msgstr "exécutez <computeroutput>apt-get dist-upgrade</computeroutput>"
 


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.it.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-wheezy-manual\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2018-05-21 18:26+0100\n"
 "Last-Translator: claudio <claudio.carboncini at gmail.com>\n"
 "Language-Team: Italian <debian-l10n-italian at list.debian.org>\n"
@@ -2251,7 +2251,7 @@ msgstr ""
 "grafica. Se si vuole un'interfaccia grafica selezionare in aggiunta al "
 "profilo, anche il profilo Workstation o LTSP Server."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Workstation</emphasis>"
 
@@ -5624,6 +5624,111 @@ msgstr ""
 "potente. Fare attenzione a non rovinare tutto il database LDAP, lo stesso "
 "vale per JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Main Server</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "run <computeroutput>apt-get upgrade</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "eseguire <computeroutput>apt-get upgrade</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"ed eseguire poi <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+"computeroutput> una volta."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, una GUI per LDAP"
@@ -9409,6 +9514,21 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"Maggiori informazioni sulla modifica dell installazione PXE possono essere "
+"trovati nella sezione <link linkend=\"Installation--"
+"Modifying_PXE_installations\">Installazione</link>."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""
@@ -14932,9 +15052,6 @@ msgstr ""
 #~ "Modificare il file <computeroutput>/etc/apt/sources.list</computeroutput> "
 #~ "e sostituire tutte le occorrenze di \"wheezy\" con \"jessie\"."
 
-#~ msgid "run <computeroutput>apt-get upgrade</computeroutput>"
-#~ msgstr "eseguire <computeroutput>apt-get upgrade</computeroutput>"
-
 #~ msgid "run <computeroutput>apt-get dist-upgrade</computeroutput>"
 #~ msgstr "eseguire <computeroutput>apt-get dist-upgrade</computeroutput>"
 


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.ja.po
=====================================
@@ -8,7 +8,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-stretch\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2017-10-09 05:36+0900\n"
 "Last-Translator: victory <victory.deb at gmail.com>\n"
 "Language-Team: Japanese <debian-japanese at lists.debian.org>\n"
@@ -2268,7 +2268,7 @@ msgstr ""
 "いません。グラフィカルユーザインターフェイスが必要であればこれに加えてワーク"
 "ステーションか LTSP サーバを選択してください。"
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Workstation (ワークステーション)</emphasis>"
 
@@ -5766,6 +5766,111 @@ msgstr ""
 "データベースを台無しにしないように注意してください。JXplorer についても同様で"
 "す。"
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Main-Server (中心サーバ)</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "<computeroutput>git pull</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "<computeroutput>git pull</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"それから <computeroutput>/usr/sbin/debian-edu-pxeinstall</computeroutput> を"
+"一度実行します。"
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "LDAP GUI JXplorer"
@@ -9530,6 +9635,20 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"PXEインストールの変更についてさらなる情報が<link linkend=\"Installation--"
+"Modifying_PXE_installations\">インストール</link>の章にあります。"
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.nb.po
=====================================
@@ -21,7 +21,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2019-02-05 21:20+0000\n"
 "Last-Translator: Petter Reinholdtsen <pere-weblate at hungry.com>\n"
 "Language-Team: Norwegian Bokmål <https://hosted.weblate.org/projects/debian-"
@@ -2170,7 +2170,7 @@ msgstr ""
 "grafisk brukergrensesnitt. Hvis du ønsker et grafisk brukergrensesnitt, "
 "velger du en arbeidsstasjon eller LTSP-tjener i tillegg til denne."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Arbeidsstasjon</emphasis>"
 
@@ -5496,6 +5496,111 @@ msgstr ""
 "NB: lokale enheter med <computeroutput>ltspfs</computeroutput> vil ikke "
 "fungere lenger uten LDM."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Hovedtjener</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "<computeroutput>git pull</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "<computeroutput>git pull</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"En linje slik som dette må legges til i  <computeroutput>tjener:/etc/debian-"
+"edu/www/debian-edu-install.dat</computeroutput>."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, en LDAP GUI"
@@ -9188,6 +9293,20 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"Mer info om nettverksklienter kan man finne i avsnittet <link linkend="
+"\"NetworkClients\">nettverksklienter</link>."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.nl.po
=====================================
@@ -6,7 +6,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-buster-manual\n"
 "Report-Msgid-Bugs-To: debian-edu-doc at packages.debian.org\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2019-01-28 16:11+0100\n"
 "Last-Translator: Frans Spiesschaert <Frans.Spiesschaert at yucom.be>\n"
 "Language-Team: Debian Dutch l10n Team <debian-l10n-dutch at lists.debian.org>\n"
@@ -2288,7 +2288,7 @@ msgstr ""
 "de hoofdserver, dan dient u bijkomend het profiel werkstation of LTSP-server "
 "te installeren."
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">Werkstation</emphasis>"
 
@@ -5777,6 +5777,111 @@ msgstr ""
 "te maken van de LDAP-database. Eenzelfde waarschuwing is ook op zijn plaats "
 "voor JXplorer."
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, fuzzy, no-wrap
+#| msgid "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr "/usr/share/debian-edu-config/tools/ltsp-addfirmware"
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Hoofdserver</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid "run <computeroutput>apt-get upgrade</computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "geef de opdracht <computeroutput>apt-get upgrade</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "and then run <computeroutput>/usr/sbin/debian-edu-pxeinstall</"
+#| "computeroutput> once."
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+"en geef dan eenmaal de opdracht <computeroutput>/usr/sbin/debian-edu-"
+"pxeinstall</computeroutput>."
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer, een grafische gebruikersinterface voor LDAP"
@@ -9669,6 +9774,21 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "More information about modifying PXE installations can be found in the "
+#| "<link linkend=\"Installation--Modifying_PXE_installations\">Installation</"
+#| "link> chapter."
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+"U vindt bijkomende informatie over het aanpassen van PXE-installaties in het "
+"hoofdstuk <link linkend=\"Installation--Modifying_PXE_installations"
+"\">Installatie</link>."
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""
@@ -15341,9 +15461,6 @@ msgstr ""
 #~ "Bewerk het bestand <computeroutput>/etc/apt/sources.list</computeroutput> "
 #~ "en vervang overal het woord \"wheezy\" door het woord \"jessie\"."
 
-#~ msgid "run <computeroutput>apt-get upgrade</computeroutput>"
-#~ msgstr "geef de opdracht <computeroutput>apt-get upgrade</computeroutput>"
-
 #~ msgid "run <computeroutput>apt-get dist-upgrade</computeroutput>"
 #~ msgstr ""
 #~ "geef de opdracht <computeroutput>apt-get dist-upgrade</computeroutput>"


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.pl.po
=====================================
@@ -1,7 +1,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: Polish (Debian Edu Documentation)\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2017-06-05 08:57+0000\n"
 "Last-Translator: Stanisław Krukowski <stdf021 at riseup.net>\n"
 "Language-Team: Polish <https://hosted.weblate.org/projects/debian-edu-"
@@ -2302,7 +2302,7 @@ msgid ""
 "addition to this one."
 msgstr ""
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr ""
 
@@ -4867,6 +4867,102 @@ msgid ""
 "JXplorer."
 msgstr ""
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">Serwer Główny</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr ""
@@ -7590,6 +7686,13 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 msgid ""
 "Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</"


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.pot
=====================================
@@ -7,7 +7,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL at ADDRESS>\n"
 "Language-Team: LANGUAGE <LL at li.org>\n"
@@ -1634,7 +1634,7 @@ msgid ""
 "addition to this one."
 msgstr ""
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr ""
 
@@ -4101,6 +4101,100 @@ msgid ""
 "JXplorer."
 msgstr ""
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr ""
@@ -6794,6 +6888,13 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 msgid ""
 "Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</"


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.xml
=====================================
@@ -1859,6 +1859,53 @@ resize2fs /dev/vg_system/skole+tjener+home0]]></screen>
 </para>
 </section>
 
+<section id="Administration--Kerberized_NFS">
+<title>Kerberized NFS
+</title>
+<para>Using Kerberos for NFS to mount home directories is a security feature. The levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and <emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means Kerberos authentication, <emphasis>i</emphasis> stands for integrity check and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both server and workstation increases with the security level, <emphasis>krb5i</emphasis> might be a good choice. 
+</para>
+<para>For new systems added with GOsa², Kerberos host keytab files are generated automatically.
+</para>
+<para> To create one for a system already configured with GOsa², login on the main server as root and run 
+</para><screen><![CDATA[/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>]]></screen>
+<para><emphasis role="strong">Please note:</emphasis> host keytab creation is possible for systems of type <emphasis>workstations</emphasis>, <emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using <emphasis>sshfs</emphasis> to mount home directories, so there's nothing to do for diskless workstations. 
+</para>
+
+<section id="Administration--How_to_enable_it">
+<title>How to enable it
+</title>
+<para><emphasis role="strong">Main server</emphasis> 
+</para>
+<itemizedlist>
+<listitem>
+<para>login as root 
+</para></listitem>
+<listitem>
+<para>run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for <emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</emphasis> 
+</para></listitem>
+<listitem>
+<para>edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment existing entries for /srv/*; make sure they look like this:   
+</para></listitem></itemizedlist><screen><![CDATA[/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)
+/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)]]></screen>
+<itemizedlist>
+<listitem>
+<para>run <computeroutput>exportfs -r</computeroutput> 
+</para></listitem>
+<listitem>
+<para>run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/krb5i</emphasis> is active for both entries. 
+</para></listitem></itemizedlist>
+<para><emphasis role="strong">Workstation</emphasis> 
+</para>
+<itemizedlist>
+<listitem>
+<para>login as root. 
+</para></listitem>
+<listitem>
+<para>run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</computeroutput> 
+</para></listitem></itemizedlist>
+</section>
+</section>
+
 <section id="Administration--JXplorer.2C_an_LDAP_GUI">
 <title>JXplorer, an LDAP GUI
 </title>
@@ -3234,6 +3281,9 @@ FIXMEs within the text. If you happen to know (a bit of) what needs to be explai
 <para>Kerberized <emphasis>ssh</emphasis>. A password isn't needed anymore for connections inside the internal network; root needs to run <computeroutput>kinit</computeroutput> first to enable it. 
 </para></listitem>
 <listitem>
+<para>Kerberized NFS. It is now possible to use more secure home directory access, see the <link linkend="Administration--Kerberized_NFS">Administration</link> chapter for more information. 
+</para></listitem>
+<listitem>
 <para>Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</computeroutput> with examples to make site specific changes easier. 
 </para></listitem>
 <listitem>


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.zh.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: debian-edu-doc\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2018-11-04 06:23+0000\n"
 "Last-Translator: Ma Yong <debuser at yeah.net>\n"
 "Language-Team: Chinese (Simplified) <https://hosted.weblate.org/projects/"
@@ -2195,7 +2195,7 @@ msgstr ""
 "只可安装一台主服务器！这个profile不包括图形用户界面。如果你需要图形用户界面，"
 "也选择工作站或者瘦客户端服务器加入其中。"
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr "<emphasis role=\"strong\">工作站</emphasis>"
 
@@ -5450,6 +5450,106 @@ msgstr ""
 "提醒：<computeroutput>ldapvi</computeroutput> 是一个强有力的工具。当心而不弄"
 "乱 LDAP 数据库，同样的提醒适用于 JXplorer。"
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Main Server</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">主服务器</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+#, fuzzy
+#| msgid ""
+#| "The default installation provides the <computeroutput>NetGroups</"
+#| "computeroutput>"
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr "默认安装提供<computeroutput>网络组</computeroutput>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr "JXplorer，一个 LDAP 图形用户界面"
@@ -8300,6 +8400,13 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 #, fuzzy
 #| msgid ""


=====================================
documentation/debian-edu-buster/debian-edu-buster-manual.zh_Hant.po
=====================================
@@ -6,7 +6,7 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PACKAGE VERSION\n"
-"POT-Creation-Date: 2019-02-07 16:13+0000\n"
+"POT-Creation-Date: 2019-02-08 16:06+0000\n"
 "PO-Revision-Date: 2019-01-28 08:11+0000\n"
 "Last-Translator: Louies <louies0623 at gmail.com>\n"
 "Language-Team: Chinese (Traditional) <https://hosted.weblate.org/projects/"
@@ -1659,7 +1659,7 @@ msgid ""
 "addition to this one."
 msgstr ""
 
-#. type: Content of: <article><section><section><section><itemizedlist><listitem><itemizedlist><listitem><para>
+#. type: Content of: <article><section><section><section><para>
 msgid "<emphasis role=\"strong\">Workstation</emphasis>"
 msgstr ""
 
@@ -4126,6 +4126,102 @@ msgid ""
 "JXplorer."
 msgstr ""
 
+#. type: Content of: <article><section><section><title>
+msgid "Kerberized NFS"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"Using Kerberos for NFS to mount home directories is a security feature. The "
+"levels <emphasis>krb5</emphasis>, <emphasis>krb5i</emphasis> and "
+"<emphasis>krb5p</emphasis> are supported (<emphasis>krb5</emphasis> means "
+"Kerberos authentication, <emphasis>i</emphasis> stands for integrity check "
+"and <emphasis>p</emphasis> for privacy, i.e. encryption); the load on both "
+"server and workstation increases with the security level, <emphasis>krb5i</"
+"emphasis> might be a good choice."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"For new systems added with GOsa², Kerberos host keytab files are generated "
+"automatically."
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"To create one for a system already configured with GOsa², login on the main "
+"server as root and run"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid "/usr/share/debian-edu-config/tools/gosa-modify-host <hostname> <IP>"
+msgstr ""
+
+#. type: Content of: <article><section><section><para>
+msgid ""
+"<emphasis role=\"strong\">Please note:</emphasis> host keytab creation is "
+"possible for systems of type <emphasis>workstations</emphasis>, "
+"<emphasis>servers</emphasis> and <emphasis>terminals</emphasis> but not for "
+"those of type <emphasis>netdevices</emphasis>. Also, LTSP clients are using "
+"<emphasis>sshfs</emphasis> to mount home directories, so there's nothing to "
+"do for diskless workstations."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><title>
+msgid "How to enable it"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><para>
+#, fuzzy
+#| msgid "<emphasis role=\"strong\">Table of services</emphasis>"
+msgid "<emphasis role=\"strong\">Main server</emphasis>"
+msgstr "<emphasis role=\"strong\">服務列表</emphasis>"
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>ldapvi -ZD '(cn=admin)'</computeroutput>, search for "
+"<emphasis>sec=sys</emphasis> and replace it with <emphasis>sec=krb5i</"
+"emphasis>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"edit <computeroutput>/etc/exports</computeroutput>: uncomment/adjust/comment "
+"existing entries for /srv/*; make sure they look like this:"
+msgstr ""
+
+#. type: CDATA
+#, no-wrap
+msgid ""
+"/srv/nfs4        gss/krb5i(rw,sync,fsid=0,crossmnt,no_subtree_check)\n"
+"/srv/nfs4/home0  gss/krb5i(rw,sync,no_subtree_check)"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "run <computeroutput>exportfs -r</computeroutput>"
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>exportfs</computeroutput> to control if <emphasis>gss/"
+"krb5i</emphasis> is active for both entries."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid "login as root."
+msgstr ""
+
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"run <computeroutput>/usr/share/debian-edu-config/tools/copy-host-keytab</"
+"computeroutput>"
+msgstr ""
+
 #. type: Content of: <article><section><section><title>
 msgid "JXplorer, an LDAP GUI"
 msgstr ""
@@ -6819,6 +6915,13 @@ msgid ""
 "<computeroutput>kinit</computeroutput> first to enable it."
 msgstr ""
 
+#. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
+msgid ""
+"Kerberized NFS. It is now possible to use more secure home directory access, "
+"see the <link linkend=\"Administration--Kerberized_NFS\">Administration</"
+"link> chapter for more information."
+msgstr ""
+
 #. type: Content of: <article><section><section><section><itemizedlist><listitem><para>
 msgid ""
 "Added configuration file <computeroutput>/etc/debian-edu/pxeinstall.conf</"



View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-doc/commit/4b295e63426cc26dd947bc9bae72d414c6399775

-- 
View it on GitLab: https://salsa.debian.org/debian-edu/debian-edu-doc/commit/4b295e63426cc26dd947bc9bae72d414c6399775
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-edu-commits/attachments/20190208/98ff8ab3/attachment-0001.html>
