Debian release 3.6.1p2-2.

27 files changed, 4389 insertions, 2088 deletions

diff --git a/debian/changelog b/debian/changelog
index ebfce0d9d..5a89b7d77 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,22 @@
+openssh (1:3.6.1p2-2) unstable; urgency=low
+
+  * Force /etc/default/ssh to be non-executable, since dpkg apparently
+    doesn't deal with permissions changes on conffiles (closes: #192966).
+  * Use debconf 0.5's seen flag rather than the deprecated isdefault.
+  * Add GPL location to copyright file.
+  * Remove debian/postinst.old.
+  * Switch to po-debconf, with some careful manual use of po2debconf to
+    ensure that the source package continues to build smoothly on woody
+    (closes: #183986).
+  * Update debconf template translations:
+    - Brazilian Portugese (thanks, Andre Luis Lopes; see #183986).
+    - Japanese (thanks, Tomohiro KUBOTA; closes: #192429).
+  * Compile with -fno-builtin-log for now, otherwise gcc-3.3 complains
+    "log.h:59: warning: conflicting types for built-in function `log'". The
+    OpenSSH log() function has been renamed in upstream CVS.
+
+ -- Colin Watson <cjwatson@debian.org>  Mon, 19 May 2003 01:52:38 +0100
+
 openssh (1:3.6.1p2-1) unstable; urgency=medium
 
   * New upstream release, including fix for PAM user-discovery security hole
diff --git a/debian/config b/debian/config
index c27b69590..c25f2ae3f 100644
--- a/debian/config
+++ b/debian/config
@@ -19,7 +19,7 @@ fi
 
 if [ -e /etc/init.d/ssh ] && ! grep -q pidfile /etc/init.d/ssh
 then
-  db_fset ssh/use_old_init_script isdefault true
+  db_fset ssh/use_old_init_script seen false
   db_input medium ssh/use_old_init_script || true
   db_go
 
@@ -27,7 +27,7 @@ then
   [ "$RET" = "false" ] && exit 0
 else
   db_set ssh/use_old_init_script true
-  db_fset ssh/use_old_init_script isdefault false
+  db_fset ssh/use_old_init_script seen true
 fi
 
 if [ -z "$version" -a ! -e /etc/ssh/sshd_config ]
diff --git a/debian/control b/debian/control
index 885a474de..14fbb5669 100644
--- a/debian/control
+++ b/debian/control
@@ -8,8 +8,8 @@ Uploaders: Colin Watson <cjwatson@debian.org>
 
 Package: ssh
 Architecture: any
-Depends: ${shlibs:Depends}, libpam-modules (>= 0.72-9), debconf, adduser
-Conflicts: ssh-nonfree (<<2), ssh-socks, ssh2, debconf (<<0.2.17), debconf-tiny (<<0.2.17), sftp, rsh-client (<<0.16.1-1)
+Depends: ${shlibs:Depends}, ${debconf-depends}, libpam-modules (>= 0.72-9), adduser
+Conflicts: ssh-nonfree (<<2), ssh-socks, ssh2, sftp, rsh-client (<<0.16.1-1)
 Suggests: ssh-askpass, xbase-clients, dpkg (>=1.8.3.1), dnsutils
 Provides: rsh-client
 Description: Secure rlogin/rsh/rcp replacement (OpenSSH)
diff --git a/debian/copyright.head b/debian/copyright.head
index 5bd397447..6d95c8ae2 100644
--- a/debian/copyright.head
+++ b/debian/copyright.head
@@ -10,7 +10,8 @@ worldwide mirrors are listed here:
 The Debian specific parts of the package are mostly taken from the
 original ssh package, which has since been renamed as ssh-nonfree.
 
-The Debian patch is distributed under the terms of the GPL.
+The Debian patch is distributed under the terms of the GPL, which you
+can find in /usr/share/common-licenses/GPL.
 
 The upstream source for this package is a combination of the ssh
 branch that is being maintained by the OpenBSD team (starting from
diff --git a/debian/po/POTFILES.in b/debian/po/POTFILES.in
new file mode 100644
index 000000000..302e5538b
--- /dev/null
+++ b/debian/po/POTFILES.in
@@ -0,0 +1 @@
+[type: gettext/rfc822deb] templates.master
diff --git a/debian/po/da.po b/debian/po/da.po
new file mode 100644
index 000000000..13a6995fc
--- /dev/null
+++ b/debian/po/da.po
@@ -0,0 +1,383 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-1\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "Privilegie adskillelse"
+
+#. Description
+#: ../templates:3
+#, fuzzy
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"Privilegie adskillelse er slЕet til som standard, sЕ hvis du beslutter at "
+"slЕ det fra, skal du bruge \"UsePrivilegeSeparation no\" i /etc/ssh/"
+"sshd_config."
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "Aktiver Privilegie adskillelse"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"Denne version af OpenSSH indeholder den nye privilegie adskillelses "
+"mulighed. Det reducerer markant mФngden af kode der kЬrer som root, og "
+"derfor reducerer det impakten pЕ sikkerheds huller i sshd."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"DesvФrre, arbejder det ikke godt sammen med PAM. Ethvert PAM session modul "
+"der skal kЬres som root (pam_mkhomedir, f.eks.) vil fejle, og PAM tastatur-"
+"interaktive autentifikationer vil ikke virke."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"Siden du har bedt mig om at lave en sshd_config fil til dig, kan du vФlge om "
+"du vil have privilegie adskillelse slЕet til eller ej. Medmindre du kЬrer "
+"2.0 (i hvilket tilfФlde du *skal* sige nej her, ellers vil din sshd slet "
+"ikke starte) eller ved at du skal bruge PAM funktioner som ikke vil virke "
+"med dette tilvalg, skal du sige ja her."
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "Opret ny konfigurations fil"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"Denne version af OpenSSH har en betydeligt Фndret konfigurations fil fra den "
+"version der kom med Debian 'Potato', som du ser ud til at opgradere fra. Jeg "
+"kan nu oprette en ny konfigurations fil (//etc/ssh/sshd.config), som vil "
+"virke med den nye server version, men det vil ikke beholde eventuelle "
+"Фndringer du lavede med den gamle version."
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"Venligst bemФrk at den nye konfigurations fil vil sФtte vФrdien af "
+"'PermitRootLogin' til ja (som betyder at alle der kender roots password, kan "
+"tilgЕ maskinen via ssh direkte). Det er vedligeholderens mening, at det er "
+"den korrekte standard-vФrdi (se README.Debian for flere detaljer), men du "
+"kan altid redigere sshd_config og slЕ det fra, hvis du Ьnsker."
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+"Du rЕdes stФrkt til at lade mig genere en ny konfigurations fil for dig."
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "Tillad kun SSH protokol 2"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"Denne udgave af OpenSSH understЬtter version 2 af ssh-protokollen, som er "
+"betydeligt mere sikker. Det anbefales af deaktivere version 1. Dog kan det "
+"slЬve langsomme maskiner, og forhindre Фldre klienter i at opnЕ forbindelse "
+"(ssh klienten der kommer med \"potato\" er en af dem)."
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"Du skal ogsЕ bemФrke at de nЬgler som bliver anvendt til protokol 1 er "
+"forskellige, sЕ du vil ikke Фvre i stand til at bruge dem, hvis du kun "
+"tillader protokol 2 forbindelser."
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"Hvis du senere Фndrer din mening om denne indstilling, har README.Debian "
+"instruktioner pЕ hvad du skal gЬre ved din sshd_config fil."
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "ssh2-nЬgler flettet i opsФtningsfilerne"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"Siden version 3 har OpenSSH ikke lФngere separate filer for ssh1- og ssh2-"
+"nЬgler. Det betyder, at filerne authorized_keys2 og known_hosts2 ikke "
+"lФngere er nЬdvendige. De vil stadig dog stadig blive lФst for "
+"bagudkompatilitetens skyld."
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "Vil du fortsФtte (og risikere at afbryde aktive ssh-forbindelser)?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"Den udgave af /etc/init.d/ssh, du har installeret, vil sandsynligvis afbryde "
+"alle sshd-dФmoner. Det vil vФre en rigtigt dЕrlig idИ, hvis du er ved at "
+"opgradering via en ssh-forbindelse."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Du kan afhjФlpe dette ved at tilfЬje \"--pidfile /var/run/sshd.pid\" til "
+"'start-stop-daemon'-linjen i stop-afsnittet af filen."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr ""
+"BEMфRK: Videregivelse af X11 og adgangkontrol er som standard deaktiveret."
+
+#. Description
+#: ../templates:93
+#, fuzzy
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Af sikkerhedsgrunde har Debianudgaven af ssh sat ForwardX11 og ForwardAgent "
+"til 'off' som standard."
+
+#. Description
+#: ../templates:93
+#, fuzzy
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Du kan aktivere dem for servere, du stoler pЕ i en af opsФtningsfilerne "
+"eller med kommandolinjetilvalget '-X'."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr "Advarsel: rsh-serveren er installeret --- sikkert ikke en god idИ"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Den sikkerhed, du nok Ьnskede at opnЕ ved at installere ssh undermineres "
+"ved, at du har rsh-server installeret. Jeg vil rЕde dig til at fjerne pakken "
+"rsh-server."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "Advarsel: telnetd er installeret --- sikkert ikke en god idИ"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Jeg vil rЕde dig til enten at fjerne pakken telnetd (hvis du i virkeligheden "
+"ikke har brug for at tilbyde telnet-adgang) eller installere telnetd-ssl, sЕ "
+"der i det mindste er en mulighed for, at telnet-sessioner ikke sender "
+"adgangskoder og sessions-oplysninger ukrypteret over netvФrket."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Advarsel: du skal oprette en ny vФrtsnЬgle"
+
+#. Description
+#: ../templates:119
+#, fuzzy
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Der ligger en gammel, IDEA-krypteret /etc/ssh/ssh_host_key. OpenSSH kan ikke "
+"hЕndtere sЕdan en vФrtsnЬglefil, og jeg kan ikke finde vФrktЬjet ssh-keygen "
+"fra den gamle (ikke-frie, 'non-free') SSH-installation."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "Vil du have, at /usr/bin/ssh-keysign bliver installeret 'SUID root'?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Du har mulighed for at installere ssh-keysign hjФlperen med SUID-flaget sat."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Hvis du gЬr ssh-keysign SUID, vil du blive i stand til at benytte SSH "
+"protokol 2's vФrtsnavn-baserede autentifikation."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Hvis du er i tvivl, vil jeg rЕde dig til at installere den med SUID. Hvis "
+"det skaber problemer, kan du Фndre det tilbage igen ved at kЬre: dpkg-"
+"reconfigure ssh"
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "Vil du kЬre sshd-serveren?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Denne pakke indeholder bЕde ssh-klienten og sshd-serveren."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Normalt vil sshd sikker skalserver ('Secure Shell Server') blive aktiveret "
+"og tillade fjerne brugere i at logge pЕ via ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Hvis du udelukkende er interesseret i at bruge ssh-klienten til udgЕende "
+"forbindelser fra denne maskine, og ikke Ьnsker at tilgЕ denne maskine udefra "
+"via ssh, kan du nu deaktivere sshd."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/de.po b/debian/po/de.po
new file mode 100644
index 000000000..78efa75af
--- /dev/null
+++ b/debian/po/de.po
@@ -0,0 +1,335 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "Wollen Sie weitermachen (und das Killen der Session riskieren)?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"Die Version von /etc/init.d/ssh, die Sie installiert haben, wird vermutlich "
+"Ihre aktiven ssh-Instanzen killen. Wenn Sie das Upgrade via ssh erledigen, "
+"dann ist das ein Problem."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Sie kЖnnen das Problem beheben, indem sie \"--pidfile /var/run/sshd.pid\" an "
+"die start-stop-daemon Zeile in dem Bereich stop der Datei /etc/init.d/ssh "
+"ergДnzen."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr "HINWEIS: Forwarden von X11 und Authorisierung ist abgeschaltet."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Aus SicherheitsgrЭnden sind die Debian Pakete von ssh ForwardX11 und "
+"ForwardAgent auf \"off\" gesetzt."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Sie kЖnnen dies fЭr Server, denen Sie trauen, entweder per Eintrag in die "
+"Konfigurations Dateien oder per Kommando-Zeilen Option -X Дndern."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+"Weitere Details koennen Sie in /usr/share/doc/ssh/README.Debian finden."
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr "Warnung: rsh-server ist installiert --- mЖglicherweise"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"ist es eine schlechte Idee, den rsh-server installiert zu haben, da er die "
+"Sicherheit untergrДbt. Wir empfehlen, das Paket zu entfernen."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "Warnung: telnetd ist installiert --- schlechte Idee"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Wir empfehlen das telnetd Paket zu entfernen (falls Sie keinen telnet Zugang "
+"anbieten) oder telnetd-ssl zu installieren, so daъ Sie verhindern kЖnnen, "
+"daъ Login und Password unverschlЭsselt durch das Netz gesendet werden."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Warnung: Sie mЭssen einen neuen Host Key erzeugen"
+
+#. Description
+#: ../templates:119
+#, fuzzy
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Es existiert eine alte Variante von /etc/ssh/ssh_host_key welche per IDEA "
+"verschlЭsselt ist. OpenSSH kann eine solche Host Key Datei nicht lesen und "
+"ssh-keygen von der alten (nicht-freien) ssh Installation kann nicht gefunden "
+"werden."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "MЖchten Sie den sshd Server starten?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Das Paket enthДlt sowohl den Client als auch den sshd Server."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Normal wird der sshd Secure Shell Server fЭr Remote Logins per ssh gestartet."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Wenn Sie nur den ssh client nutzen wollen, um sich mit anderen Rechnern zu "
+"verbinden und sich nicht per ssh in diesen Computer einloggen wollen, dann "
+"kЖnnen Sie hier den sshd abschalten."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/es.po b/debian/po/es.po
new file mode 100644
index 000000000..53ff806b1
--- /dev/null
+++ b/debian/po/es.po
@@ -0,0 +1,386 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "SeparaciСn de privilegios"
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"La separaciСn de privilegios estА activa por defecto, por lo que si decide "
+"desactivarla, tiene que aЯadir \"UsePrivilegeSeparation no\" al fichero /etc/"
+"ssh/sshd_config."
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+"Nota: Si utiliza un nЗcleo Linux de la serie 2.0, la separaciСn de "
+"privilegios fallarА estrepitosamente y sshd no funcionarА a no ser que la "
+"desactive."
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "Activar separaciСn de privilegios"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"Esta versiСn de OpenSSH incluye una nueva opciСn de separaciСn de "
+"privilegios que reduce significativamente la cantidad de cСdigo que se "
+"ejecuta como root, por lo que reduce el impacto de posibles agujeros de "
+"seguridad en sshd."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"Desafortunadamente, la separaciСn de privilegios no interactЗa correctamente "
+"con PAM. Cualquier mСdulo PAM que necesite ejecutarse como root (como, por "
+"ejemplo, pam_mkhomedir) y la autentificaciСn interactiva PAM con teclado no "
+"funcionarАn."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"Puesto que ha elegido crear automАticamente el fichero sshd_config, puede "
+"decidir ahora si quiere activar la opciСn de separaciСn de privilegios. A "
+"menos que utilice la versiСn 2.0 (en cuyo caso debe responer no aquМ o sshd "
+"no arrancarА) o sepa que necesita usar ciertas caracterМsticas de PAM que "
+"funcionan con esta opciСn, deberМa responder sМ a esta pregunta."
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "Generar un nuevo fichero de configuraciСn"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"Esta versiСn de OpenSSH tiene un fichero de configuraciСn considerablemente "
+"diferente del incluido en Debian Potato, que es la versiСn desde la que "
+"parece estar actualizando. Puede crear automАticamente un nuevo fichero de "
+"configuraciСn (/etc/ssh/sshd_config), que funcionarА con la nueva versiСn "
+"del servidor, pero no incuirА las modificaciones que hiciera en la versiСn "
+"antigua."
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"AdemАs, recuerde que este nuevo fichero de configuraciСn dirА sМ en la "
+"opciСn 'PermitRootLogin', por lo que cualquiera que conozca la contraseЯa de "
+"root podrА entrar mediante ssh directamente como root. En opiniСn del "
+"mantenedor Иsta es la opciСn predeterminada mАs adecuada (puede leer README."
+"Debian si quiere conocer mАs detalles), pero siempre puede editar "
+"sshd_config y poner no si lo desea."
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+"Es muy recomendable que permita que se genere un nuevo fichero de "
+"configuraciСn ahora."
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "Permitir sСlo la versiСn 2 del protocolo SSH"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"Esta versiСn de OpenSSH soporta la versiСn 2 del protocolo ssh, que es mucho "
+"mАs segura que la anterior. Se recomienda desactivar la versiСn 1, aunque "
+"funcionarА mАs lento en mАquinas modestas y puede impedir que se conecten "
+"clientes antiguos, como, por ejemplo, el incluido en \"potato\"."
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"TambiИn tenga en cuenta que las claves utilizadas para el protocolo 1 son "
+"diferentes, por lo que no podrА usarlas si Зnicamente permite conexiones "
+"mediante la versiСn 2 del protocolo."
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"Si mАs tarde cambia de opiniСn, el fichero README.Debian contiene "
+"instrucciones sobre cСmo modificar en el fichero sshd_config."
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "Las claves ssh2 ya se incluyen en los ficheros de configuraciСn"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"A partir de la versiСn 3, OpenSSH ya no utiliza ficheros diferentes para las "
+"claves ssh1 y ssh2. Esto quiere decir que ya no son necesarios los ficheros "
+"authorized_keys2 y known_hosts2, aunque aЗn se seguirАn leyendo para "
+"mantener compatibilidad hacia atrАs."
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "©Desea continuar, aЗn a riesgo de matar las sesiones ssh activas?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"La versiСn de /etc/init.d/ssh que tiene instalada es muy probable que mate "
+"el demonio ssh. Si estА actualizando a travИs de una sesiСn ssh, puede que "
+"no sea muy buena idea."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Puede arreglarlo aЯadiendo \"--pidfile /var/run/sshd.pid\" a la lМnea 'start-"
+"stop-daemon', en la secciСn 'stop' del fichero."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr "NOTA: ReenvМo de X11 y AutorizaciСn desactivadas por defecto."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Por razones de seguridad, la versiСn de ssh de Debian tiene por defecto "
+"ForwardX11 y ForwardAgent desactivadas."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Puede activar estas opciones para los servidores en los que confМe, en los "
+"ficheros de configuraciСn o con la opciСn -X en lМnea de comandos."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr "Puede encontrar mАs detalles en /usr/share/doc/ssh/README.Debian."
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr "Aviso: tiene rsh-server instalado"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Tener rsh-server instalado representa un menoscabo de la seguridad que "
+"probablemente desea obtener instalando ssh. Es muy aconsejable que borre ese "
+"paquete."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "Aviso: tiene telnetd instalado"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Es muy aconsejable que borre el paquete telnetd si no necesita realmente "
+"ofrecer acceso mediante telnet o instalar telnetd-ssl para que las "
+"contraseЯas, nombres de usuario y demАs informaciСn de las sesiones telnet "
+"no viajen sin cifrar por la red."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Aviso: debe crear una nueva clave para su servidor"
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Su sistema tiene un /etc/ssh/ssh_host_key antiguo, que usa cifrado IDEA. "
+"OpenSSH no puede manejar este fichero de claves y tampoco se encuentra la "
+"utilidad ssh-keygen incluida en el paquete ssh no libre."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "NecesitarА generar una nueva clave para su servidor."
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "©Quiere instalar /usr/lib/ssh-keysign SUID root?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Puede instalar ssh-keysign con el bit SUID (se ejecutarА con privilegios de "
+"root)."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Si hace ssh-keysign SUID, podrА usar la autentificiaciСn basada en servidor "
+"de la versiСn 2 del protocolo SSH."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Si duda, se recomienda que lo instale SUID. Si surgen problemas puede "
+"cambiar de opiniСn posteriormente ejecutando ╚dpkg-reconfigure ssh╩."
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "©Quiere ejecutar el servidor sshd?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Este paquete contiene el cliente ssh y el servidor sshd."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Generalmente, el servidor de ssh (Secure Shell Server) se ejecuta para "
+"permitir el acceso remoto mediante ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Si sСlo estА interesado en usar el cliente ssh en conexiones salientes del "
+"sistema y no quiere acceder a Иl mediante ssh, entonces puede desactivar "
+"sshd."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/fr.po b/debian/po/fr.po
new file mode 100644
index 000000000..c851193ee
--- /dev/null
+++ b/debian/po/fr.po
@@ -0,0 +1,401 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-15\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "SИparation des privilХges"
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"La sИparation des privilХges est activИe par dИfaut ; si vous souhaitez la "
+"dИsactiver, vous devez ajouter ╚═UsePrivilegeSeparation no═╩ dans /etc/ssh/"
+"sshd_config."
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+"NB═! Si vous avez un noyau Linux de la sИrie des 2.0, la sИparation des "
+"privilХges ne fonctionne pas, et votre dИmon sshd ne se lancera que si vous "
+"avez explicitement dИsactivИ la sИparation des privilХges."
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "Activer la sИparation des privilХges"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"Cette version d'OpenSSH est livrИe avec la nouvelle option de sИparation des "
+"privilХges. Cela rИduit de maniХre significative la quantitИ de code "
+"s'exИcutant en tant que super-utilisateur, et donc rИduit l'impact des trous "
+"de sИcuritИ dans sshd."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"Malheureusement, la sИparation des privilХges interagit mal avec PAM. Tous "
+"les modules de session PAM qui doivent Йtre exИcutИs en tant que super-"
+"utilisateur (pam_mkhomedir, par exemple) ne s'exИcuteront pas, et "
+"l'authentification interactive au clavier ne fonctionnera pas."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"Comme vous souhaitez que je gИnХre le fichier de configuration sshd_config Ю "
+"votre place, vous pouvez choisir d'activer ou non l'option de sИparation des "
+"privilХges. Si vous utilisez un noyau 2.0 (dans ce cas vous *devez* "
+"dИsactiver cette option ou alors sshd ne se lancera pas) ou bien si vous "
+"avez besoin de fonctionnalitИs PAM, cela ne fonctionnera pas si cette option "
+"est activИe, dans le cas contraire vous devriez l'activer."
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "CrИer un nouveau fichier de configuration"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"Cette version d'OpenSSH utilise un fichier de configuration qui a ИnormИment "
+"changИ depuis la version contenue dans la distribution Debian ╚═Potato═╩, "
+"depuis laquelle vous semblez faire une mise Ю jour. Je peux gИnИrer "
+"maintenant pour vous un nouveau fichier de configuration (/etc/ssh/sshd."
+"config) qui marchera avec la nouvelle version du serveur, mais ne contiendra "
+"aucun des rИglages que vous avez faits sur l'ancienne version."
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"Veuillez noter que ce nouveau fichier de configuration positionnera la "
+"valeur de ╚═PermitRootLogin═╩ Ю ╚═yes═╩ (ce qui signifie que quiconque "
+"connaissant le mot de passe du super-utilisateur peut se connecter en tant "
+"que tel sur la machine). Le responsable du paquet pense que c'est lЮ un "
+"comportement par dИfaut normal (lisez README.Debian pour plus "
+"d'informations), mais vous pouvez toujours Иditer le fichier sshd_config et "
+"changer cela."
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+"Il est fortement recommandИ que vous me laissiez gИnИrer le nouveau fichier "
+"de configuration."
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "Permettre seulement la version 2 du protocole SSH"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"Cette version d'OpenSSH connaНt la version 2 du protocole ssh, qui est bien "
+"plus sШre. DИsactiver ssh 1 est une bonne chose, cependant cela peut "
+"ralentir les machines peu puissantes et pourrait empЙcher ceux qui utilisent "
+"des vieilles versions de la partie cliente de se connecter (le client ssh de "
+"la distribution Debian ╚═Potato═╩ en fait partie)."
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"De plus, les clИs utilisИes par la version 1 du protocole sont diffИrentes "
+"et vous ne pourrez pas les utiliser si vous n'autorisez que les connexions "
+"utilisant la version 2 du protocole."
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"Si vous changez d'avis ultИrieurement et dИcidez de modifier ce rИglage, les "
+"instructions fournies dans le fichier README.Debian vous indiquent comment "
+"modifier le fichier sshd_config."
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "ClИs pour ssh2 fusionnИes dans les fichiers de configuration"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"OpenSSH, depuis sa version 3, n'utilise plus de fichiers distincts pour les "
+"clИs ssh1 et ssh2. Cela signifie que les fichiers authorized_keys2 et "
+"known_hosts2 ne sont plus utiles. Ils seront nИanmoins lus afin de prИserver "
+"la compatibilitИ descendante."
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr ""
+"Voulez-vous continuer (et risquer de rompre les sessions ssh actives)═?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"Il est probable que la version de /etc/init.d/ssh installИe en ce moment tue "
+"toutes les instances de sshd en cours. En cas de mise Ю jour par ssh, Гa "
+"serait une mauvaise idИe."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Vous pouvez corriger cela en ajoutant dans /etc/init.d/ssh ╚═--pidfile /var/"
+"run/sshd.pid═╩ Ю la ligne ╚═start-stop-daemon═╩ dans la section ╚═stop═╩ du "
+"fichier."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr ""
+"NOTE═: suivi de session X11 et d'agent d'autorisation dИsactivИs par dИfaut."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Pour des raisons de sИcuritИ, la version Debian de ssh positionne les "
+"options ForwardX11 et ForwardAgent Ю ╚═Off═╩ par dИfaut."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Vous pouvez activer ces options pour les serveurs en qui vous avez "
+"confiance, soit dans un des fichiers de configuration, soit avec l'option -X "
+"de la ligne de commande."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+"Plus d'informations sont disponibles dans /usr/share/doc/ssh/README.Debian."
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr ""
+"Attention═: rsh-server est installИ -- ce n'est probablement pas une bonne "
+"idИe"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Avoir un serveur rsh installИ affaiblit la sИcuritИ que vous vouliez "
+"probablement obtenir en installant ssh. Je vous conseille de supprimer ce "
+"paquet."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr ""
+"Attention═: telnetd est installИ -- ce n'est probablement pas une bonne idИe"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Je vous conseille soit d'enlever le paquet telnetd (si ce service n'est pas "
+"nИcessaire), soit de le remplacer par le paquet telnetd-ssl pour qu'il y ait "
+"au moins une chance que les sessions telnet soient chiffrИes et que les mots "
+"de passe et noms d'utilisateurs ne passent pas en clair sur le rИseau."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Attention═: vous devez crИer une nouvelle clИ d'hТte"
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Il existe un vieux /etc/ssh/ssh_host_key qui est chiffrИ avec IDEA. OpenSSH "
+"ne peut utiliser ce fichier de clИ, et je ne peux trouver l'utilitaire ssh-"
+"keygen de l'installation prИcИdente (non libre) de SSH."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "Vous aurez besoin de gИnИrer une nouvelle clИ d'hТte."
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr ""
+"Voulez-vous que /usr/lib/ssh-keysign soit installИ avec le bit SETUID "
+"activИ═?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Vous avez la possibilitИ d'installer ssh-keysign avec le bit SETUID activИ."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Si vous mettez ssh-keysign avec le bit SETUID, vous permettrez "
+"l'authentification basИe sur les hТtes, disponible dans la version 2 du "
+"protocole SSH."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Dans le doute, je vous suggХre de l'installer avec le bit SETUID activИ. Si "
+"cela vous cause des problХmes, vous pourrez revenir sur votre dИcision avec "
+"╚═dpkg-reconfigure ssh═╩."
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "Voulez-vous utiliser le serveur sshd═?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Ce paquet contient Ю la fois le client ssh et le serveur sshd."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Normalement le serveur sshd est lancИ pour permettre les connexions "
+"distantes via ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Si vous dИsirez seulement utiliser le client ssh pour des connexions vers "
+"l'extИrieur, ou si vous ne voulez pas vous connecter sur cette machine via "
+"ssh, vous pouvez dИsactiver sshd maintenant."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/ja.po b/debian/po/ja.po
new file mode 100644
index 000000000..d32cab886
--- /dev/null
+++ b/debian/po/ja.po
@@ -0,0 +1,383 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=EUC-JP\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "фц╦╒╓нй╛н╔"
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"фц╦╒й╛н╔╓о╔г╔у╔╘╔К╔х╓гм╜╦З╓к╓й╓ц╓ф╓╓╓ч╓╧║ёл╣╦З╓к╓╥╓©╓╓╬Л╧Г╓о║╒ /etc/ssh/"
+"sshd_conf ╓к║жUsePrivilegeSeparation no║в╓х╓╓╓╕╧т╓Рди╡ц ╓╥╓ф╓╞╓ю╓╣╓╓║ё"
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+"цМ╟у! Linux ╔╚║╪╔м╔К╓н╔п║╪╔╦╔Г╔С 2.0 ╥онС╓Р╩х╓ц╓ф╓╓╓К╬Л╧Г║╒фц╦╒ й╛н╔╓оа╢╓╞ф╟"
+"╨Н╓╥╓ч╓╩╓С║ёлю╪╗е╙╓кфц╦╒й╛н╔╓Рл╣╦З╓к╓╥╓й╓╓╦б╓Й║╒sshd ╓о╣╞ф╟╓к╪╨гт╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "фц╦╒й╛н╔╓Рм╜╦З╓к╓╧╓К"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"кэ╔п║╪╔╦╔Г╔С╓н OpenSSH ╓о║╒©╥╓╥╓╓фц╦╒й╛н╔╔╙╔в╔╥╔Г╔С╓Р╩Щ╓ц╓ф╓╓╓ч╓╧║ё ╓Ё╓Л╓к"
+"╓Х╓ц╓ф║╒root ╦╒╦б╓г╪б╧т╓╣╓Л╓К╔Ё║╪╔и╓ннл╓РбГиЩ╓к╦╨╓И╓╧╓Ё╓х╓╛ ╓г╓╜║╒sshd ╓н╔╩"
+"╔╜╔Е╔Й╔ф╔ё╔ш║╪╔К╓н╠ф╤а╓Р╦╨╓И╓╧╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"╩дг╟╓й╓Ё╓х╓к║╒фц╦╒й╛н╔╓о PAM ╓к╟╜╠ф╤а╓Рм©╓╗╓ч╓╧║ёroot ╓г╪б╧т╓╣╓Л╓К а╢╓ф╓н "
+"PAM ╔╩╔ц╔╥╔Г╔С╔Б╔╦╔Е║╪╔К (нЦ╓╗╓п pam_mkhomedir) ╓оф╟╓╚╓й╓╞ ╓й╓Й╓ч╓╧║ё╓ч╓©║╒"
+"PAM ╔╜║╪╔э║╪╔ибпоце╙г╖╬з╓Бф╟╨Н╓╥╓й╓╞╓й╓Й╓ч╓╧║ё"
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"╓╒╓й╓©╓о sshd_config ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Ра╙бР╓╥╓ч╓╥╓©╓н╓г║╒ ╓Ё╓Ё╓гфц"
+"╦╒й╛н╔╓Рм╜╦З╓к╓╧╓К╓╚╓╥╓й╓╓╓╚╓Ра╙бР╓г╓╜╓ч╓╧║ё2.0 ╥онС╓н ╔╚║╪╔м╔К╓Р╩х╓ц╓ф╓╓╓К"
+"╓╚ (╓Ё╓н╬Л╧Г╓к╓о║ж╓╓╓╓╓╗║в╓Ра╙╓п╓й╓╓╓х sshd ╓о╣╞ф╟╓╧╓И╓╥╓ч╓╩╓С)║╒PAM ╓н╣║г╫╓н"
+"╓╕╓афц╦╒й╛н╔╓х╤╕б╦╓г╓╜╓й╓╓╣║г╫╓Р ╩х╓╓╓©╓╓╬Л╧Г╟йЁ╟╓о║╒║ж╓о╓╓║в╓Ра╙╓ж╓ы╓╜╓г╓╧║ё"
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╨Н╓Й╓ч╓╧"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒Debian 'Potato' ╓к╢ч╓ч╓Л╓ф╓╓╓К╔п║╪╔╦╔Г╔С (╓╓╓ч║╒"
+"╓╫╓н╔п║╪╔╦╔Г╔С╓╚╓И╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р╩Н╓ъ╓ф╓╓╓К╓х╓Ё╓М) ╓╚╓И║╒ юъдЙ╔у╔║╔╓╔К╓╛"
+"бГиЩ╓кйя╡╫╓╥╓ф╓╓╓ч╓╧║ё╓╓╓ч║╒©╥╓╥╓╓╔п║╪╔╦╔Г╔С╓н╔╣║╪╔п╓г ╩х╓╕╓Ё╓х╓╛╓г╓╜╓К©╥╓╥╓╓"
+"юъдЙ╔у╔║╔╓╔К (/etc/ssh/sshd/config) ╓Р╪╚ф╟ю╦ю╝ ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒╓╫╓н╔у╔║"
+"╔╓╔К╓о║╒╦е╓╓╔п║╪╔╦╔Г╔С╓нюъдЙ╔у╔║╔╓╔К╓к ╢ч╓ч╓Л╓К╓╒╓й╓©╓нюъдЙ╓╛а╢╓╞╢ч╓ч╓Л╓ч╓╩"
+"╓С║ё"
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"╓Ё╓н©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓о║╒║жPermitRootLogin║в╓Р║жyes║в╓кюъдЙ╓╥╓ч╓╧║ё (╓д╓ч"
+"╓Й║╒root ╓н╔я╔╧╔О║╪╔и╓Рцн╓ц╓ф╓╓╓К©м╓й╓Иц╞╓г╓Бд╬юэ╔М╔╟╔╓╔С╓г╓╜╓ч ╓╧)║ё╓Ё╓Л╓г╓Х"
+"╓╓║╒╓х╓╓╓╕╓н╓╛╓Ё╓н╔я╔ц╔╠║╪╔╦╓н╔А╔С╔ф╔й╓н╟у╦╚╓г╓╧╓╛ (╬э╓╥ ╓╞╓о README.Debian "
+"╓Рфи╓С╓г╡╪╓╣╓╓)║╒sshd_config ╓Рйт╫╦╓╥╓ф║жno║в╓кюъ дЙ╓╧╓К╓Ё╓х╓Б╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr "©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Р╤╞╓╞╓╙╢╚╓А╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "SSH ╔в╔М╔х╔Ё╔К 2 ╓н╓ъ╓Р╣Ж╡д╓╥╓ч╓╧"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒╓╨╓ц╓х╟ба╢╓й║╒ssh ╔в╔М╔х╔Ё╔К╓н╔п║╪╔╦╔Г╔С 2 ╓Р╔╣"
+"╔щ║╪╔х╓╥╓ф╓╓╓ч╓╧║ёssh 1 ╓Р╤ь╩ъ╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧╓╛║╒цы╓╓╔ч ╔╥╔С╓г╓оф╟╨Н╓╛"
+"цы╓╞╓й╓ц╓©╓Й║╒╦е╓╓╔╞╔И╔╓╔╒╔С╔х╓╚╓ИюэбЁ╓г╓╜╓й╓╞╓й╓ц╓©╓Й ╓╥╓ч╓╧ (\"potato\" ╓н "
+"ssh ╔╞╔И╔╓╔╒╔С╔х╓БюэбЁ╓г╓╜╓й╓╞╓й╓Й╓ч╓╧)║ё"
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"╓ч╓©║╒╔в╔М╔х╔Ё╔К 1 ╓г╩х╓╕╔╜║╪╓о╟ш╓й╓К╓©╓А║╒╔в╔М╔х╔Ё╔К 2 ╓Рм╜╦З╓к╓╥╓© ╓ю╓╠╓г╓о"
+"╓╫╓н╔╜║╪╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╩╓С║ё"
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"╓Б╓╥╨ё╦Е╓╒╓й╓©╓╛╧м╓╗╓Рйя╓╗╓©╓И║╒README.Debian ╓Рфи╓Ю╓х sshd_config ╓Р ╓и╓н╓Х"
+"╓╕╓кйя╧╧╓╥╓©╓И╓Х╓╓╓╚╓╛й╛╓╚╓Й╓ч╓╧║ё"
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "ssh2 ╔╜║╪╓оюъдЙ╔у╔║╔╓╔К╓кеЩ╧Г╓╣╓Л╓ч╓╧"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"OpenSSH ╓н╔п║╪╔╦╔Г╔С 3 ╓о║╒ssh1 ╓х ssh2 ╓н╔╜║╪╓к╦дйл╓н╔у╔║╔╓╔К╓Р╩х╓╓ ╓ч╓╩╓С║ё"
+"╓д╓ч╓Й║╒authorized_keys2 ╔у╔║╔╓╔К╓х known_hosts2 ╔у╔║╔╓╔К╓о╓Б ╓о╓Дитмв╓х╓й╓Й"
+"╓ч╓╥╓©║ё╦ЕйЩ╦ъ╢╧ю╜╓Рйщ╓д╓©╓А╓к╓о╓Ё╓Л╓И╓н╔у╔║╔╓╔К╓╛и╛мв ╓г╓╧║ё"
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "бЁ╓╠╓ф╓╓╓╓╓г╓╧╓╚ (юэбЁцФ╓н ssh ╔╩╔ц╔╥╔Г╔С╓╛юз╓Л╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С)"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"╓╓╓ч╔╓╔С╔╧╔х║╪╔К╓╥╓© /etc/init.d/ssh ╓о║╒╓╙╓╫╓И╓╞╪б╧тцФ╓н sshd ╓Ра╢╓ф дД╩ъ╓╣"
+"╓╩╓ч╓╧║ё╓Ё╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р ssh ╔╩╔ц╔╥╔Г╔С╓Рмя╓╓╓ф╧т╓╕╓н╓о╢ж ╟Ц╓ц╓©╓Д╓Й╓╚"
+"╓©╓г╓╧║ё"
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"╓Ё╓н╬У╤╥╓Р╫╓ю╣╓╧╓К╓к╓о║╒/etc/init.d/ssh ╓н stop ╔╩╔╞╔╥╔Г╔С╓н start-stop-"
+"daemon ╓н╧т╓к║ж--pidfile /var/run/sshd.pid║в╓хди╡ц╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr "цМ╟у: X11 ╓хг╖╬з╓н╔у╔╘╔О║╪╔г╔ё╔С╔╟╓о╔г╔у╔╘╔К╔х╓г╓о╤ь╩ъ╓╣╓Л╓ч╓╧"
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"╔╩╔╜╔Е╔Й╔ф╔ё╬Е╓нмЩмЁ╓╚╓И║╒Debian ╓н ssh ╓г╓о ForwardX11 ╓х ForwardAgent ╓о╔г"
+"╔у╔╘╔К╔х╓г╓о║жoff║в╓кюъдЙ╓╣╓Л╓ч╓╧║ё"
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"юъдЙ╔у╔║╔╓╔К╓Р╩х╓ц╓©╓Й║╒-X ╔Ё╔ч╔С╔и╔И╔╓╔С╔╙╔в╔╥╔Г╔С╓Р╩х╓ц╓©╓Й╓╧╓К ╓Ё╓х╓г║╒©╝"
+"мя╓г╓╜╓К╔╣║╪╔п╓кбп╓╥╓ф╣Ж╡д╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr "╬э╨ы╓о /usr/share/doc/ssh/README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓║ё"
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr ""
+"╥ы╧П: rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓К╓х║╒╓╒╓й╓©╓╛ ssh ╓к╓Х╓ц╓ффю╓©╓╓╓х ╩в╓ц╓ф╓╓"
+"╓К╓г╓╒╓М╓╕╔╩╔╜╔Е╔Й╔ф╔ё╓╛б╩╓й╓О╓Л╓ч╓╧║ё╓╫╓н╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓ ╔С╔╧╔х║╪╔К╓╧╓К╓Ё"
+"╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "╥ы╧П: telnetd ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"(╓Б╓╥ telnet ╔╒╔╞╔╩╔╧╓РдС╤║╓╥╓©╓╓╓х╩в╓ц╓ф╓╓╓й╓╓╓н╓г╓╥╓©╓И) telnetd ╔я╔ц╔╠║╪╔╦"
+"╓Р╔╒╔С╔╓╔С╔╧╔х║╪╔К╓╧╓К╓╚║╒╓ч╓©╓о║╒telnetd-ssh ╔я╔ц╔╠║╪╔╦╓Р ╔╓╔С╔╧╔х║╪╔К╓╥╓ф╬╞"
+"╓й╓╞╓х╓Б╔м╔ц╔х╔О║╪╔╞╬Е╓Р╟е╧Ф╡╫╓╣╓Л╓ф╓╓╓й╓╓╔Ф║╪╔╤л╬ ╓Д╔я╔╧╔О║╪╔и╓Д╔╩╔ц╔╥╔Г╔С╬П"
+"йС╓╛н╝╓Л╓й╓╓╓Х╓╕╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "╥ы╧П: ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓И╓й╓╓╓х╓╓╓╠╓ч╓╩╓С"
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"IDEA ╓г╟е╧Ф╡╫╓╣╓Л╓©╦е╓╓╔╜║╪╓╛ /etc/ssh/ssh_host_key ╓к╓╒╓Й╓ч╓╧║ё OpenSSH ╓о╓Ё"
+"╓н╔ш╔╧╔х╔╜║╪╔у╔║╔╓╔К╓Р╟╥╓╗╓ч╓╩╓С║ё╓ч╓©║╒╨ё╔╓╔С╔╧╔х║╪╔К ╓╣╓Л╓ф╓╓╓К╦е╓╓ (╔у╔Й║╪"
+"╓г╓о╓й╓╓) SSH ╓к╓о ssh-keygen ╔Ф║╪╔ф╔ё╔Й╔ф╔ё ╓╛╢ч╓ч╓Л╓ф╓╓╓ч╓╩╓С║ё"
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓Ки╛мв╓╛╓╒╓Й╓ч╓╧║ё"
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "/usr/bin/ssh-keysign ╓Р SUID root ╓г╔╓╔С╔╧╔х║╪╔К╓╥╓ч╓╧╓╚?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"ssh-keysign ╔ь╔К╔я║╪╓Р╔╓╔С╔╧╔х║╪╔К╓╧╓К╨щ║╒SUID ╔с╔ц╔х╓РюъдЙ╓╧╓К╓╚ ╓╥╓й╓╓╓╚╓Р"
+"а╙╓ж╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"ssh-keysign ╓Р SUID ╓кюъдЙ╓╥╓©╬Л╧Г║╒SSH ╔в╔М╔х╔Ё╔К 2 ╓н╔ш╔╧╔х╓к ╢П╓е╓╞г╖╬з╓Р"
+"╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"╓Х╓╞й╛╓╚╓И╓й╓╓╬Л╧Г╓о║╒SUID ╓Рм╜╦З╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё╓Б╓╥ лДбЙ╓╛╣╞╓Ё╓Л"
+"╓п║╒dpkg-reconfigure ssh ╓Р╪б╧т╓╧╓К╓Ё╓х╓гюъдЙ╓Рйя╧╧ ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "sshd ╔╣║╪╔п╓Р╪б╧т╓╥╓ч╓╧╓╚?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "╓Ё╓н╔я╔ц╔╠║╪╔╦╓о║╒ssh ╔╞╔И╔╓╔╒╔С╔х╓х sshd ╔╣║╪╔п╓нн╬йЩ╓Р╢ч╓С╓г╓╓╓ч╓╧║ё"
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"дл╬О║╒sshd ╔╩╔╜╔Е╔╒╔╥╔╖╔К╔╣║╪╔п╓о║╒ssh ╓Рмя╓╓╓©╔Й╔Б║╪╔х╓╚╓И╓н╔М╔╟╔╓╔С ╓Р╡дг╫"
+"╓к╓╧╓К╓©╓А╓к╪б╧т╓╥╓ч╓╧║ё"
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"╓Б╓╥ ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╩х╓ц╓ф╓Ё╓н╔ч╔╥╔С╓╚╓Иб╬╔ч╔╥╔С╓ь╓хюэбЁ╓╧╓К╓ю╓╠╓г ╓г║╒╓Ё"
+"╓н╔ч╔╥╔С╓ь╓х ssh ╓Р╩х╓ц╓ф╔М╔╟╔╓╔С╓╥╓й╓╓╓н╓г╓╥╓©╓И║╒╓Ё╓Ё╓г sshd ╓Р╪б╧т╓╥╓й╓╓╓г"
+"╓╙╓╜╓ч╓╧║ё"
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr "╦╟╓н╢д╤╜╔╙╔в╔╥╔Г╔С╓ол╣╦З╓кюъдЙ╓╣╓Л╓ч╓╥╓©"
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+"кэ╔п║╪╔╦╔Г╔С╓н OpenSSH ╓о║╒╦ЬЁ╚╦╟╓н╢д╤╜╔╙╔в╔╥╔Г╔С╓Р╔г╔у╔╘╔К╔х╓г л╣╦З╓кюъдЙ╓╥"
+"╓ф╓╓╓ч╓╧║ёLD_PRELOAD ╓й╓и╓н╧╤╥Б╓РхР╓╠╓К╓©╓А╓г╓╧║ё ╓Б╓╥ authorized_keys ╔у╔║╔╓"
+"╔К╓г╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╩хмя╓╥╓ф╓╓╓К╬Л╧Г║╒ ╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╫Э╣Н╓╥╓й╓╓╦б╓Й╓о╓╫╓н╦╟"
+"╓омЬмя╓г╓╜╓й╓╓╓Ё╓х╓кцМ╟у ╓╥╓ф╓╞╓ю╓╣╓╓║ё"
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
+"╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╨ф╓см╜╦З╓к╓╧╓К╓к╓о║╒╔╒╔ц╔в╔╟╔Л║╪╔и╫╙н╩╦Е╓к║╒ sshd_config(5) "
+"╔ч╔к╔Е╔╒╔К╔з║╪╔╦╓н╥ы╧П╩Ж╧Ю╓Рфи╓С╓г║╒ /etc/ssh/sshd_config ╔у╔║╔╓╔К╓к"
+"║жPermitUserEnvironment yes║в╓х юъдЙ╓╥╓ф╓╞╓ю╓╣╓╓║ё"
diff --git a/debian/po/pl.po b/debian/po/pl.po
new file mode 100644
index 000000000..29e91be50
--- /dev/null
+++ b/debian/po/pl.po
@@ -0,0 +1,387 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-2\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "Separacja uprawnieЯ"
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"Separacja uprawnieЯ jest domy╤lnie wЁ╠czona, wiЙc je╤li zdecydujesz siЙ j╠ "
+"wyЁ╠czyФ, musisz dodaФ \"UsePrivilegeSeparation no\" do pliku /etc/ssh/"
+"sshd_config."
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+"UWAGA! Je©eli u©ywasz j╠dra Linux'a z serii 2.0, to separacja uprawnieЯ w "
+"ogСle nie bЙdzie dziaЁaФ i sshd nie wystartuje dopСki wЁasnorЙcznie nie "
+"wyЁ╠czysz separacji uprawnieЯ w /etc/ssh/sshd_config."
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "WЁ╠czenie separacji uprawnieЯ"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"Ta wersja OpenSSH zawiera now╠ opcjЙ separacji uprawnieЯ. Znacz╠co zmniejsza "
+"ona ilo╤Ф kodu, ktСry jest uruchamiany jako root i co za tym idzie redukuje "
+"efekty luk bezpieczeЯstwa w sshd."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"Niestety separacja uprawnieЯ ╪le reaguje z PAMem. Jakikolwiek moduЁ sesji "
+"PAM, ktСry musi byФ uruchamiany jako root (pam_mkhomedir, na przykЁad) "
+"zawiedzie. Nie bЙdzie dziaЁaФ rСwnie© interaktywna autentykacja z klawiatury "
+"(keyboard-interactive authentication)."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"ZdecydowaЁe╤ siЙ na to abym wygenerowaЁ dla ciebie plik sshd_config, i "
+"mo©esz wybraФ czy chcesz wЁ╠czyФ SeparacjЙ UprawnieЯ, czy te© nie. Je╤li nie "
+"u©ywasz j╠dra z serii 2.0 (w ktСrym to przypadku *musisz* odpowiedzieФ tutaj "
+"'nie' albo sshd w ogСle nie ruszy) i je╤li nie musisz korzystaФ z mo©liwo╤ci "
+"PAMa, ktСre nie bЙd╠ dziaЁaЁy z t╠ opcj╠, powiniene╤ odpowiedzieФ tutaj "
+"'tak'."
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "Wygeneruj nowy plik konfiguracyjny"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"W tej wersji OpenSSH zmieniЁ siЙ plik konfiguracyjny w stosunku do wersji "
+"dostarczanej z Debianem 'Potato', ktСr╠ zdajesz siЙ aktualizowaФ. MogЙ teraz "
+"wygenerowaФ nowy plik konfiguracyjny (/etc/ssh/sshd.config), ktСry bЙdzie "
+"dziaЁaЁ z now╠ wersj╠ serwera, ale nie bЙdzie zawieraЁ ©adnych dokonanych "
+"przez ciebie w starej wersji zmian."
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"Zauwa© proszЙ, ©e nowy plik konfiguracyjny bЙdzie ustawiaЁ warto╤Ф opcji "
+"'PermitRootLogin' na 'tak' (co oznacza, ©e ka©dy kto zna hasЁo root'a mo©e "
+"zdalnie zalogowaФ siЙ przez ssh jako root). W opinii opiekuna pakietu to "
+"jest poprawna warto╤Ф domy╤lna (szczegСЁy w README.Debian), ale mo©esz sobie "
+"wyedytowaФ sshd_config i ustawiФ tЙ opcjЙ na 'nie' je╤li siЙ z t╠ opini╠ nie "
+"zgadzasz."
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+"Jest bardzo wskazane aby╤ pozwoliЁ mi wygenerowaФ nowy plik konfiguracyjny."
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "Zezwalaj wyЁ╠cznie na wersjЙ 2 protokoЁu SSH"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"Ta wersja OpenSSH wspiera drug╠ wersjЙ protokoЁu ssh, ktСra jest znacznie "
+"bardziej bezpieczna. WyЁ╠czenie ssh 1 jest zalecane, choФ spowalnia to "
+"dziaЁanie na starych maszynach i mo©e uniemo©liwiФ poЁ╠czenie starszym "
+"wersjom klientСw (dotyczy to np. klienta ssh doЁ╠czanego do \"potato\")."
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"Ponadto, zauwa© proszЙ, ©e klucze u©ywane przez protokСЁ 1 s╠ inne, wiЙc nie "
+"bЙdziesz mСgЁ ich u©ywaФ je╤li zezwolisz na korzystanie wyЁ╠cznie z wersji 2 "
+"protokoЁu."
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"Je╤li pС╪niej zmienisz zdanie co do tego ustawienia, to instrukcje co "
+"zmieniФ w sshd_config znajduj╠ siЙ w README.Debian."
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "klucze ssh2 wЁ╠czone do plikСw konfiguracyjnych"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"Pocz╠wszy od wersji 3 OpenSSH nie u©ywa ju© osobnych plikСw dla kluczy ssh1 "
+"i ssh2. Oznacza to, ©e pliki authorized_keys2 i known_hosts2 nie s╠ ju© "
+"potrzebne. BЙd╠ one jednak odczytywane aby zachowaФ wsteczn╠ kompatybilno╤Ф."
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "Czy chcesz kontynuowaФ (i ryzykowaФ zabicie aktywnych sesji ssh) ?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"Zainstalowana wЁa╤nie wersja /etc/init.d/ssh mo©e zabiФ wszystkie dziaЁaj╠ce "
+"obecnie kopie sshd. Je╤li robisz ten upgrade via ssh, to byЁaby ZЁa Rzecz"
+"(tm)."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Mo©esz to naprawiФ dodaj╠c \"--pidfile /var/run/sshd.pid\" do linijki start-"
+"stop-daemon w sekcji stop tego pliku."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr ""
+"UWAGA: Przekazywanie (forwarding) X11 i Autoryzacji jest domy╤lnie wyЁ╠czone."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Ze wzglЙdСw bezpieczeЯstwa Debianowa wersja ssh ma ForwardX11 i ForwardAgent "
+"ustawione  domy╤lnie na 'off'."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Dla zaufanych serwerСw mo©esz wЁ╠czyФ te opcje w pliku konfiguracyjnym lub "
+"przy pomocy opcji -X z linii komend."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr "WiЙcej szczegСЁСw znajdziesz w /usr/share/doc/ssh/README.Debian."
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr ""
+"Uwaga: serwer rsh jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Posiadanie zainstalowanego serwera rsh podminowuje zabezpieczenia, ktСre "
+"prawdopodobnie starasz siЙ uzyskaФ instaluj╠c ssh. RadziЁbym usun╠Ф ten "
+"pakiet."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr ""
+"Uwaga: telnetd jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"RadziЁbym albo usun╠Ф pakiet telnetd (je╤li nie potrzebujesz koniecznie "
+"udostЙpniaФ telnet'a) albo zainstalowaФ telnetd-ssl aby byЁa choФ szansza, "
+"©e sesje telnet nie bЙd╠ przesyЁaФ niezaszyfrowanego loginu/hasЁa oraz "
+"danych sesji przez sieФ."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Uwaga: musisz utworzyФ nowy klucz hosta"
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Istnieje stary /etc/ssh/ssh_host_key, ktСry jest zaszyfrowany przez IDEA. "
+"OpenSSH nie umie korzystaФ z tak zaszyfrowanego klucza, a nie mo©e znale╪Ф "
+"polecenia ssh-keygen ze starego SSH (non-free)."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "BЙdziesz musiaЁ wygenerowaФ nowy klucz hosta."
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "Czy chcesz aby /usr/lib/ssh-keysign byЁ zainstalowany jako SUID root?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Masz mo©liwo╤Ф zainstalowania pomocniczego programu ssh-keysign z wЁ╠czonym "
+"bitem SETUID."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Je╤li uczynisz ssh-keysign SUIDowym, bЙdziesz mСgЁ u©ywaФ opartej na hostach "
+"autentykacji drugiej wersji protokoЁu SSH."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Je╤li masz w╠tpliwo╤ci, radzЙ zainstalowaФ go z SUIDem. Je╤li to sprawia "
+"problemy, mo©esz zmieniФ swoje zdanie uruchamiaj╠c pС╪niej polecenie: dpkg-"
+"reconfigure ssh"
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "Czy chcesz uruchamiaФ serwer sshd ?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Ten pakiet zawiera zarСwno klienta ssh, jak i serwer sshd."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Normalnie serwer sshd (Secure Shell Server) bЙdzie uruchomiony aby umo©liwiФ "
+"zdalny dostЙp przez ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Je╤li jeste╤ zainteresowny u©ywaniem wyЁ╠cznie klienta ssh dla poЁ╠czeЯ "
+"wychodz╠cych z tej maszyny, i nie chcesz siЙ na ni╠ logowaФ przy pomocy ssh, "
+"to mo©esz teraz wyЁ╠czyФ serwer sshd."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/pt_BR.po b/debian/po/pt_BR.po
new file mode 100644
index 000000000..2f58a1162
--- /dev/null
+++ b/debian/po/pt_BR.po
@@ -0,0 +1,407 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+msgid ""
+msgstr ""
+"Project-Id-Version: openssh-3.5p1-4\n"
+"POT-Creation-Date: 2003-03-08 16:13-0300\n"
+"PO-Revision-Date: 2003-03-08 16:56+0300\n"
+"Last-Translator: AndrИ LuМs Lopes <andrelop@ig.com.br>\n"
+"Language-Team: Debian-BR Project <debian-l10n-portuguese@lists.debian.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=ISO-8859-1\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr "SeparaГЦo de PrevilИgios"
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+"A separaГЦo de previlИgios estА habilitado por padrЦo, portanto caso "
+"vocЙ decida que deseja desabilitА-la vocЙ precisarА adicionar a linha "
+"\"UsePrivilegeSeparation no\" ao arquivo /etc/ssh/sshd_config."
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+"NB ! Caso vocЙ esteja executando um kernel Linux da sИria 2.0 o recurso "
+"de separaГЦo de privilИgios nЦo funcionarА e seu daemon sshd irА falhar "
+"ao iniciar a menos que vocЙ explicitamente desabilite o recurso de "
+"separaГЦo de privilИgios."
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr "Habilitar SeparaГЦo de PrivilИgios"
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+"Esta versЦo do OpenSSH contИm a nova opГЦo de separaГЦo de privilИgios. "
+"Esta opГЦo reduz significativamente a quantidade de cСdigo que И "
+"executada como root e portanto reduz o impacto de falhas de seguranГa "
+"no sshd."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+"Infelizmente, a separaГЦo de privilИgios interage de maneira ruim com "
+"o PAM. Quaisquer mСdulos de sessЦo PAM que precisem ser executados como "
+"root (pam_mkhomedir, por exemplo) irЦo falhar e autenticaГЦo interativa "
+"com teclado do PAM nЦo funcionarА."
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+"Uma vez que vocЙ optou por permitir que o debconf gere o arquivo "
+"sshd_config para vocЙ, И possМvel escolher se vocЙ deseja ter ou nЦo o "
+"recurso de separaГЦo de privilИgios habilitada. A menos que vocЙ esteja "
+"executando um kernel Linux da sИrie 2.0 (neste caso vocЙ *deve* "
+"responder negativamente a esta pergunta ou seu daemon sshd nЦo serА "
+"iniciado) ou saiba que vocЙ precisa utilizar recursos do PAM que nЦo "
+"funcionam com esta opГЦo habilitada vocЙ deve responder sim aqui."
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr "Gerar novo arquivo de configuraГЦo"
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+"Esta versЦo do OpenSSH possui um arquivo de configuraГЦo "
+"consideravelmente diferente da versЦo fornecida com o Debian 'Potato' "
+"(Debian versЦo 2.2), a versЦo do Debian da qual vocЙ parece estar "
+"atualizando. Esse assistente de confgiuraГЦo inicial pode agora gerar "
+"um novo arquivo de configuraГЦo (/etc/ssh/sshd_config) que irА "
+"funcionar com o nova versЦo do servidor sshd mas nЦo irА conter nenhuma "
+"personalizaГЦo que vocЙ possa ter feito na versЦo anterior."
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+"Por favor note que este novo arquivo de configuraГЦo irА definir o "
+"valor da opГЦo 'PermitRootLogin' para \"yes\" (o que significa que "
+"qualquer pessoa que conheГa a senha de root poderА conectar via ssh "
+"diretamente como root no servidor onde este pacote esta sendo "
+"instalado). A opiniЦo do mantenedor do pacote И que esse И o "
+"comportamente padrЦo correto (consulte o arquivo README.Debian deste "
+"pacote para maiores detalhes), mas vocЙ poderА sempre editar o arquivo "
+"sshd_config e definir esta opГЦo para \"no\" caso vocЙ nЦo concorde com "
+"o mantenedor do OpenSSH."
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+"и fortemente recomendado que vocЙ permita que o novo arquivo de "
+"configuraГЦo serА gerado automaticamente para vocЙ."
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr "Permitir somente protocolo SSH versЦo 2"
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+"Esta versЦo do OpenSSH suporta a versЦo 2 do protocolo ssh, a qual И "
+"muito mais segura que a versЦo anterior. и recomendado desabilitar o "
+"suporte ao protocolo ssh versЦo 1, porИm isto farА com que conexУes "
+"fiquem mais lentas em mАquinas mais antigas e pode impedir que clientes "
+"antigos consigam se conectar (o cliente ssh fornecido com a versЦo do "
+"Debian 2.2 \"potato\" И afetada.)"
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+"Por favor note tambИm que as chaves usadas para o protocolo 1 sЦo "
+"diferentes portanto vocЙ nЦo poderА usА-las caso vocЙ somente permita "
+"conexУes usando o protocolo 2."
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+"Caso vocЙ posteriormente mude de idИia sobre esta configuraГЦo, o "
+"arquivo README.Debian deste pacote possui instruГУes sobre o que mudar "
+"em seu arquivo de configuraГЦo sshd_config."
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr "Chaves ssh2 incluМdas nos arquivos de configuraГЦo"
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+"A partir do versЦo 3 o OpenSSH nЦo usa mais arquivos separados para as "
+"chaves ssh1 e ssh2. Isto significa que os arquivos \"authorized_keys2\" "
+"e \"know_hosts2\" nЦo sЦo mais necessАrios. Os mesmos continuarЦo a ser "
+"lidos para manter a compatibilidade com versУes anteriores."
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "Deseja continuar (e arriscar acabar com sessУes ssh ativas) ?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"A versЦo de /etc/init.d/ssh que vocЙ possui instalada estА prestes a matar "
+"todas as instБncias sshd sendo executadas. Se vocЙ estА fazendo esta "
+"atualizaГЦo atravИs de uma sessЦo ssh, isto seria uma Coisa Ruim(tm)."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"VocЙ pode corrigir isto adicionando \"--pidfile /var/run/sshd.pid\" na linha "
+"start-stop-daemon na seГЦo stop deste arquivo."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr ""
+"NOTA: Encaminhamento de X11 e AutorizaГЦo desabilitados por padrЦo."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"Por razТes de seguranГa, a versЦo Debian do ssh tem as opГУes ForwardX11 e "
+"ForwardAgent definidas como ``off'' por padrЦo."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"VocЙ pode habilitar isso para servidores que vocЙ confia, ou em um dos "
+"arquivos de configuraГЦo, ou com a opГЦo de linha de comando -X."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+"Maiores detalhes podem ser encontrados em /usr/share/doc/ssh/README.Debian."
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr "Aviso: rsh-server estА instalado --- provavelmente nЦo И uma boa idИia"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Possuir o rsh-server instalado minarА a seguranГa que vocЙ estava "
+"provavelmente querendo obter instalando o ssh. Eu recomendaria a vocЙ "
+"remover este pacote."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "Aviso: telnetd estА instalado --- provavelmente nЦo И uma boa idИia"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Eu recomendaria a vocЙ ou remover o pacote telnetd (se vocЙ atualmente nЦo "
+"precisa oferecer acesso telnet) ou instalar telnetd-ssl. Assim existe pelo "
+"menos uma chance das sessУes telnet nЦo enviarem login/senha nЦo encriptados "
+"e informaГУes de sessЦo atravИs da rede."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Aviso: vocЙ deve criar uma nova host key"
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Existe uma antiga /etc/ssh/ssh_host_key, a qual И encriptada usando IDEA. O "
+"OpenSSH nЦo pode gerenciar este arquivo host key e eu nЦo consigo encontrar "
+"o utilitАrio ssh-keygen da antiga (non-free) instalaГЦo SSH."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "VocЙ precisarА gerar uma nova host key."
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "Deseja que que /usr/lib/ssh-keysign seja instalado SUID root ?"
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Existe a opГЦo de instalar o cliente auxiliar ssh-keysign com o bit "
+"SUID definido."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Caso vocЙ instale o ssh-keysign com o bit SUID ativado, vocЙ serА capaz "
+"de usar a autenticaГЦo baseada em host do protocolo SSH 2."
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Caso esteja em dЗvida, И sugerido que vocЙ instale com o bit SUID "
+"ativado. Caso isso cause problemas e vocЙ mude de idИia "
+"posteriormente execute o comando : dpkg-reconfigure ssh"
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "VocЙ quer executar o servidor sshd ?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Este pacote contИm ambos o cliente ssh e o servidor sshd."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Normalmente o sshd Secure Shell Server serА executado para permitir logins "
+"remotos via ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Se vocЙ estА interessado somente em usar o cliente ssh para conexУes para "
+"fora desta mАquina, e nЦo quer logar na mesma usando ssh, entЦo vocЙ pode "
+"desabilitar o sshd aqui."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr "OpГУes ed ambiente sobre chaves estЦo obsoletas"
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+"Esta versЦo do OpenSSH desabilita a opГЦo de ambiente para chaves "
+"pЗblicas por padrЦo par evitar certos ataques (por exemplo, "
+"LD_PRELOAD). Caso vocЙ esteja usando esta opГЦo em um arquivo "
+"authorized_keys, tenha cuidado pois as chaves em questЦo nЦo irЦo "
+"mais funcionar atИ que esta opГЦo seja removida."
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
+"Para reabilitar esta opГЦo, defina a opГЦo "
+"\"PermitUserEnvironment yes\" no arquivo /et/ssh/sshd_config depois da "
+"a atualizaГЦo terminar, atentando para o aviso na pАgina de manual do "
+"sshd_config(5)."
diff --git a/debian/po/ru.po b/debian/po/ru.po
new file mode 100644
index 000000000..7aa13493f
--- /dev/null
+++ b/debian/po/ru.po
@@ -0,0 +1,347 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=KOI8-R\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr "Вы хотите продолжить (рискуя потерять активные ssh-соединения)?"
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+"Версия  /etc/init.d/ssh,  которую  вы  устанавливаете, может убить все "
+"запущенные  процессы  ssh.  Если вы осуществляете это обновление через ssh "
+"сессию, то это Плохая Вещь (tm)."
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+"Это можно исправить добавлением \"--pidfile /var/run/sshd.pid\" в строке "
+"start-stop-daemon в разделе stop этого файла."
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr "ПРИМЕЧАНИЕ: Форвардинг X11 и Authorization запрещен по умолчанию."
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+"По причинам безопасности, в версии для Debian ssh имеет ForwardX11 и "
+"ForwardAgent установленными в ``off'' по умолчанию."
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+"Вы можете разрешить их для серверов, которым доверяете либо в одном из "
+"настроечных файлов, или параметром командной строки -X."
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+"Дополнительую информацию можно найти в /usr/share/doc/ssh/README.Debian"
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr "Предупреждение: установлен rsh-server --- видимо, не очень хорошо"
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+"Установленный  rsh-server  снижает  безопасность,  которую вы вероятно "
+"хотите повысить устанавливая ssh. Рекомендуется удалить этот пакет."
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr "Предупреждение: установлен telnetd --- видимо, не очень хорошо"
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+"Я рекомендовал бы вам удалить пакет telnetd (если вам действительно не нужен "
+"доступ telnet) или установить  telnet-ssl,  чтобы  иметь хотя бы "
+"возможность  не  передавать  по  сети  незашифрованные  имена и пароли "
+"пользователей и прочую информацию в telnet-сессиях."
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr "Предупреждение: вы должны создать новый ключ машины."
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+"Есть старый /etc/ssh/ssh_host_key, который зашифрован IDEA. OpenSSH не "
+"может  работать  с  этим  ключом  машины,  и  я  не могу найти утилиту ssh-"
+"keygen от старой (несвободной) инсталляции SSH."
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr "Вам надо будет сгенерировать новый ключ хоста."
+
+#. Description
+#: ../templates:129
+#, fuzzy
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr "Хотите установить /usr/bin/ssh как SUID root?"
+
+#. Description
+#: ../templates:129
+#, fuzzy
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+"Вы  имеете  возможность  установить /usr/bin/ssh с установленным битом SUID."
+
+#. Description
+#: ../templates:129
+#, fuzzy
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+"Если  вы  делаете  ssh SUID, то вы сможете использовать аутентификацию "
+"Rhosts/RhostsRSA,  но  не сможете использовать socks через LD_PRELOAD. Это "
+"традиционное поведение."
+
+#. Description
+#: ../templates:129
+#, fuzzy
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+"Если  вы  сделаете ssh SUID, то вы сможете использовать socks, но зато "
+"аутентификация  Rhosts/RhostsRSA  не будет работать, что может сделать "
+"невозможным вашу регистрацию на удаленных системах. Также это означает что "
+"номер источникового порта будет больше 1024, что может не нарушить работу "
+"установленных вами правил файрвола."
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr "Хотите запустить сервер sshd?"
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr "Этот пакет содержит и ssh-клиент, и ssh-сервер."
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+"Обычно  sshd  Secure Shell Server  запускается  для удаленного входа в "
+"регистрации в системе через ssh."
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+"Если  вас  интересует  только  использование ssh-клиента для исходящих "
+"соединений с  этой  машины, и вы  не хотите входить в ее систему через ssh, "
+"то вы можете сейчас запретить sshd."
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/po/templates.pot b/debian/po/templates.pot
new file mode 100644
index 000000000..9d38d138b
--- /dev/null
+++ b/debian/po/templates.pot
@@ -0,0 +1,310 @@
+#
+#    Translators, if you are not familiar with the PO format, gettext
+#    documentation is worth reading, especially sections dedicated to
+#    this format, e.g. by running:
+#         info -n '(gettext)PO Files'
+#         info -n '(gettext)Header Entry'
+#
+#    Some information specific to po-debconf are available at
+#            /usr/share/doc/po-debconf/README-trans
+#         or http://www.debian.org/intl/l10n/po-debconf/README-trans
+#
+#    Developers do not need to manually edit POT or PO files.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: PACKAGE VERSION\n"
+"POT-Creation-Date: 2003-05-18 03:08+0100\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#. Description
+#: ../templates:3
+msgid "Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"Privilege separation is turned on by default, so if you decide you want it "
+"turned off, you need to add \"UsePrivilegeSeparation no\" to /etc/ssh/"
+"sshd_config."
+msgstr ""
+
+#. Description
+#: ../templates:3
+msgid ""
+"NB! If you are running a 2.0 series Linux kernel, then privilege separation "
+"will not work at all, and your sshd will fail to start unless you explicitly "
+"turn privilege separation off."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid "Enable Privilege separation"
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"This version of OpenSSH contains the new privilege separation option. This "
+"significantly reduces the quantity of code that runs as root, and therefore "
+"reduces the impact of security holes in sshd."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Unfortunately, privilege separation interacts badly with PAM. Any PAM "
+"session modules that need to run as root (pam_mkhomedir, for example) will "
+"fail, and PAM keyboard-interactive authentication won't work."
+msgstr ""
+
+#. Description
+#: ../templates:23
+msgid ""
+"Since you've opted to have me generate an sshd_config file for you, you can "
+"choose whether or not to have Privilege Separation turned on or not. Unless "
+"you are running 2.0 (in which case you *must* say no here or your sshd won't "
+"start at all) or know you need to use PAM features that won't work with this "
+"option, you should say yes here."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid "Generate new configuration file"
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"This version of OpenSSH has a considerably changed configuration file from "
+"the version shipped in Debian 'Potato', which you appear to be upgrading "
+"from. I can now generate you a new configuration file (/etc/ssh/sshd."
+"config), which will work with the new server version, but will not contain "
+"any customisations you made with the old version."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"Please note that this new configuration file will set the value of "
+"'PermitRootLogin' to yes (meaning that anyone knowing the root password can "
+"ssh directly in as root). It is the opinion of the maintainer that this is "
+"the correct default (see README.Debian for more details), but you can always "
+"edit sshd_config and set it to no if you wish."
+msgstr ""
+
+#. Description
+#: ../templates:41
+msgid ""
+"It is strongly recommended that you let me generate a new configuration file "
+"for you."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid "Allow SSH protocol 2 only"
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"This version of OpenSSH supports version 2 of the ssh protocol, which is "
+"much more secure.  Disabling ssh 1 is encouraged, however this will slow "
+"things down on low end machines and might prevent older clients from "
+"connecting (the ssh client shipped with \"potato\" is affected)."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"Also please note that keys used for protocol 1 are different so you will not "
+"be able to use them if you only allow protocol 2 connections."
+msgstr ""
+
+#. Description
+#: ../templates:60
+msgid ""
+"If you later change your mind about this setting, README.Debian has "
+"instructions on what to do to your sshd_config file."
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid "ssh2 keys merged in configuration files"
+msgstr ""
+
+#. Description
+#: ../templates:74
+msgid ""
+"As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2 "
+"keys. This means the authorized_keys2 and known_hosts2 files are no longer "
+"needed. They will still be read in order to maintain backwards compatibility"
+msgstr ""
+
+#. Description
+#: ../templates:83
+msgid "Do you want to continue (and risk killing active ssh sessions) ?"
+msgstr ""
+
+#. Description
+#: ../templates:83
+msgid ""
+"The version of /etc/init.d/ssh that you have installed, is likely to kill "
+"all running sshd instances.  If you are doing this upgrade via an ssh "
+"session, that would be a Bad Thing(tm)."
+msgstr ""
+
+#. Description
+#: ../templates:83
+msgid ""
+"You can fix this by adding \"--pidfile /var/run/sshd.pid\" to the start-stop-"
+"daemon line in the stop section of the file."
+msgstr ""
+
+#. Description
+#: ../templates:93
+msgid "NOTE: Forwarding of X11 and Authorization disabled by default."
+msgstr ""
+
+#. Description
+#: ../templates:93
+msgid ""
+"For security reasons, the Debian version of ssh has ForwardX11 and "
+"ForwardAgent set to ``off'' by default."
+msgstr ""
+
+#. Description
+#: ../templates:93
+msgid ""
+"You can enable it for servers you trust, either in one of the configuration "
+"files, or with the -X command line option."
+msgstr ""
+
+#. Description
+#: ../templates:93
+msgid "More details can be found in /usr/share/doc/ssh/README.Debian"
+msgstr ""
+
+#. Description
+#: ../templates:104
+msgid "Warning: rsh-server is installed --- probably not a good idea"
+msgstr ""
+
+#. Description
+#: ../templates:104
+msgid ""
+"having rsh-server installed undermines the security that you were probably "
+"wanting to obtain by installing ssh.  I'd advise you to remove that package."
+msgstr ""
+
+#. Description
+#: ../templates:111
+msgid "Warning: telnetd is installed --- probably not a good idea"
+msgstr ""
+
+#. Description
+#: ../templates:111
+msgid ""
+"I'd advise you to either remove the telnetd package (if you don't actually "
+"need to offer telnet access) or install telnetd-ssl so that there is at "
+"least some chance that telnet sessions will not be sending unencrypted login/"
+"password and session information over the network."
+msgstr ""
+
+#. Description
+#: ../templates:119
+msgid "Warning: you must create a new host key"
+msgstr ""
+
+#. Description
+#: ../templates:119
+msgid ""
+"There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH can "
+"not handle this host key file, and I can't find the ssh-keygen utility from "
+"the old (non-free) SSH installation."
+msgstr ""
+
+#. Description
+#: ../templates:119
+msgid "You will need to generate a new host key."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid "Do you want /usr/lib/ssh-keysign to be installed SUID root?"
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"You have the option of installing the ssh-keysign helper with the SUID bit "
+"set."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2 host-"
+"based authentication."
+msgstr ""
+
+#. Description
+#: ../templates:129
+msgid ""
+"If in doubt, I suggest you install it with SUID.  If it causes problems you "
+"can change your mind later by running:   dpkg-reconfigure ssh"
+msgstr ""
+
+#. Description
+#: ../templates:142
+msgid "Do you want to run the sshd server ?"
+msgstr ""
+
+#. Description
+#: ../templates:142
+msgid "This package contains both the ssh client, and the sshd server."
+msgstr ""
+
+#. Description
+#: ../templates:142
+msgid ""
+"Normally the sshd Secure Shell Server will be run to allow remote logins via "
+"ssh."
+msgstr ""
+
+#. Description
+#: ../templates:142
+msgid ""
+"If you are only interested in using the ssh client for outbound connections "
+"on this machine, and don't want to log into it at all using ssh, then you "
+"can disable sshd here."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid "Environment options on keys have been deprecated"
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"This version of OpenSSH disables the environment option for public keys by "
+"default, in order to avoid certain attacks (for example, LD_PRELOAD). If you "
+"are using this option in an authorized_keys file, beware that the keys in "
+"question will no longer work until the option is removed."
+msgstr ""
+
+#. Description
+#: ../templates:154
+msgid ""
+"To re-enable this option, set \"PermitUserEnvironment yes\" in /etc/ssh/"
+"sshd_config after the upgrade is complete, taking note of the warning in the "
+"sshd_config(5) manual page."
+msgstr ""
diff --git a/debian/postinst b/debian/postinst
index 8a1c7c588..8b01d4a7e 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -280,6 +280,12 @@ set_ssh_agent_permissions() {
 }
 
 
+fix_conffile_permissions() {
+        # Clean up after executable /etc/default/ssh in 1:3.5p1-5. dpkg
+        # doesn't do this for us; see bug #192981.
+        chmod 644 /etc/default/ssh
+}
+
 setup_startup() {
         db_get ssh/run_sshd
         if [ "$RET" = "false" ] ; then
@@ -306,8 +312,13 @@ fix_statoverride
 create_alternatives
 setup_sshd_user
 set_sshd_permissions
-if [ "$2" = "1:3.5p1-1" ]; then fix_ssh_group; fi
+if [ "$2" = "1:3.5p1-1" ]; then
+    fix_ssh_group
+fi
 set_ssh_agent_permissions
+if dpkg --compare-versions "$2" lt 1:3.6.1p2-2; then
+    fix_conffile_permissions
+fi
 setup_startup
 setup_init
 
diff --git a/debian/postinst.old b/debian/postinst.old
deleted file mode 100644
index 586da1cc6..000000000
--- a/debian/postinst.old
+++ /dev/null
@@ -1,269 +0,0 @@
-#!/bin/sh -e
-
-action="$1"
-oldversion="$2"
-
-test -e /usr/share/debconf/confmodule && {
-  . /usr/share/debconf/confmodule
-    db_version 2.0
-}
-
-
-if [ "$action" != configure ]
-  then
-  exit 0
-fi
-
-
-
-check_idea_key() {
-    #check for old host_key files using IDEA, which openssh does not support
-        if [ -f /etc/ssh/ssh_host_key ] ; then
-                if ssh-keygen -p -N '' -f /etc/ssh/ssh_host_key 2>&1 | \
-                                grep -q 'unknown cipher' 2>/dev/null ; then
-      mv /etc/ssh/ssh_host_key /etc/ssh/ssh_host_key.old
-      mv /etc/ssh/ssh_host_key.pub /etc/ssh/ssh_host_key.pub.old
-  fi
-        fi
-}
-
-
-create_key() {
-        local file="$1"
-        shift
-
-        if [ ! -f "$file" ] ; then
-                ( umask 022 ; \
-                  ssh-keygen -f "$file" -N '' "$@" > /dev/null )
-  fi
-}
-
-
-create_keys() {
-        RET=true
-test -e /usr/share/debconf/confmodule && {
-                db_get ssh/protocol2_only
-}
-
-        if [ "$RET" = "false" ] ; then
-                echo "Creating SSH1 key"
-                create_key /etc/ssh/ssh_host_key
-fi
-
-        echo "Creating SSH2 RSA key"
-        create_key /etc/ssh/ssh_host_rsa_key -t rsa
-        echo "Creating SSH2 DSA key"
-        create_key /etc/ssh/ssh_host_dsa_key -t dsa
-}
-
-
-create_sshdconfig() {
-        [ -e /etc/ssh/sshd_config ] && return
-
-RET=true
-test -e /usr/share/debconf/confmodule && {
-                db_get ssh/protocol2_only
-}
-
-        cat <<EOF > /etc/ssh/sshd_config
-# Package generated configuration file
-# See the sshd(8) manpage for defails
-
-# What ports, IPs and protocols we listen for
-Port 22
-# Uncomment the next entry to accept IPv6 traffic.
-#ListenAddress ::
-#ListenAddress 0.0.0.0
-EOF
-if [ "$RET" = "false" ]; then
-                cat <<EOF >> /etc/ssh/sshd_config
-Protocol 2,1
-# HostKeys for protocol version 1
-HostKey /etc/ssh/ssh_host_key
-# HostKeys for protocol version 2
-HostKey /etc/ssh/ssh_host_rsa_key
-HostKey /etc/ssh/ssh_host_dsa_key
-EOF
-else
-        cat <<EOF >> /etc/ssh/sshd_config
-Protocol 2
-# HostKeys for protocol version 2
-HostKey /etc/ssh/ssh_host_rsa_key
-HostKey /etc/ssh/ssh_host_dsa_key
-EOF
-fi
-
-
-        cat <<EOF >> /etc/ssh/sshd_config
-# Lifetime and size of ephemeral version 1 server key
-KeyRegenerationInterval 3600
-ServerKeyBits 768
-
-# Logging
-SyslogFacility AUTH
-LogLevel INFO
-
-# Authentication:
-LoginGraceTime 600
-PermitRootLogin no
-StrictModes yes
-
-RSAAuthentication yes
-PubkeyAuthentication yes
-#AuthorizedKeysFile     %h/.ssh/authorized_keys
-
-# rhosts authentication should not be used
-RhostsAuthentication no
-# Don't read the user's ~/.rhosts and ~/.shosts files
-IgnoreRhosts yes
-# For this to work you will also need host keys in /etc/ssh_known_hosts
-RhostsRSAAuthentication no
-# similar for protocol version 2
-HostbasedAuthentication no
-# Uncomment if you don't trust ~/.ssh/known_hosts for RhostsRSAAuthentication
-#IgnoreUserKnownHosts yes
-
-# To disable tunneled clear text passwords, change to no here!
-PermitEmptyPasswords no
-
-# Uncomment to disable s/key passwords 
-#ChallengeResponseAuthentication no
-
-# Use PAM authentication via keyboard-interactive so PAM modules can
-# properly interface with the user
-PasswordAuthentication no
-PAMAuthenticationViaKbdInt yes
-
-# To change Kerberos options
-#KerberosAuthentication no
-#KerberosOrLocalPasswd yes
-#AFSTokenPassing no
-#KerberosTicketCleanup no
-
-# Kerberos TGT Passing does only work with the AFS kaserver
-#KerberosTgtPassing yes
-
-X11Forwarding no
-X11DisplayOffset 10
-PrintMotd no
-#PrintLastLog no
-KeepAlive yes
-#UseLogin no
-
-#MaxStartups 10:30:60
-#Banner /etc/issue.net
-#ReverseMappingCheck yes
-
-Subsystem       sftp    /usr/libexec/sftp-server
-EOF
-}
-
-
-fix_rsh_diversion() {
-# get rid of mistaken rsh diversion (circa 1.2.27-1)
-
-        if [ -L /usr/bin/rsh ] &&
-                dpkg-divert --list '/usr/bin/rsh.real/rsh' | grep -q ' ssh$' ; then
-                for cmd in rlogin  rsh rcp ; do
-                        [ -L /usr/bin/$cmd ] && rm /usr/bin/$cmd
-                        dpkg-divert --package ssh --remove --rename \
-                                --divert /usr/bin/rsh.real/$cmd /usr/bin/$cmd
-
-                        [ -L /usr/man/man1/$cmd.1.gz ] && rm /usr/man/man1/$$cmd.1.gz
-                        dpkg-divert --package ssh --remove --rename \
-                                --divert /usr/man/man1/$cmd.real.1.gz /usr/man/man1/$cmd.1.gz
-                done
-
-                rmdir /usr/bin/rsh.real
-        fi
-}
-
-
-fix_statoverride() {
-# Remove an erronous override for sshd (we should have overridden ssh)
-if [ -x /usr/sbin/dpkg-statoverride ]; then
-                if dpkg-statoverride --list /usr/sbin/sshd 2>/dev/null ; then
-                        dpkg-statoverride --remote /usr/sbin/sshd
-                fi
-                fi
-}
-
-
-create_alternatives() {
-# Create alternatives for the various r* tools
-# Make sure we don't change existing alternatives that a user might have
-# changed
-        for cmd in rsh rlogin rcp ; do
-                if ! update-alternatives --display $cmd | \
-                                grep -q ssh ; then
-                        update-alternatives --quiet --install /usr/bin/$cmd $cmd /usr/bin/ssh 20 \
-                                --slave /usr/share/man/man1/$cmd.1.gz $cmd.1.gz /usr/share/man/man1/ssh.1.gz
-        fi
-        done
-        
-}
-
-
-set_sshd_permissions() {
-        suid=no
-
-        [ -e /usr/share/debconf/confmodule ] && {
-                db_get ssh/SUID_client
-                suid="$RET"
-        }
-
-        if [ "$suid" = "yes" ] ; then
-                if [ -x /usr/sbin/dpkg-statoverride ] && \
-                        ! dpkg-statoverride /usr/bin/ssh ; then
-                        dpkg-statoverride --add root root 04755 /usr/bin/ssh
-fi
-        fi
-}
-
-
-setup_startup() {
-        start=yes
-        [ -e /usr/share/debconf/confmodule ] && {
-                db_get ssh/run_sshd
-                start="$RET"
-        }
-
-        if [ "$start" != "true" ] ; then
-                touch /etc/ssh/sshd_not_to_be_run
-        else
-                rm -f /etc/ssh/sshd_not_to_be_run 2>/dev/null
-        fi
-}
-
-
-setup_init() {
-if [ -e /etc/init.d/ssh ]; then
-    update-rc.d ssh defaults >/dev/null
-    /etc/init.d/ssh restart
-fi
-}
-
-check_idea_key
-create_keys
-create_sshdconfig
-fix_rsh_diversion
-fix_statoverride
-create_alternatives
-set_sshd_permissions
-setup_startup
-setup_init
-
-
-# Automatically added by dh_installdocs
-if [ "$1" = "configure" ]; then
-        if [ -d /usr/doc -a ! -e /usr/doc/ssh -a -d /usr/share/doc/ssh ]; then
-                ln -sf ../share/doc/ssh /usr/doc/ssh
-        fi
-fi
-# End automatically added section
-
-
-[ -e /usr/share/debconf/confmodule ] && db_stop
-
-exit 0
-
diff --git a/debian/rules b/debian/rules
index d3dcf8df9..c28dcbdfd 100755
--- a/debian/rules
+++ b/debian/rules
@@ -17,6 +17,14 @@ endif
 
 #PKG_VER = $(shell perl -e 'print <> =~ /\((.*)\)/' debian/changelog)
 
+ifeq (,$(wildcard /usr/bin/po2debconf))
+PO2DEBCONF := no
+MINDEBCONFVER := 0.5
+else
+PO2DEBCONF := yes
+MINDEBCONFVER := 1.2.0
+endif
+
 build: build-stamp
 build-stamp:
         dh_testdir
@@ -27,7 +35,7 @@ build-stamp:
         fi
         ./configure --prefix=/usr --sysconfdir=/etc/ssh --libexecdir=/usr/lib --mandir=/usr/share/man --with-tcp-wrappers --with-xauth=/usr/bin/X11/xauth --with-default-path=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin --with-superuser-path=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin --with-pam --with-4in6 \
                 --with-privsep-path=/var/run/sshd  --without-rand-helper
-        $(MAKE) -j 2 ASKPASS_PROGRAM='/usr/bin/ssh-askpass' CFLAGS='$(OPTFLAGS) -g -Wall -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT -DSSHD_PAM_SERVICE=\"ssh\" -D__FILE_OFFSET_BITS=64 -DHAVE_MMAP_ANON_SHARED' \
+        $(MAKE) -j 2 ASKPASS_PROGRAM='/usr/bin/ssh-askpass' CFLAGS='$(OPTFLAGS) -g -Wall -fno-builtin-log -DLOGIN_PROGRAM=\"/bin/login\" -DLOGIN_NO_ENDOPT -DSSHD_PAM_SERVICE=\"ssh\" -D__FILE_OFFSET_BITS=64 -DHAVE_MMAP_ANON_SHARED' \
                 SSH_KEYSIGN='/usr/lib/ssh-keysign'
         # Support building on Debian 3.0 (with GNOME 1.4) and later.
         if [ -f /usr/include/libgnomeui-2.0/gnome.h ]; then \
@@ -46,6 +54,17 @@ clean:
         rm -f config.log
         if [ -f version.h.upstream ]; then mv version.h.upstream version.h; \
         fi
+ifeq ($(PO2DEBCONF),yes)
+        # Hack for woody compatibility. This makes sure that the
+        # debian/templates file shipped in the source package doesn't
+        # specify encodings, which woody's debconf can't handle. If building
+        # on a system with po-debconf installed (conveniently debhelper (>=
+        # 4.1.16) depends on it), the binary-arch target will generate a
+        # better version for sarge.
+        echo 1 > debian/po/output
+        po2debconf debian/templates.master > debian/templates
+        rm -f debian/po/output
+endif
         dh_clean
 
 install: DH_OPTIONS=
@@ -88,6 +107,9 @@ binary-indep: build install
 binary-arch: build install
         dh_testdir
         dh_testroot
+ifeq ($(PO2DEBCONF),yes)
+        po2debconf -e utf8 debian/templates.master > debian/templates
+endif
         dh_installdebconf
         dh_installdocs OVERVIEW README
         cat debian/copyright.head LICENCE > debian/tmp/usr/share/doc/ssh/copyright
@@ -103,7 +125,7 @@ binary-arch: build install
         test ! -e debian/tmp/etc/ssh/ssh_prng_cmds \
           || echo "/etc/ssh/ssh_prng_cmds" >> debian/tmp/DEBIAN/conffiles
         dh_shlibdeps
-        dh_gencontrol
+        dh_gencontrol -- -V'debconf-depends=debconf (>= $(MINDEBCONFVER))'
         dh_md5sums
         dh_builddeb
 
diff --git a/debian/templates b/debian/templates
index ea8565d29..a017e5e28 100644
--- a/debian/templates
+++ b/debian/templates
@@ -1,83 +1,469 @@
 Template: ssh/privsep_tell
 Type: note
 Description: Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
+ This version of OpenSSH contains the new privilege separation option. This
+ significantly reduces the quantity of code that runs as root, and
+ therefore reduces the impact of security holes in sshd.
  .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
+ Unfortunately, privilege separation interacts badly with PAM. Any PAM
+ session modules that need to run as root (pam_mkhomedir, for example) will
+ fail, and PAM keyboard-interactive authentication won't work.
  .
- Privilege separation is turned on by default, so if you decide you
- want it turned off, you need to add "UsePrivilegeSeparation no" to
+ Privilege separation is turned on by default, so if you decide you want it
+ turned off, you need to add "UsePrivilegeSeparation no" to
  /etc/ssh/sshd_config.
  .
  NB! If you are running a 2.0 series Linux kernel, then privilege
- separation will not work at all, and your sshd will fail to start
- unless you explicitly turn privilege separation off.
+ separation will not work at all, and your sshd will fail to start unless
+ you explicitly turn privilege separation off.
+Description-es: SeparaciСn de privilegios
+ Esta versiСn de OpenSSH incluye una nueva opciСn de separaciСn de
+ privilegios que reduce significativamente la cantidad de cСdigo que se
+ ejecuta como root, por lo que reduce el impacto de posibles agujeros de
+ seguridad en sshd.
+ .
+ Desafortunadamente, la separaciСn de privilegios no interactЗa
+ correctamente con PAM. Cualquier mСdulo PAM que necesite ejecutarse como
+ root (como, por ejemplo, pam_mkhomedir) y la autentificaciСn interactiva
+ PAM con teclado no funcionarАn.
+ .
+ La separaciСn de privilegios estА activa por defecto, por lo que si decide
+ desactivarla, tiene que aЯadir "UsePrivilegeSeparation no" al fichero
+ /etc/ssh/sshd_config.
+ .
+ Nota: Si utiliza un nЗcleo Linux de la serie 2.0, la separaciСn de
+ privilegios fallarА estrepitosamente y sshd no funcionarА a no ser que la
+ desactive.
+Description-fr: SИparation des privilХges
+ Cette version d'OpenSSH est livrИe avec la nouvelle option de sИparation
+ des privilХges. Cela rИduit de maniХre significative la quantitИ de code
+ s'exИcutant en tant que super-utilisateur, et donc rИduit l'impact des
+ trous de sИcuritИ dans sshd.
+ .
+ Malheureusement, la sИparation des privilХges interagit mal avec PAM. Tous
+ les modules de session PAM qui doivent Йtre exИcutИs en tant que
+ super-utilisateur (pam_mkhomedir, par exemple) ne s'exИcuteront pas, et
+ l'authentification interactive au clavier ne fonctionnera pas.
+ .
+ La sИparation des privilХges est activИe par dИfaut ; si vous souhaitez la
+ dИsactiver, vous devez ajouter ╚═UsePrivilegeSeparation no═╩ dans
+ /etc/ssh/sshd_config.
+ .
+ NB═! Si vous avez un noyau Linux de la sИrie des 2.0, la sИparation des
+ privilХges ne fonctionne pas, et votre dИmon sshd ne se lancera que si
+ vous avez explicitement dИsactivИ la sИparation des privilХges.
+Description-ja: фц╦╒╓нй╛н╔
+ кэ╔п║╪╔╦╔Г╔С╓н OpenSSH ╓о║╒©╥╓╥╓╓фц╦╒й╛н╔╔╙╔в╔╥╔Г╔С╓Р╩Щ╓ц╓ф╓╓╓ч╓╧║ё
+ ╓Ё╓Л╓к╓Х╓ц╓ф║╒root ╦╒╦б╓г╪б╧т╓╣╓Л╓К╔Ё║╪╔и╓ннл╓РбГиЩ╓к╦╨╓И╓╧╓Ё╓х╓╛
+ ╓г╓╜║╒sshd ╓н╔╩╔╜╔Е╔Й╔ф╔ё╔ш║╪╔К╓н╠ф╤а╓Р╦╨╓И╓╧╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ╩дг╟╓й╓Ё╓х╓к║╒фц╦╒й╛н╔╓о PAM ╓к╟╜╠ф╤а╓Рм©╓╗╓ч╓╧║ёroot ╓г╪б╧т╓╣╓Л╓К а╢╓ф╓н
+ PAM ╔╩╔ц╔╥╔Г╔С╔Б╔╦╔Е║╪╔К (нЦ╓╗╓п pam_mkhomedir) ╓оф╟╓╚╓й╓╞
+ ╓й╓Й╓ч╓╧║ё╓ч╓©║╒PAM ╔╜║╪╔э║╪╔ибпоце╙г╖╬з╓Бф╟╨Н╓╥╓й╓╞╓й╓Й╓ч╓╧║ё
+ .
+ фц╦╒й╛н╔╓о╔г╔у╔╘╔К╔х╓гм╜╦З╓к╓й╓ц╓ф╓╓╓ч╓╧║ёл╣╦З╓к╓╥╓©╓╓╬Л╧Г╓о║╒
+ /etc/ssh/sshd_conf ╓к║жUsePrivilegeSeparation no║в╓х╓╓╓╕╧т╓Рди╡ц
+ ╓╥╓ф╓╞╓ю╓╣╓╓║ё
+ .
+ цМ╟у! Linux ╔╚║╪╔м╔К╓н╔п║╪╔╦╔Г╔С 2.0 ╥онС╓Р╩х╓ц╓ф╓╓╓К╬Л╧Г║╒фц╦╒
+ й╛н╔╓оа╢╓╞ф╟╨Н╓╥╓ч╓╩╓С║ёлю╪╗е╙╓кфц╦╒й╛н╔╓Рл╣╦З╓к╓╥╓й╓╓╦б╓Й║╒sshd
+ ╓о╣╞ф╟╓к╪╨гт╓╥╓ч╓╧║ё
+Description-pl: Separacja uprawnieЯ
+ Ta wersja OpenSSH zawiera now╠ opcjЙ separacji uprawnieЯ. Znacz╠co
+ zmniejsza ona ilo╤Ф kodu, ktСry jest uruchamiany jako root i co za tym
+ idzie redukuje efekty luk bezpieczeЯstwa w sshd.
+ .
+ Niestety separacja uprawnieЯ ╪le reaguje z PAMem. Jakikolwiek moduЁ sesji
+ PAM, ktСry musi byФ uruchamiany jako root (pam_mkhomedir, na przykЁad)
+ zawiedzie. Nie bЙdzie dziaЁaФ rСwnie© interaktywna autentykacja z
+ klawiatury (keyboard-interactive authentication).
+ .
+ Separacja uprawnieЯ jest domy╤lnie wЁ╠czona, wiЙc je╤li zdecydujesz siЙ j╠
+ wyЁ╠czyФ, musisz dodaФ "UsePrivilegeSeparation no" do pliku
+ /etc/ssh/sshd_config.
+ .
+ UWAGA! Je©eli u©ywasz j╠dra Linux'a z serii 2.0, to separacja uprawnieЯ w
+ ogСle nie bЙdzie dziaЁaФ i sshd nie wystartuje dopСki wЁasnorЙcznie nie
+ wyЁ╠czysz separacji uprawnieЯ w /etc/ssh/sshd_config.
+Description-pt_BR: SeparaГЦo de PrevilИgios
+ Esta versЦo do OpenSSH contИm a nova opГЦo de separaГЦo de privilИgios.
+ Esta opГЦo reduz significativamente a quantidade de cСdigo que И executada
+ como root e portanto reduz o impacto de falhas de seguranГa no sshd.
+ .
+ Infelizmente, a separaГЦo de privilИgios interage de maneira ruim com o
+ PAM. Quaisquer mСdulos de sessЦo PAM que precisem ser executados como root
+ (pam_mkhomedir, por exemplo) irЦo falhar e autenticaГЦo interativa com
+ teclado do PAM nЦo funcionarА.
+ .
+ A separaГЦo de previlИgios estА habilitado por padrЦo, portanto caso vocЙ
+ decida que deseja desabilitА-la vocЙ precisarА adicionar a linha
+ "UsePrivilegeSeparation no" ao arquivo /etc/ssh/sshd_config.
+ .
+ NB ! Caso vocЙ esteja executando um kernel Linux da sИria 2.0 o recurso de
+ separaГЦo de privilИgios nЦo funcionarА e seu daemon sshd irА falhar ao
+ iniciar a menos que vocЙ explicitamente desabilite o recurso de separaГЦo
+ de privilИgios.
 
 Template: ssh/privsep_ask
 Type: boolean
 Default: true
 Description: Enable Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
- .
- Since you've opted to have me generate an sshd_config file for you,
- you can choose whether or not to have Privilege Separation turned on
- or not. Unless you are running 2.0 (in which case you *must* say no
- here or your sshd won't start at all) or know you need to use PAM
- features that won't work with this option, you should say yes here.
+ This version of OpenSSH contains the new privilege separation option. This
+ significantly reduces the quantity of code that runs as root, and
+ therefore reduces the impact of security holes in sshd.
+ .
+ Unfortunately, privilege separation interacts badly with PAM. Any PAM
+ session modules that need to run as root (pam_mkhomedir, for example) will
+ fail, and PAM keyboard-interactive authentication won't work.
+ .
+ Since you've opted to have me generate an sshd_config file for you, you
+ can choose whether or not to have Privilege Separation turned on or not.
+ Unless you are running 2.0 (in which case you *must* say no here or your
+ sshd won't start at all) or know you need to use PAM features that won't
+ work with this option, you should say yes here.
+Description-da: Aktiver Privilegie adskillelse
+ Denne version af OpenSSH indeholder den nye privilegie adskillelses
+ mulighed. Det reducerer markant mФngden af kode der kЬrer som root, og
+ derfor reducerer det impakten pЕ sikkerheds huller i sshd.
+ .
+ DesvФrre, arbejder det ikke godt sammen med PAM. Ethvert PAM session modul
+ der skal kЬres som root (pam_mkhomedir, f.eks.) vil fejle, og PAM
+ tastatur-interaktive autentifikationer vil ikke virke.
+ .
+ Siden du har bedt mig om at lave en sshd_config fil til dig, kan du vФlge
+ om du vil have privilegie adskillelse slЕet til eller ej. Medmindre du
+ kЬrer 2.0 (i hvilket tilfФlde du *skal* sige nej her, ellers vil din sshd
+ slet ikke starte) eller ved at du skal bruge PAM funktioner som ikke vil
+ virke med dette tilvalg, skal du sige ja her.
+Description-es: Activar separaciСn de privilegios
+ Esta versiСn de OpenSSH incluye una nueva opciСn de separaciСn de
+ privilegios que reduce significativamente la cantidad de cСdigo que se
+ ejecuta como root, por lo que reduce el impacto de posibles agujeros de
+ seguridad en sshd.
+ .
+ Desafortunadamente, la separaciСn de privilegios no interactЗa
+ correctamente con PAM. Cualquier mСdulo PAM que necesite ejecutarse como
+ root (como, por ejemplo, pam_mkhomedir) y la autentificaciСn interactiva
+ PAM con teclado no funcionarАn.
+ .
+ Puesto que ha elegido crear automАticamente el fichero sshd_config, puede
+ decidir ahora si quiere activar la opciСn de separaciСn de privilegios. A
+ menos que utilice la versiСn 2.0 (en cuyo caso debe responer no aquМ o
+ sshd no arrancarА) o sepa que necesita usar ciertas caracterМsticas de PAM
+ que funcionan con esta opciСn, deberМa responder sМ a esta pregunta.
+Description-fr: Activer la sИparation des privilХges
+ Cette version d'OpenSSH est livrИe avec la nouvelle option de sИparation
+ des privilХges. Cela rИduit de maniХre significative la quantitИ de code
+ s'exИcutant en tant que super-utilisateur, et donc rИduit l'impact des
+ trous de sИcuritИ dans sshd.
+ .
+ Malheureusement, la sИparation des privilХges interagit mal avec PAM. Tous
+ les modules de session PAM qui doivent Йtre exИcutИs en tant que
+ super-utilisateur (pam_mkhomedir, par exemple) ne s'exИcuteront pas, et
+ l'authentification interactive au clavier ne fonctionnera pas.
+ .
+ Comme vous souhaitez que je gИnХre le fichier de configuration sshd_config
+ Ю votre place, vous pouvez choisir d'activer ou non l'option de sИparation
+ des privilХges. Si vous utilisez un noyau 2.0 (dans ce cas vous *devez*
+ dИsactiver cette option ou alors sshd ne se lancera pas) ou bien si vous
+ avez besoin de fonctionnalitИs PAM, cela ne fonctionnera pas si cette
+ option est activИe, dans le cas contraire vous devriez l'activer.
+Description-ja: фц╦╒й╛н╔╓Рм╜╦З╓к╓╧╓К
+ кэ╔п║╪╔╦╔Г╔С╓н OpenSSH ╓о║╒©╥╓╥╓╓фц╦╒й╛н╔╔╙╔в╔╥╔Г╔С╓Р╩Щ╓ц╓ф╓╓╓ч╓╧║ё
+ ╓Ё╓Л╓к╓Х╓ц╓ф║╒root ╦╒╦б╓г╪б╧т╓╣╓Л╓К╔Ё║╪╔и╓ннл╓РбГиЩ╓к╦╨╓И╓╧╓Ё╓х╓╛
+ ╓г╓╜║╒sshd ╓н╔╩╔╜╔Е╔Й╔ф╔ё╔ш║╪╔К╓н╠ф╤а╓Р╦╨╓И╓╧╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ╩дг╟╓й╓Ё╓х╓к║╒фц╦╒й╛н╔╓о PAM ╓к╟╜╠ф╤а╓Рм©╓╗╓ч╓╧║ёroot ╓г╪б╧т╓╣╓Л╓К а╢╓ф╓н
+ PAM ╔╩╔ц╔╥╔Г╔С╔Б╔╦╔Е║╪╔К (нЦ╓╗╓п pam_mkhomedir) ╓оф╟╓╚╓й╓╞
+ ╓й╓Й╓ч╓╧║ё╓ч╓©║╒PAM ╔╜║╪╔э║╪╔ибпоце╙г╖╬з╓Бф╟╨Н╓╥╓й╓╞╓й╓Й╓ч╓╧║ё
+ .
+ ╓╒╓й╓©╓о sshd_config ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Ра╙бР╓╥╓ч╓╥╓©╓н╓г║╒
+ ╓Ё╓Ё╓гфц╦╒й╛н╔╓Рм╜╦З╓к╓╧╓К╓╚╓╥╓й╓╓╓╚╓Ра╙бР╓г╓╜╓ч╓╧║ё2.0 ╥онС╓н
+ ╔╚║╪╔м╔К╓Р╩х╓ц╓ф╓╓╓К╓╚ (╓Ё╓н╬Л╧Г╓к╓о║ж╓╓╓╓╓╗║в╓Ра╙╓п╓й╓╓╓х sshd
+ ╓о╣╞ф╟╓╧╓И╓╥╓ч╓╩╓С)║╒PAM ╓н╣║г╫╓н╓╕╓афц╦╒й╛н╔╓х╤╕б╦╓г╓╜╓й╓╓╣║г╫╓Р
+ ╩х╓╓╓©╓╓╬Л╧Г╟йЁ╟╓о║╒║ж╓о╓╓║в╓Ра╙╓ж╓ы╓╜╓г╓╧║ё
+Description-pl: WЁ╠czenie separacji uprawnieЯ
+ Ta wersja OpenSSH zawiera now╠ opcjЙ separacji uprawnieЯ. Znacz╠co
+ zmniejsza ona ilo╤Ф kodu, ktСry jest uruchamiany jako root i co za tym
+ idzie redukuje efekty luk bezpieczeЯstwa w sshd.
+ .
+ Niestety separacja uprawnieЯ ╪le reaguje z PAMem. Jakikolwiek moduЁ sesji
+ PAM, ktСry musi byФ uruchamiany jako root (pam_mkhomedir, na przykЁad)
+ zawiedzie. Nie bЙdzie dziaЁaФ rСwnie© interaktywna autentykacja z
+ klawiatury (keyboard-interactive authentication).
+ .
+ ZdecydowaЁe╤ siЙ na to abym wygenerowaЁ dla ciebie plik sshd_config, i
+ mo©esz wybraФ czy chcesz wЁ╠czyФ SeparacjЙ UprawnieЯ, czy te© nie. Je╤li
+ nie u©ywasz j╠dra z serii 2.0 (w ktСrym to przypadku *musisz* odpowiedzieФ
+ tutaj 'nie' albo sshd w ogСle nie ruszy) i je╤li nie musisz korzystaФ z
+ mo©liwo╤ci PAMa, ktСre nie bЙd╠ dziaЁaЁy z t╠ opcj╠, powiniene╤
+ odpowiedzieФ tutaj 'tak'.
+Description-pt_BR: Habilitar SeparaГЦo de PrivilИgios
+ Esta versЦo do OpenSSH contИm a nova opГЦo de separaГЦo de privilИgios.
+ Esta opГЦo reduz significativamente a quantidade de cСdigo que И executada
+ como root e portanto reduz o impacto de falhas de seguranГa no sshd.
+ .
+ Infelizmente, a separaГЦo de privilИgios interage de maneira ruim com o
+ PAM. Quaisquer mСdulos de sessЦo PAM que precisem ser executados como root
+ (pam_mkhomedir, por exemplo) irЦo falhar e autenticaГЦo interativa com
+ teclado do PAM nЦo funcionarА.
+ .
+ Uma vez que vocЙ optou por permitir que o debconf gere o arquivo
+ sshd_config para vocЙ, И possМvel escolher se vocЙ deseja ter ou nЦo o
+ recurso de separaГЦo de privilИgios habilitada. A menos que vocЙ esteja
+ executando um kernel Linux da sИrie 2.0 (neste caso vocЙ *deve* responder
+ negativamente a esta pergunta ou seu daemon sshd nЦo serА iniciado) ou
+ saiba que vocЙ precisa utilizar recursos do PAM que nЦo funcionam com esta
+ opГЦo habilitada vocЙ deve responder sim aqui.
 
 Template: ssh/new_config
 Type: boolean
 Default: true
 Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from 
- the version shipped in Debian 'Potato', which you appear to be upgrading from.
- I can now generate you a new configuration file (/etc/ssh/sshd.config), which
- will work with the new server version, but will not contain any customisations
- you made with the old version. 
- .
- Please note that this new configuration file will set the value of 
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
- ssh directly in as root). It is the opinion of the maintainer that this is
- the correct default (see README.Debian for more details), but you can always
- edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration file 
- for you.
+ This version of OpenSSH has a considerably changed configuration file from
+ the version shipped in Debian 'Potato', which you appear to be upgrading
+ from. I can now generate you a new configuration file
+ (/etc/ssh/sshd.config), which will work with the new server version, but
+ will not contain any customisations you made with the old version.
+ .
+ Please note that this new configuration file will set the value of
+ 'PermitRootLogin' to yes (meaning that anyone knowing the root password
+ can ssh directly in as root). It is the opinion of the maintainer that
+ this is the correct default (see README.Debian for more details), but you
+ can always edit sshd_config and set it to no if you wish.
+ .
+ It is strongly recommended that you let me generate a new configuration
+ file for you.
+Description-da: Opret ny konfigurations fil
+ Denne version af OpenSSH har en betydeligt Фndret konfigurations fil fra
+ den version der kom med Debian 'Potato', som du ser ud til at opgradere
+ fra. Jeg kan nu oprette en ny konfigurations fil (//etc/ssh/sshd.config),
+ som vil virke med den nye server version, men det vil ikke beholde
+ eventuelle Фndringer du lavede med den gamle version.
+ .
+ Venligst bemФrk at den nye konfigurations fil vil sФtte vФrdien af
+ 'PermitRootLogin' til ja (som betyder at alle der kender roots password,
+ kan tilgЕ maskinen via ssh direkte). Det er vedligeholderens mening, at
+ det er den korrekte standard-vФrdi (se README.Debian for flere detaljer),
+ men du kan altid redigere sshd_config og slЕ det fra, hvis du Ьnsker.
+ .
+ Du rЕdes stФrkt til at lade mig genere en ny konfigurations fil for dig.
+Description-es: Generar un nuevo fichero de configuraciСn
+ Esta versiСn de OpenSSH tiene un fichero de configuraciСn
+ considerablemente diferente del incluido en Debian Potato, que es la
+ versiСn desde la que parece estar actualizando. Puede crear
+ automАticamente un nuevo fichero de configuraciСn (/etc/ssh/sshd_config),
+ que funcionarА con la nueva versiСn del servidor, pero no incuirА las
+ modificaciones que hiciera en la versiСn antigua.
+ .
+ AdemАs, recuerde que este nuevo fichero de configuraciСn dirА sМ en la
+ opciСn 'PermitRootLogin', por lo que cualquiera que conozca la contraseЯa
+ de root podrА entrar mediante ssh directamente como root. En opiniСn del
+ mantenedor Иsta es la opciСn predeterminada mАs adecuada (puede leer
+ README.Debian si quiere conocer mАs detalles), pero siempre puede editar
+ sshd_config y poner no si lo desea.
+ .
+ Es muy recomendable que permita que se genere un nuevo fichero de
+ configuraciСn ahora.
+Description-fr: CrИer un nouveau fichier de configuration
+ Cette version d'OpenSSH utilise un fichier de configuration qui a
+ ИnormИment changИ depuis la version contenue dans la distribution Debian
+ ╚═Potato═╩, depuis laquelle vous semblez faire une mise Ю jour. Je peux
+ gИnИrer maintenant pour vous un nouveau fichier de configuration
+ (/etc/ssh/sshd.config) qui marchera avec la nouvelle version du serveur,
+ mais ne contiendra aucun des rИglages que vous avez faits sur l'ancienne
+ version.
+ .
+ Veuillez noter que ce nouveau fichier de configuration positionnera la
+ valeur de ╚═PermitRootLogin═╩ Ю ╚═yes═╩ (ce qui signifie que quiconque
+ connaissant le mot de passe du super-utilisateur peut se connecter en tant
+ que tel sur la machine). Le responsable du paquet pense que c'est lЮ un
+ comportement par dИfaut normal (lisez README.Debian pour plus
+ d'informations), mais vous pouvez toujours Иditer le fichier sshd_config
+ et changer cela.
+ .
+ Il est fortement recommandИ que vous me laissiez gИnИrer le nouveau
+ fichier de configuration.
+Description-ja: ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╨Н╓Й╓ч╓╧
+ OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒Debian 'Potato' ╓к╢ч╓ч╓Л╓ф╓╓╓К╔п║╪╔╦╔Г╔С
+ (╓╓╓ч║╒╓╫╓н╔п║╪╔╦╔Г╔С╓╚╓И╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р╩Н╓ъ╓ф╓╓╓К╓х╓Ё╓М) ╓╚╓И║╒
+ юъдЙ╔у╔║╔╓╔К╓╛бГиЩ╓кйя╡╫╓╥╓ф╓╓╓ч╓╧║ё╓╓╓ч║╒©╥╓╥╓╓╔п║╪╔╦╔Г╔С╓н╔╣║╪╔п╓г
+ ╩х╓╕╓Ё╓х╓╛╓г╓╜╓К©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К (/etc/ssh/sshd/config) ╓Р╪╚ф╟ю╦ю╝
+ ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒╓╫╓н╔у╔║╔╓╔К╓о║╒╦е╓╓╔п║╪╔╦╔Г╔С╓нюъдЙ╔у╔║╔╓╔К╓к
+ ╢ч╓ч╓Л╓К╓╒╓й╓©╓нюъдЙ╓╛а╢╓╞╢ч╓ч╓Л╓ч╓╩╓С║ё
+ .
+ ╓Ё╓н©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓о║╒║жPermitRootLogin║в╓Р║жyes║в╓кюъдЙ╓╥╓ч╓╧║ё
+ (╓д╓ч╓Й║╒root ╓н╔я╔╧╔О║╪╔и╓Рцн╓ц╓ф╓╓╓К©м╓й╓Иц╞╓г╓Бд╬юэ╔М╔╟╔╓╔С╓г╓╜╓ч
+ ╓╧)║ё╓Ё╓Л╓г╓Х╓╓║╒╓х╓╓╓╕╓н╓╛╓Ё╓н╔я╔ц╔╠║╪╔╦╓н╔А╔С╔ф╔й╓н╟у╦╚╓г╓╧╓╛ (╬э╓╥ ╓╞╓о
+ README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓)║╒sshd_config ╓Рйт╫╦╓╥╓ф║жno║в╓кюъ
+ дЙ╓╧╓К╓Ё╓х╓Б╓г╓╜╓ч╓╧║ё
+ .
+ ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Р╤╞╓╞╓╙╢╚╓А╓╥╓ч╓╧║ё
+Description-pl: Wygeneruj nowy plik konfiguracyjny
+ W tej wersji OpenSSH zmieniЁ siЙ plik konfiguracyjny w stosunku do wersji
+ dostarczanej z Debianem 'Potato', ktСr╠ zdajesz siЙ aktualizowaФ. MogЙ
+ teraz wygenerowaФ nowy plik konfiguracyjny (/etc/ssh/sshd.config), ktСry
+ bЙdzie dziaЁaЁ z now╠ wersj╠ serwera, ale nie bЙdzie zawieraЁ ©adnych
+ dokonanych przez ciebie w starej wersji zmian.
+ .
+ Zauwa© proszЙ, ©e nowy plik konfiguracyjny bЙdzie ustawiaЁ warto╤Ф opcji
+ 'PermitRootLogin' na 'tak' (co oznacza, ©e ka©dy kto zna hasЁo root'a mo©e
+ zdalnie zalogowaФ siЙ przez ssh jako root). W opinii opiekuna pakietu to
+ jest poprawna warto╤Ф domy╤lna (szczegСЁy w README.Debian), ale mo©esz
+ sobie wyedytowaФ sshd_config i ustawiФ tЙ opcjЙ na 'nie' je╤li siЙ z t╠
+ opini╠ nie zgadzasz.
+ .
+ Jest bardzo wskazane aby╤ pozwoliЁ mi wygenerowaФ nowy plik
+ konfiguracyjny.
+Description-pt_BR: Gerar novo arquivo de configuraГЦo
+ Esta versЦo do OpenSSH possui um arquivo de configuraГЦo consideravelmente
+ diferente da versЦo fornecida com o Debian 'Potato' (Debian versЦo 2.2), a
+ versЦo do Debian da qual vocЙ parece estar atualizando. Esse assistente de
+ confgiuraГЦo inicial pode agora gerar um novo arquivo de configuraГЦo
+ (/etc/ssh/sshd_config) que irА funcionar com o nova versЦo do servidor
+ sshd mas nЦo irА conter nenhuma personalizaГЦo que vocЙ possa ter feito na
+ versЦo anterior.
+ .
+ Por favor note que este novo arquivo de configuraГЦo irА definir o valor
+ da opГЦo 'PermitRootLogin' para "yes" (o que significa que qualquer pessoa
+ que conheГa a senha de root poderА conectar via ssh diretamente como root
+ no servidor onde este pacote esta sendo instalado). A opiniЦo do
+ mantenedor do pacote И que esse И o comportamente padrЦo correto (consulte
+ o arquivo README.Debian deste pacote para maiores detalhes), mas vocЙ
+ poderА sempre editar o arquivo sshd_config e definir esta opГЦo para "no"
+ caso vocЙ nЦo concorde com o mantenedor do OpenSSH.
+ .
+ и fortemente recomendado que vocЙ permita que o novo arquivo de
+ configuraГЦo serА gerado automaticamente para vocЙ.
 
 Template: ssh/protocol2_only
 Type: boolean
 Default: true
 Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which
- is much more secure.  Disabling ssh 1 is encouraged, however this
- will slow things down on low end machines and might prevent older
- clients from connecting (the ssh client shipped with "potato" is affected).
+ This version of OpenSSH supports version 2 of the ssh protocol, which is
+ much more secure.  Disabling ssh 1 is encouraged, however this will slow
+ things down on low end machines and might prevent older clients from
+ connecting (the ssh client shipped with "potato" is affected).
  .
  Also please note that keys used for protocol 1 are different so you will
  not be able to use them if you only allow protocol 2 connections.
  .
- If you later change your mind about this setting, README.Debian has 
+ If you later change your mind about this setting, README.Debian has
  instructions on what to do to your sshd_config file.
+Description-da: Tillad kun SSH protokol 2
+ Denne udgave af OpenSSH understЬtter version 2 af ssh-protokollen, som er
+ betydeligt mere sikker. Det anbefales af deaktivere version 1. Dog kan det
+ slЬve langsomme maskiner, og forhindre Фldre klienter i at opnЕ
+ forbindelse (ssh klienten der kommer med "potato" er en af dem).
+ .
+ Du skal ogsЕ bemФrke at de nЬgler som bliver anvendt til protokol 1 er
+ forskellige, sЕ du vil ikke Фvre i stand til at bruge dem, hvis du kun
+ tillader protokol 2 forbindelser.
+ .
+ Hvis du senere Фndrer din mening om denne indstilling, har README.Debian
+ instruktioner pЕ hvad du skal gЬre ved din sshd_config fil.
+Description-es: Permitir sСlo la versiСn 2 del protocolo SSH
+ Esta versiСn de OpenSSH soporta la versiСn 2 del protocolo ssh, que es
+ mucho mАs segura que la anterior. Se recomienda desactivar la versiСn 1,
+ aunque funcionarА mАs lento en mАquinas modestas y puede impedir que se
+ conecten clientes antiguos, como, por ejemplo, el incluido en "potato".
+ .
+ TambiИn tenga en cuenta que las claves utilizadas para el protocolo 1 son
+ diferentes, por lo que no podrА usarlas si Зnicamente permite conexiones
+ mediante la versiСn 2 del protocolo.
+ .
+ Si mАs tarde cambia de opiniСn, el fichero README.Debian contiene
+ instrucciones sobre cСmo modificar en el fichero sshd_config.
+Description-fr: Permettre seulement la version 2 du protocole SSH
+ Cette version d'OpenSSH connaНt la version 2 du protocole ssh, qui est
+ bien plus sШre. DИsactiver ssh 1 est une bonne chose, cependant cela peut
+ ralentir les machines peu puissantes et pourrait empЙcher ceux qui
+ utilisent des vieilles versions de la partie cliente de se connecter (le
+ client ssh de la distribution Debian ╚═Potato═╩ en fait partie).
+ .
+ De plus, les clИs utilisИes par la version 1 du protocole sont diffИrentes
+ et vous ne pourrez pas les utiliser si vous n'autorisez que les connexions
+ utilisant la version 2 du protocole.
+ .
+ Si vous changez d'avis ultИrieurement et dИcidez de modifier ce rИglage,
+ les instructions fournies dans le fichier README.Debian vous indiquent
+ comment modifier le fichier sshd_config.
+Description-ja: SSH ╔в╔М╔х╔Ё╔К 2 ╓н╓ъ╓Р╣Ж╡д╓╥╓ч╓╧
+ OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒╓╨╓ц╓х╟ба╢╓й║╒ssh ╔в╔М╔х╔Ё╔К╓н╔п║╪╔╦╔Г╔С 2
+ ╓Р╔╣╔щ║╪╔х╓╥╓ф╓╓╓ч╓╧║ёssh 1 ╓Р╤ь╩ъ╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧╓╛║╒цы╓╓╔ч
+ ╔╥╔С╓г╓оф╟╨Н╓╛цы╓╞╓й╓ц╓©╓Й║╒╦е╓╓╔╞╔И╔╓╔╒╔С╔х╓╚╓ИюэбЁ╓г╓╜╓й╓╞╓й╓ц╓©╓Й
+ ╓╥╓ч╓╧ ("potato" ╓н ssh ╔╞╔И╔╓╔╒╔С╔х╓БюэбЁ╓г╓╜╓й╓╞╓й╓Й╓ч╓╧)║ё
+ .
+ ╓ч╓©║╒╔в╔М╔х╔Ё╔К 1 ╓г╩х╓╕╔╜║╪╓о╟ш╓й╓К╓©╓А║╒╔в╔М╔х╔Ё╔К 2 ╓Рм╜╦З╓к╓╥╓©
+ ╓ю╓╠╓г╓о╓╫╓н╔╜║╪╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╩╓С║ё
+ .
+ ╓Б╓╥╨ё╦Е╓╒╓й╓©╓╛╧м╓╗╓Рйя╓╗╓©╓И║╒README.Debian ╓Рфи╓Ю╓х sshd_config ╓Р
+ ╓и╓н╓Х╓╕╓кйя╧╧╓╥╓©╓И╓Х╓╓╓╚╓╛й╛╓╚╓Й╓ч╓╧║ё
+Description-pl: Zezwalaj wyЁ╠cznie na wersjЙ 2 protokoЁu SSH
+ Ta wersja OpenSSH wspiera drug╠ wersjЙ protokoЁu ssh, ktСra jest znacznie
+ bardziej bezpieczna. WyЁ╠czenie ssh 1 jest zalecane, choФ spowalnia to
+ dziaЁanie na starych maszynach i mo©e uniemo©liwiФ poЁ╠czenie starszym
+ wersjom klientСw (dotyczy to np. klienta ssh doЁ╠czanego do "potato").
+ .
+ Ponadto, zauwa© proszЙ, ©e klucze u©ywane przez protokСЁ 1 s╠ inne, wiЙc
+ nie bЙdziesz mСgЁ ich u©ywaФ je╤li zezwolisz na korzystanie wyЁ╠cznie z
+ wersji 2 protokoЁu.
+ .
+ Je╤li pС╪niej zmienisz zdanie co do tego ustawienia, to instrukcje co
+ zmieniФ w sshd_config znajduj╠ siЙ w README.Debian.
+Description-pt_BR: Permitir somente protocolo SSH versЦo 2
+ Esta versЦo do OpenSSH suporta a versЦo 2 do protocolo ssh, a qual И muito
+ mais segura que a versЦo anterior. и recomendado desabilitar o suporte ao
+ protocolo ssh versЦo 1, porИm isto farА com que conexУes fiquem mais
+ lentas em mАquinas mais antigas e pode impedir que clientes antigos
+ consigam se conectar (o cliente ssh fornecido com a versЦo do Debian 2.2
+ "potato" И afetada.)
+ .
+ Por favor note tambИm que as chaves usadas para o protocolo 1 sЦo
+ diferentes portanto vocЙ nЦo poderА usА-las caso vocЙ somente permita
+ conexУes usando o protocolo 2.
+ .
+ Caso vocЙ posteriormente mude de idИia sobre esta configuraГЦo, o arquivo
+ README.Debian deste pacote possui instruГУes sobre o que mudar em seu
+ arquivo de configuraГЦo sshd_config.
 
 Template: ssh/ssh2_keys_merged
 Type: note
 Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and
- ssh2 keys. This means the authorized_keys2 and known_hosts2 files
- are no longer needed. They will still be read in order to maintain
- backwards compatibility
+ As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2
+ keys. This means the authorized_keys2 and known_hosts2 files are no longer
+ needed. They will still be read in order to maintain backwards
+ compatibility
+Description-da: ssh2-nЬgler flettet i opsФtningsfilerne
+ Siden version 3 har OpenSSH ikke lФngere separate filer for ssh1- og
+ ssh2-nЬgler. Det betyder, at filerne authorized_keys2 og known_hosts2 ikke
+ lФngere er nЬdvendige. De vil stadig dog stadig blive lФst for
+ bagudkompatilitetens skyld.
+Description-es: Las claves ssh2 ya se incluyen en los ficheros de configuraciСn
+ A partir de la versiСn 3, OpenSSH ya no utiliza ficheros diferentes para
+ las claves ssh1 y ssh2. Esto quiere decir que ya no son necesarios los
+ ficheros authorized_keys2 y known_hosts2, aunque aЗn se seguirАn leyendo
+ para mantener compatibilidad hacia atrАs.
+Description-fr: ClИs pour ssh2 fusionnИes dans les fichiers de configuration
+ OpenSSH, depuis sa version 3, n'utilise plus de fichiers distincts pour
+ les clИs ssh1 et ssh2. Cela signifie que les fichiers authorized_keys2 et
+ known_hosts2 ne sont plus utiles. Ils seront nИanmoins lus afin de
+ prИserver la compatibilitИ descendante.
+Description-ja: ssh2 ╔╜║╪╓оюъдЙ╔у╔║╔╓╔К╓кеЩ╧Г╓╣╓Л╓ч╓╧
+ OpenSSH ╓н╔п║╪╔╦╔Г╔С 3 ╓о║╒ssh1 ╓х ssh2 ╓н╔╜║╪╓к╦дйл╓н╔у╔║╔╓╔К╓Р╩х╓╓
+ ╓ч╓╩╓С║ё╓д╓ч╓Й║╒authorized_keys2 ╔у╔║╔╓╔К╓х known_hosts2 ╔у╔║╔╓╔К╓о╓Б
+ ╓о╓Дитмв╓х╓й╓Й╓ч╓╥╓©║ё╦ЕйЩ╦ъ╢╧ю╜╓Рйщ╓д╓©╓А╓к╓о╓Ё╓Л╓И╓н╔у╔║╔╓╔К╓╛и╛мв
+ ╓г╓╧║ё
+Description-pl: klucze ssh2 wЁ╠czone do plikСw konfiguracyjnych
+ Pocz╠wszy od wersji 3 OpenSSH nie u©ywa ju© osobnych plikСw dla kluczy
+ ssh1 i ssh2. Oznacza to, ©e pliki authorized_keys2 i known_hosts2 nie s╠
+ ju© potrzebne. BЙd╠ one jednak odczytywane aby zachowaФ wsteczn╠
+ kompatybilno╤Ф.
+Description-pt_BR: Chaves ssh2 incluМdas nos arquivos de configuraГЦo
+ A partir do versЦo 3 o OpenSSH nЦo usa mais arquivos separados para as
+ chaves ssh1 e ssh2. Isto significa que os arquivos "authorized_keys2" e
+ "know_hosts2" nЦo sЦo mais necessАrios. Os mesmos continuarЦo a ser lidos
+ para manter a compatibilidade com versУes anteriores.
 
 Template: ssh/use_old_init_script
 Type: boolean
@@ -89,6 +475,64 @@ Description: Do you want to continue (and risk killing active ssh sessions) ?
  .
  You can fix this by adding "--pidfile /var/run/sshd.pid" to the
  start-stop-daemon line in the stop section of the file.
+Description-da: Vil du fortsФtte (og risikere at afbryde aktive ssh-forbindelser)?
+ Den udgave af /etc/init.d/ssh, du har installeret, vil sandsynligvis
+ afbryde alle sshd-dФmoner. Det vil vФre en rigtigt dЕrlig idИ, hvis du er
+ ved at opgradering via en ssh-forbindelse.
+ .
+ Du kan afhjФlpe dette ved at tilfЬje "--pidfile /var/run/sshd.pid" til
+ 'start-stop-daemon'-linjen i stop-afsnittet af filen.
+Description-de: Wollen Sie weitermachen (und das Killen der Session riskieren)?
+ Die Version von /etc/init.d/ssh, die Sie installiert haben, wird
+ vermutlich Ihre aktiven ssh-Instanzen killen. Wenn Sie das Upgrade via ssh
+ erledigen, dann ist das ein Problem.
+ .
+ Sie kЖnnen das Problem beheben, indem sie "--pidfile /var/run/sshd.pid" an
+ die start-stop-daemon Zeile in dem Bereich stop der Datei /etc/init.d/ssh
+ ergДnzen.
+Description-es: ©Desea continuar, aЗn a riesgo de matar las sesiones ssh activas?
+ La versiСn de /etc/init.d/ssh que tiene instalada es muy probable que mate
+ el demonio ssh. Si estА actualizando a travИs de una sesiСn ssh, puede que
+ no sea muy buena idea.
+ .
+ Puede arreglarlo aЯadiendo "--pidfile /var/run/sshd.pid" a la lМnea
+ 'start-stop-daemon', en la secciСn 'stop' del fichero.
+Description-fr: Voulez-vous continuer (et risquer de rompre les sessions ssh actives)═?
+ Il est probable que la version de /etc/init.d/ssh installИe en ce moment
+ tue toutes les instances de sshd en cours. En cas de mise Ю jour par ssh,
+ Гa serait une mauvaise idИe.
+ .
+ Vous pouvez corriger cela en ajoutant dans /etc/init.d/ssh ╚═--pidfile
+ /var/run/sshd.pid═╩ Ю la ligne ╚═start-stop-daemon═╩ dans la section
+ ╚═stop═╩ du fichier.
+Description-ja: бЁ╓╠╓ф╓╓╓╓╓г╓╧╓╚ (юэбЁцФ╓н ssh ╔╩╔ц╔╥╔Г╔С╓╛юз╓Л╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С)
+ ╓╓╓ч╔╓╔С╔╧╔х║╪╔К╓╥╓© /etc/init.d/ssh ╓о║╒╓╙╓╫╓И╓╞╪б╧тцФ╓н sshd ╓Ра╢╓ф
+ дД╩ъ╓╣╓╩╓ч╓╧║ё╓Ё╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р ssh ╔╩╔ц╔╥╔Г╔С╓Рмя╓╓╓ф╧т╓╕╓н╓о╢ж
+ ╟Ц╓ц╓©╓Д╓Й╓╚╓©╓г╓╧║ё
+ .
+ ╓Ё╓н╬У╤╥╓Р╫╓ю╣╓╧╓К╓к╓о║╒/etc/init.d/ssh ╓н stop ╔╩╔╞╔╥╔Г╔С╓н
+ start-stop-daemon ╓н╧т╓к║ж--pidfile /var/run/sshd.pid║в╓хди╡ц╓╥╓ч╓╧║ё
+Description-pl: Czy chcesz kontynuowaФ (i ryzykowaФ zabicie aktywnych sesji ssh) ?
+ Zainstalowana wЁa╤nie wersja /etc/init.d/ssh mo©e zabiФ wszystkie
+ dziaЁaj╠ce obecnie kopie sshd. Je╤li robisz ten upgrade via ssh, to byЁaby
+ ZЁa Rzecz(tm).
+ .
+ Mo©esz to naprawiФ dodaj╠c "--pidfile /var/run/sshd.pid" do linijki
+ start-stop-daemon w sekcji stop tego pliku.
+Description-pt_BR: Deseja continuar (e arriscar acabar com sessУes ssh ativas) ?
+ A versЦo de /etc/init.d/ssh que vocЙ possui instalada estА prestes a matar
+ todas as instБncias sshd sendo executadas. Se vocЙ estА fazendo esta
+ atualizaГЦo atravИs de uma sessЦo ssh, isto seria uma Coisa Ruim(tm).
+ .
+ VocЙ pode corrigir isto adicionando "--pidfile /var/run/sshd.pid" na linha
+ start-stop-daemon na seГЦo stop deste arquivo.
+Description-ru: Вы хотите продолжить (рискуя потерять активные ssh-соединения)?
+ Версия  /etc/init.d/ssh,  которую  вы  устанавливаете, может убить все
+ запущенные  процессы  ssh.  Если вы осуществляете это обновление через ssh
+ сессию, то это Плохая Вещь (tm).
+ .
+ Это можно исправить добавлением "--pidfile /var/run/sshd.pid" в строке
+ start-stop-daemon в разделе stop этого файла.
 
 Template: ssh/forward_warning
 Type: note
@@ -96,16 +540,106 @@ Description: NOTE: Forwarding of X11 and Authorization disabled by default.
  For security reasons, the Debian version of ssh has ForwardX11 and
  ForwardAgent set to ``off'' by default.
  .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
+ You can enable it for servers you trust, either in one of the
+ configuration files, or with the -X command line option.
  .
  More details can be found in /usr/share/doc/ssh/README.Debian
+Description-de: HINWEIS: Forwarden von X11 und Authorisierung ist abgeschaltet.
+ Aus SicherheitsgrЭnden sind die Debian Pakete von ssh ForwardX11 und
+ ForwardAgent auf "off" gesetzt.
+ .
+ Sie kЖnnen dies fЭr Server, denen Sie trauen, entweder per Eintrag in die
+ Konfigurations Dateien oder per Kommando-Zeilen Option -X Дndern.
+ .
+ Weitere Details koennen Sie in /usr/share/doc/ssh/README.Debian finden.
+Description-es: NOTA: ReenvМo de X11 y AutorizaciСn desactivadas por defecto.
+ Por razones de seguridad, la versiСn de ssh de Debian tiene por defecto
+ ForwardX11 y ForwardAgent desactivadas.
+ .
+ Puede activar estas opciones para los servidores en los que confМe, en los
+ ficheros de configuraciСn o con la opciСn -X en lМnea de comandos.
+ .
+ Puede encontrar mАs detalles en /usr/share/doc/ssh/README.Debian.
+Description-fr: NOTE═: suivi de session X11 et d'agent d'autorisation dИsactivИs par dИfaut.
+ Pour des raisons de sИcuritИ, la version Debian de ssh positionne les
+ options ForwardX11 et ForwardAgent Ю ╚═Off═╩ par dИfaut.
+ .
+ Vous pouvez activer ces options pour les serveurs en qui vous avez
+ confiance, soit dans un des fichiers de configuration, soit avec l'option
+ -X de la ligne de commande.
+ .
+ Plus d'informations sont disponibles dans
+ /usr/share/doc/ssh/README.Debian.
+Description-ja: цМ╟у: X11 ╓хг╖╬з╓н╔у╔╘╔О║╪╔г╔ё╔С╔╟╓о╔г╔у╔╘╔К╔х╓г╓о╤ь╩ъ╓╣╓Л╓ч╓╧
+ ╔╩╔╜╔Е╔Й╔ф╔ё╬Е╓нмЩмЁ╓╚╓И║╒Debian ╓н ssh ╓г╓о ForwardX11 ╓х ForwardAgent
+ ╓о╔г╔у╔╘╔К╔х╓г╓о║жoff║в╓кюъдЙ╓╣╓Л╓ч╓╧║ё
+ .
+ юъдЙ╔у╔║╔╓╔К╓Р╩х╓ц╓©╓Й║╒-X ╔Ё╔ч╔С╔и╔И╔╓╔С╔╙╔в╔╥╔Г╔С╓Р╩х╓ц╓©╓Й╓╧╓К
+ ╓Ё╓х╓г║╒©╝мя╓г╓╜╓К╔╣║╪╔п╓кбп╓╥╓ф╣Ж╡д╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ╬э╨ы╓о /usr/share/doc/ssh/README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓║ё
+Description-pl: UWAGA: Przekazywanie (forwarding) X11 i Autoryzacji jest domy╤lnie wyЁ╠czone.
+ Ze wzglЙdСw bezpieczeЯstwa Debianowa wersja ssh ma ForwardX11 i
+ ForwardAgent ustawione  domy╤lnie na 'off'.
+ .
+ Dla zaufanych serwerСw mo©esz wЁ╠czyФ te opcje w pliku konfiguracyjnym lub
+ przy pomocy opcji -X z linii komend.
+ .
+ WiЙcej szczegСЁСw znajdziesz w /usr/share/doc/ssh/README.Debian.
+Description-pt_BR: NOTA: Encaminhamento de X11 e AutorizaГЦo desabilitados por padrЦo.
+ Por razТes de seguranГa, a versЦo Debian do ssh tem as opГУes ForwardX11 e
+ ForwardAgent definidas como ``off'' por padrЦo.
+ .
+ VocЙ pode habilitar isso para servidores que vocЙ confia, ou em um dos
+ arquivos de configuraГЦo, ou com a opГЦo de linha de comando -X.
+ .
+ Maiores detalhes podem ser encontrados em
+ /usr/share/doc/ssh/README.Debian.
+Description-ru: ПРИМЕЧАНИЕ: Форвардинг X11 и Authorization запрещен по умолчанию.
+ По причинам безопасности, в версии для Debian ssh имеет ForwardX11 и
+ ForwardAgent установленными в ``off'' по умолчанию.
+ .
+ Вы можете разрешить их для серверов, которым доверяете либо в одном из
+ настроечных файлов, или параметром командной строки -X.
+ .
+ Дополнительую информацию можно найти в /usr/share/doc/ssh/README.Debian
 
 Template: ssh/insecure_rshd
 Type: note
 Description: Warning: rsh-server is installed --- probably not a good idea
  having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
+ wanting to obtain by installing ssh.  I'd advise you to remove that
+ package.
+Description-da: Advarsel: rsh-serveren er installeret --- sikkert ikke en god idИ
+ Den sikkerhed, du nok Ьnskede at opnЕ ved at installere ssh undermineres
+ ved, at du har rsh-server installeret. Jeg vil rЕde dig til at fjerne
+ pakken rsh-server.
+Description-de: Warnung: rsh-server ist installiert --- mЖglicherweise
+ ist es eine schlechte Idee, den rsh-server installiert zu haben, da er die
+ Sicherheit untergrДbt. Wir empfehlen, das Paket zu entfernen.
+Description-es: Aviso: tiene rsh-server instalado
+ Tener rsh-server instalado representa un menoscabo de la seguridad que
+ probablemente desea obtener instalando ssh. Es muy aconsejable que borre
+ ese paquete.
+Description-fr: Attention═: rsh-server est installИ -- ce n'est probablement pas une bonne idИe
+ Avoir un serveur rsh installИ affaiblit la sИcuritИ que vous vouliez
+ probablement obtenir en installant ssh. Je vous conseille de supprimer ce
+ paquet.
+Description-ja: ╥ы╧П: rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
+ rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓К╓х║╒╓╒╓й╓©╓╛ ssh ╓к╓Х╓ц╓ффю╓©╓╓╓х
+ ╩в╓ц╓ф╓╓╓К╓г╓╒╓М╓╕╔╩╔╜╔Е╔Й╔ф╔ё╓╛б╩╓й╓О╓Л╓ч╓╧║ё╓╫╓н╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓
+ ╔С╔╧╔х║╪╔К╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
+Description-pl: Uwaga: serwer rsh jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ
+ Posiadanie zainstalowanego serwera rsh podminowuje zabezpieczenia, ktСre
+ prawdopodobnie starasz siЙ uzyskaФ instaluj╠c ssh. RadziЁbym usun╠Ф ten
+ pakiet.
+Description-pt_BR: Aviso: rsh-server estА instalado --- provavelmente nЦo И uma boa idИia
+ Possuir o rsh-server instalado minarА a seguranГa que vocЙ estava
+ provavelmente querendo obter instalando o ssh. Eu recomendaria a vocЙ
+ remover este pacote.
+Description-ru: Предупреждение: установлен rsh-server --- видимо, не очень хорошо
+ Установленный  rsh-server  снижает  безопасность,  которую вы вероятно
+ хотите повысить устанавливая ssh. Рекомендуется удалить этот пакет.
 
 Template: ssh/insecure_telnetd
 Type: note
@@ -114,28 +648,166 @@ Description: Warning: telnetd is installed --- probably not a good idea
  need to offer telnet access) or install telnetd-ssl so that there is at
  least some chance that telnet sessions will not be sending unencrypted
  login/password and session information over the network.
+Description-da: Advarsel: telnetd er installeret --- sikkert ikke en god idИ
+ Jeg vil rЕde dig til enten at fjerne pakken telnetd (hvis du i
+ virkeligheden ikke har brug for at tilbyde telnet-adgang) eller installere
+ telnetd-ssl, sЕ der i det mindste er en mulighed for, at telnet-sessioner
+ ikke sender adgangskoder og sessions-oplysninger ukrypteret over
+ netvФrket.
+Description-de: Warnung: telnetd ist installiert --- schlechte Idee
+ Wir empfehlen das telnetd Paket zu entfernen (falls Sie keinen telnet
+ Zugang anbieten) oder telnetd-ssl zu installieren, so daъ Sie verhindern
+ kЖnnen, daъ Login und Password unverschlЭsselt durch das Netz gesendet
+ werden.
+Description-es: Aviso: tiene telnetd instalado
+ Es muy aconsejable que borre el paquete telnetd si no necesita realmente
+ ofrecer acceso mediante telnet o instalar telnetd-ssl para que las
+ contraseЯas, nombres de usuario y demАs informaciСn de las sesiones telnet
+ no viajen sin cifrar por la red.
+Description-fr: Attention═: telnetd est installИ -- ce n'est probablement pas une bonne idИe
+ Je vous conseille soit d'enlever le paquet telnetd (si ce service n'est
+ pas nИcessaire), soit de le remplacer par le paquet telnetd-ssl pour qu'il
+ y ait au moins une chance que les sessions telnet soient chiffrИes et que
+ les mots de passe et noms d'utilisateurs ne passent pas en clair sur le
+ rИseau.
+Description-ja: ╥ы╧П: telnetd ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
+ (╓Б╓╥ telnet ╔╒╔╞╔╩╔╧╓РдС╤║╓╥╓©╓╓╓х╩в╓ц╓ф╓╓╓й╓╓╓н╓г╓╥╓©╓И) telnetd
+ ╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓╔С╔╧╔х║╪╔К╓╧╓К╓╚║╒╓ч╓©╓о║╒telnetd-ssh ╔я╔ц╔╠║╪╔╦╓Р
+ ╔╓╔С╔╧╔х║╪╔К╓╥╓ф╬╞╓й╓╞╓х╓Б╔м╔ц╔х╔О║╪╔╞╬Е╓Р╟е╧Ф╡╫╓╣╓Л╓ф╓╓╓й╓╓╔Ф║╪╔╤л╬
+ ╓Д╔я╔╧╔О║╪╔и╓Д╔╩╔ц╔╥╔Г╔С╬ПйС╓╛н╝╓Л╓й╓╓╓Х╓╕╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
+Description-pl: Uwaga: telnetd jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ
+ RadziЁbym albo usun╠Ф pakiet telnetd (je╤li nie potrzebujesz koniecznie
+ udostЙpniaФ telnet'a) albo zainstalowaФ telnetd-ssl aby byЁa choФ szansza,
+ ©e sesje telnet nie bЙd╠ przesyЁaФ niezaszyfrowanego loginu/hasЁa oraz
+ danych sesji przez sieФ.
+Description-pt_BR: Aviso: telnetd estА instalado --- provavelmente nЦo И uma boa idИia
+ Eu recomendaria a vocЙ ou remover o pacote telnetd (se vocЙ atualmente nЦo
+ precisa oferecer acesso telnet) ou instalar telnetd-ssl. Assim existe pelo
+ menos uma chance das sessУes telnet nЦo enviarem login/senha nЦo
+ encriptados e informaГУes de sessЦo atravИs da rede.
+Description-ru: Предупреждение: установлен telnetd --- видимо, не очень хорошо
+ Я рекомендовал бы вам удалить пакет telnetd (если вам действительно не
+ нужен доступ telnet) или установить  telnet-ssl,  чтобы  иметь хотя бы
+ возможность  не  передавать  по  сети  незашифрованные  имена и пароли
+ пользователей и прочую информацию в telnet-сессиях.
 
 Template: ssh/encrypted_host_key_but_no_keygen
 Type: note
 Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
+ can not handle this host key file, and I can't find the ssh-keygen utility
+ from the old (non-free) SSH installation.
  .
  You will need to generate a new host key.
+Description-es: Aviso: debe crear una nueva clave para su servidor
+ Su sistema tiene un /etc/ssh/ssh_host_key antiguo, que usa cifrado IDEA.
+ OpenSSH no puede manejar este fichero de claves y tampoco se encuentra la
+ utilidad ssh-keygen incluida en el paquete ssh no libre.
+ .
+ NecesitarА generar una nueva clave para su servidor.
+Description-fr: Attention═: vous devez crИer une nouvelle clИ d'hТte
+ Il existe un vieux /etc/ssh/ssh_host_key qui est chiffrИ avec IDEA.
+ OpenSSH ne peut utiliser ce fichier de clИ, et je ne peux trouver
+ l'utilitaire ssh-keygen de l'installation prИcИdente (non libre) de SSH.
+ .
+ Vous aurez besoin de gИnИrer une nouvelle clИ d'hТte.
+Description-ja: ╥ы╧П: ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓И╓й╓╓╓х╓╓╓╠╓ч╓╩╓С
+ IDEA ╓г╟е╧Ф╡╫╓╣╓Л╓©╦е╓╓╔╜║╪╓╛ /etc/ssh/ssh_host_key ╓к╓╒╓Й╓ч╓╧║ё OpenSSH
+ ╓о╓Ё╓н╔ш╔╧╔х╔╜║╪╔у╔║╔╓╔К╓Р╟╥╓╗╓ч╓╩╓С║ё╓ч╓©║╒╨ё╔╓╔С╔╧╔х║╪╔К ╓╣╓Л╓ф╓╓╓К╦е╓╓
+ (╔у╔Й║╪╓г╓о╓й╓╓) SSH ╓к╓о ssh-keygen ╔Ф║╪╔ф╔ё╔Й╔ф╔ё ╓╛╢ч╓ч╓Л╓ф╓╓╓ч╓╩╓С║ё
+ .
+ ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓Ки╛мв╓╛╓╒╓Й╓ч╓╧║ё
+Description-pl: Uwaga: musisz utworzyФ nowy klucz hosta
+ Istnieje stary /etc/ssh/ssh_host_key, ktСry jest zaszyfrowany przez IDEA.
+ OpenSSH nie umie korzystaФ z tak zaszyfrowanego klucza, a nie mo©e znale╪Ф
+ polecenia ssh-keygen ze starego SSH (non-free).
+ .
+ BЙdziesz musiaЁ wygenerowaФ nowy klucz hosta.
+Description-pt_BR: Aviso: vocЙ deve criar uma nova host key
+ Existe uma antiga /etc/ssh/ssh_host_key, a qual И encriptada usando IDEA.
+ O OpenSSH nЦo pode gerenciar este arquivo host key e eu nЦo consigo
+ encontrar o utilitАrio ssh-keygen da antiga (non-free) instalaГЦo SSH.
+ .
+ VocЙ precisarА gerar uma nova host key.
+Description-ru: Предупреждение: вы должны создать новый ключ машины.
+ Есть старый /etc/ssh/ssh_host_key, который зашифрован IDEA. OpenSSH не
+ может  работать  с  этим  ключом  машины,  и  я  не могу найти утилиту
+ ssh-keygen от старой (несвободной) инсталляции SSH.
+ .
+ Вам надо будет сгенерировать новый ключ хоста.
 
 Template: ssh/SUID_client
 Type: boolean
 Default: true
 Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID
- bit set.
+ You have the option of installing the ssh-keysign helper with the SUID bit
+ set.
  .
  If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
  host-based authentication.
  .
- If in doubt, I suggest you install it with SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh 
+ If in doubt, I suggest you install it with SUID.  If it causes problems
+ you can change your mind later by running:   dpkg-reconfigure ssh
+Description-da: Vil du have, at /usr/bin/ssh-keysign bliver installeret 'SUID root'?
+ Du har mulighed for at installere ssh-keysign hjФlperen med SUID-flaget
+ sat.
+ .
+ Hvis du gЬr ssh-keysign SUID, vil du blive i stand til at benytte SSH
+ protokol 2's vФrtsnavn-baserede autentifikation.
+ .
+ Hvis du er i tvivl, vil jeg rЕde dig til at installere den med SUID. Hvis
+ det skaber problemer, kan du Фndre det tilbage igen ved at kЬre:
+ dpkg-reconfigure ssh
+Description-es: ©Quiere instalar /usr/lib/ssh-keysign SUID root?
+ Puede instalar ssh-keysign con el bit SUID (se ejecutarА con privilegios
+ de root).
+ .
+ Si hace ssh-keysign SUID, podrА usar la autentificiaciСn basada en
+ servidor de la versiСn 2 del protocolo SSH.
+ .
+ Si duda, se recomienda que lo instale SUID. Si surgen problemas puede
+ cambiar de opiniСn posteriormente ejecutando ╚dpkg-reconfigure ssh╩.
+Description-fr: Voulez-vous que /usr/lib/ssh-keysign soit installИ avec le bit SETUID activИ═?
+ Vous avez la possibilitИ d'installer ssh-keysign avec le bit SETUID
+ activИ.
+ .
+ Si vous mettez ssh-keysign avec le bit SETUID, vous permettrez
+ l'authentification basИe sur les hТtes, disponible dans la version 2 du
+ protocole SSH.
+ .
+ Dans le doute, je vous suggХre de l'installer avec le bit SETUID activИ.
+ Si cela vous cause des problХmes, vous pourrez revenir sur votre dИcision
+ avec ╚═dpkg-reconfigure ssh═╩.
+Description-ja: /usr/bin/ssh-keysign ╓Р SUID root ╓г╔╓╔С╔╧╔х║╪╔К╓╥╓ч╓╧╓╚?
+ ssh-keysign ╔ь╔К╔я║╪╓Р╔╓╔С╔╧╔х║╪╔К╓╧╓К╨щ║╒SUID ╔с╔ц╔х╓РюъдЙ╓╧╓К╓╚
+ ╓╥╓й╓╓╓╚╓Ра╙╓ж╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ssh-keysign ╓Р SUID ╓кюъдЙ╓╥╓©╬Л╧Г║╒SSH ╔в╔М╔х╔Ё╔К 2 ╓н╔ш╔╧╔х╓к
+ ╢П╓е╓╞г╖╬з╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ╓Х╓╞й╛╓╚╓И╓й╓╓╬Л╧Г╓о║╒SUID ╓Рм╜╦З╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё╓Б╓╥
+ лДбЙ╓╛╣╞╓Ё╓Л╓п║╒dpkg-reconfigure ssh ╓Р╪б╧т╓╧╓К╓Ё╓х╓гюъдЙ╓Рйя╧╧
+ ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+Description-pl: Czy chcesz aby /usr/lib/ssh-keysign byЁ zainstalowany jako SUID root?
+ Masz mo©liwo╤Ф zainstalowania pomocniczego programu ssh-keysign z
+ wЁ╠czonym bitem SETUID.
+ .
+ Je╤li uczynisz ssh-keysign SUIDowym, bЙdziesz mСgЁ u©ywaФ opartej na
+ hostach autentykacji drugiej wersji protokoЁu SSH.
+ .
+ Je╤li masz w╠tpliwo╤ci, radzЙ zainstalowaФ go z SUIDem. Je╤li to sprawia
+ problemy, mo©esz zmieniФ swoje zdanie uruchamiaj╠c pС╪niej polecenie:
+ dpkg-reconfigure ssh
+Description-pt_BR: Deseja que que /usr/lib/ssh-keysign seja instalado SUID root ?
+ Existe a opГЦo de instalar o cliente auxiliar ssh-keysign com o bit SUID
+ definido.
+ .
+ Caso vocЙ instale o ssh-keysign com o bit SUID ativado, vocЙ serА capaz de
+ usar a autenticaГЦo baseada em host do protocolo SSH 2.
+ .
+ Caso esteja em dЗvida, И sugerido que vocЙ instale com o bit SUID ativado.
+ Caso isso cause problemas e vocЙ mude de idИia posteriormente execute o
+ comando : dpkg-reconfigure ssh
 
 Template: ssh/run_sshd
 Type: boolean
@@ -143,12 +815,84 @@ Default: true
 Description: Do you want to run the sshd server ?
  This package contains both the ssh client, and the sshd server.
  .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
+ Normally the sshd Secure Shell Server will be run to allow remote logins
+ via ssh.
  .
  If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
+ connections on this machine, and don't want to log into it at all using
+ ssh, then you can disable sshd here.
+Description-da: Vil du kЬre sshd-serveren?
+ Denne pakke indeholder bЕde ssh-klienten og sshd-serveren.
+ .
+ Normalt vil sshd sikker skalserver ('Secure Shell Server') blive aktiveret
+ og tillade fjerne brugere i at logge pЕ via ssh.
+ .
+ Hvis du udelukkende er interesseret i at bruge ssh-klienten til udgЕende
+ forbindelser fra denne maskine, og ikke Ьnsker at tilgЕ denne maskine
+ udefra via ssh, kan du nu deaktivere sshd.
+Description-de: MЖchten Sie den sshd Server starten?
+ Das Paket enthДlt sowohl den Client als auch den sshd Server.
+ .
+ Normal wird der sshd Secure Shell Server fЭr Remote Logins per ssh
+ gestartet.
+ .
+ Wenn Sie nur den ssh client nutzen wollen, um sich mit anderen Rechnern zu
+ verbinden und sich nicht per ssh in diesen Computer einloggen wollen, dann
+ kЖnnen Sie hier den sshd abschalten.
+Description-es: ©Quiere ejecutar el servidor sshd?
+ Este paquete contiene el cliente ssh y el servidor sshd.
+ .
+ Generalmente, el servidor de ssh (Secure Shell Server) se ejecuta para
+ permitir el acceso remoto mediante ssh.
+ .
+ Si sСlo estА interesado en usar el cliente ssh en conexiones salientes del
+ sistema y no quiere acceder a Иl mediante ssh, entonces puede desactivar
+ sshd.
+Description-fr: Voulez-vous utiliser le serveur sshd═?
+ Ce paquet contient Ю la fois le client ssh et le serveur sshd.
+ .
+ Normalement le serveur sshd est lancИ pour permettre les connexions
+ distantes via ssh.
+ .
+ Si vous dИsirez seulement utiliser le client ssh pour des connexions vers
+ l'extИrieur, ou si vous ne voulez pas vous connecter sur cette machine via
+ ssh, vous pouvez dИsactiver sshd maintenant.
+Description-ja: sshd ╔╣║╪╔п╓Р╪б╧т╓╥╓ч╓╧╓╚?
+ ╓Ё╓н╔я╔ц╔╠║╪╔╦╓о║╒ssh ╔╞╔И╔╓╔╒╔С╔х╓х sshd ╔╣║╪╔п╓нн╬йЩ╓Р╢ч╓С╓г╓╓╓ч╓╧║ё
+ .
+ дл╬О║╒sshd ╔╩╔╜╔Е╔╒╔╥╔╖╔К╔╣║╪╔п╓о║╒ssh ╓Рмя╓╓╓©╔Й╔Б║╪╔х╓╚╓И╓н╔М╔╟╔╓╔С
+ ╓Р╡дг╫╓к╓╧╓К╓©╓А╓к╪б╧т╓╥╓ч╓╧║ё
+ .
+ ╓Б╓╥ ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╩х╓ц╓ф╓Ё╓н╔ч╔╥╔С╓╚╓Иб╬╔ч╔╥╔С╓ь╓хюэбЁ╓╧╓К╓ю╓╠╓г
+ ╓г║╒╓Ё╓н╔ч╔╥╔С╓ь╓х ssh ╓Р╩х╓ц╓ф╔М╔╟╔╓╔С╓╥╓й╓╓╓н╓г╓╥╓©╓И║╒╓Ё╓Ё╓г sshd
+ ╓Р╪б╧т╓╥╓й╓╓╓г╓╙╓╜╓ч╓╧║ё
+Description-pl: Czy chcesz uruchamiaФ serwer sshd ?
+ Ten pakiet zawiera zarСwno klienta ssh, jak i serwer sshd.
+ .
+ Normalnie serwer sshd (Secure Shell Server) bЙdzie uruchomiony aby
+ umo©liwiФ zdalny dostЙp przez ssh.
+ .
+ Je╤li jeste╤ zainteresowny u©ywaniem wyЁ╠cznie klienta ssh dla poЁ╠czeЯ
+ wychodz╠cych z tej maszyny, i nie chcesz siЙ na ni╠ logowaФ przy pomocy
+ ssh, to mo©esz teraz wyЁ╠czyФ serwer sshd.
+Description-pt_BR: VocЙ quer executar o servidor sshd ?
+ Este pacote contИm ambos o cliente ssh e o servidor sshd.
+ .
+ Normalmente o sshd Secure Shell Server serА executado para permitir logins
+ remotos via ssh.
+ .
+ Se vocЙ estА interessado somente em usar o cliente ssh para conexУes para
+ fora desta mАquina, e nЦo quer logar na mesma usando ssh, entЦo vocЙ pode
+ desabilitar o sshd aqui.
+Description-ru: Хотите запустить сервер sshd?
+ Этот пакет содержит и ssh-клиент, и ssh-сервер.
+ .
+ Обычно  sshd  Secure Shell Server  запускается  для удаленного входа в
+ регистрации в системе через ssh.
+ .
+ Если  вас  интересует  только  использование ssh-клиента для исходящих
+ соединений с  этой  машины, и вы  не хотите входить в ее систему через
+ ssh, то вы можете сейчас запретить sshd.
 
 Template: ssh/user_environment_tell
 Type: note
@@ -161,3 +905,23 @@ Description: Environment options on keys have been deprecated
  To re-enable this option, set "PermitUserEnvironment yes" in
  /etc/ssh/sshd_config after the upgrade is complete, taking note of the
  warning in the sshd_config(5) manual page.
+Description-ja: ╦╟╓н╢д╤╜╔╙╔в╔╥╔Г╔С╓ол╣╦З╓кюъдЙ╓╣╓Л╓ч╓╥╓©
+ кэ╔п║╪╔╦╔Г╔С╓н OpenSSH ╓о║╒╦ЬЁ╚╦╟╓н╢д╤╜╔╙╔в╔╥╔Г╔С╓Р╔г╔у╔╘╔К╔х╓г
+ л╣╦З╓кюъдЙ╓╥╓ф╓╓╓ч╓╧║ёLD_PRELOAD ╓й╓и╓н╧╤╥Б╓РхР╓╠╓К╓©╓А╓г╓╧║ё ╓Б╓╥
+ authorized_keys ╔у╔║╔╓╔К╓г╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╩хмя╓╥╓ф╓╓╓К╬Л╧Г║╒
+ ╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╫Э╣Н╓╥╓й╓╓╦б╓Й╓о╓╫╓н╦╟╓омЬмя╓г╓╜╓й╓╓╓Ё╓х╓кцМ╟у
+ ╓╥╓ф╓╞╓ю╓╣╓╓║ё
+ .
+ ╓Ё╓н╔╙╔в╔╥╔Г╔С╓Р╨ф╓см╜╦З╓к╓╧╓К╓к╓о║╒╔╒╔ц╔в╔╟╔Л║╪╔и╫╙н╩╦Е╓к║╒
+ sshd_config(5) ╔ч╔к╔Е╔╒╔К╔з║╪╔╦╓н╥ы╧П╩Ж╧Ю╓Рфи╓С╓г║╒ /etc/ssh/sshd_config
+ ╔у╔║╔╓╔К╓к║жPermitUserEnvironment yes║в╓х юъдЙ╓╥╓ф╓╞╓ю╓╣╓╓║ё
+Description-pt_BR: OpГУes ed ambiente sobre chaves estЦo obsoletas
+ Esta versЦo do OpenSSH desabilita a opГЦo de ambiente para chaves pЗblicas
+ por padrЦo par evitar certos ataques (por exemplo, LD_PRELOAD). Caso vocЙ
+ esteja usando esta opГЦo em um arquivo authorized_keys, tenha cuidado pois
+ as chaves em questЦo nЦo irЦo mais funcionar atИ que esta opГЦo seja
+ removida.
+ .
+ Para reabilitar esta opГЦo, defina a opГЦo "PermitUserEnvironment yes" no
+ arquivo /et/ssh/sshd_config depois da a atualizaГЦo terminar, atentando
+ para o aviso na pАgina de manual do sshd_config(5).
diff --git a/debian/templates.da b/debian/templates.da
deleted file mode 100644
index b8fc9be18..000000000
--- a/debian/templates.da
+++ /dev/null
@@ -1,253 +0,0 @@
-Template: ssh/privsep_tell
-Type: note
-Description: Privilege separation
- This version of OpenSSH contains the new privilege separation option. This
- significantly reduces the quantity of code that runs as root, and
- therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any PAM
- session modules that need to run as root (pam_mkhomedir, for example) will
- fail, and PAM keyboard-interactive authentication won't work.
- .
- Privilege separation is turned on by default, so if you decide you want it
- turned off, you need to add "UsePrivilegeSeparation no" to
- /etc/ssh/sshd_config.
- .
- NB! If you are running a 2.0 series Linux kernel, then privilege
- separation will not work at all, and your sshd will fail to start unless
- you explicitly turn privilege separation off.
-Description-da: Privilegie adskillelse
- Denne version af OpenSSH indeholder den nye privilegie adskillelses
- mulighed. Det reducerer markant mФngden af kode der kЬrer som root, og
- derfor reducerer det impakten pЕ sikkerheds huller i sshd.
- .
- DesvФrre, arbejder det ikke godt sammen med PAM. Ethvert PAM session modul
- der skal kЬres som root (pam_mkhomedir, f.eks.) vil fejle, og PAM
- tastatur-interaktive autentifikationer vil ikke virke.
- .
- Privilegie adskillelse er slЕet til som standard, sЕ hvis du beslutter at
- slЕ det fra, skal du bruge "UsePrivilegeSeparation no" i
- /etc/ssh/sshd_config.
-
-Template: ssh/privsep_ask
-Type: boolean
-Default: true
-Description: Enable Privilege separation
- This version of OpenSSH contains the new privilege separation option. This
- significantly reduces the quantity of code that runs as root, and
- therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any PAM
- session modules that need to run as root (pam_mkhomedir, for example) will
- fail, and PAM keyboard-interactive authentication won't work.
- .
- Since you've opted to have me generate an sshd_config file for you, you
- can choose whether or not to have Privilege Separation turned on or not.
- Unless you are running 2.0 (in which case you *must* say no here or your
- sshd won't start at all) or know you need to use PAM features that won't
- work with this option, you should say yes here.
-Description-da: Aktiver Privilegie adskillelse
- Denne version af OpenSSH indeholder den nye privilegie adskillelses
- mulighed. Det reducerer markant mФngden af kode der kЬrer som root, og
- derfor reducerer det impakten pЕ sikkerheds huller i sshd.
- .
- DesvФrre, arbejder det ikke godt sammen med PAM. Ethvert PAM session modul
- der skal kЬres som root (pam_mkhomedir, f.eks.) vil fejle, og PAM
- tastatur-interaktive autentifikationer vil ikke virke.
- .
- Siden du har bedt mig om at lave en sshd_config fil til dig, kan du vФlge
- om du vil have privilegie adskillelse slЕet til eller ej. Medmindre du
- kЬrer 2.0 (i hvilket tilfФlde du *skal* sige nej her, ellers vil din sshd
- slet ikke starte) eller ved at du skal bruge PAM funktioner som ikke vil
- virke med dette tilvalg, skal du sige ja her.
-
-Template: ssh/new_config
-Type: boolean
-Default: true
-Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from
- the version shipped in Debian 'Potato', which you appear to be upgrading
- from. I can now generate you a new configuration file
- (/etc/ssh/sshd.config), which will work with the new server version, but
- will not contain any customisations you made with the old version.
- .
- Please note that this new configuration file will set the value of
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password
- can ssh directly in as root). It is the opinion of the maintainer that
- this is the correct default (see README.Debian for more details), but you
- can always edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration
- file for you.
-Description-da: Opret ny konfigurations fil
- Denne version af OpenSSH har en betydeligt Фndret konfigurations fil fra
- den version der kom med Debian 'Potato', som du ser ud til at opgradere fra.
- Jeg kan nu oprette en ny konfigurations fil (//etc/ssh/sshd.config), som
- vil virke med den nye server version, men det vil ikke beholde eventuelle
- Фndringer du lavede med den gamle version.
- .
- Venligst bemФrk at den nye konfigurations fil vil sФtte vФrdien af
- 'PermitRootLogin' til ja (som betyder at alle der kender roots password,
- kan tilgЕ maskinen via ssh direkte). Det er vedligeholderens mening, at det
- er den korrekte standard-vФrdi (se README.Debian for flere detaljer), men
- du kan altid redigere sshd_config og slЕ det fra, hvis du Ьnsker.
- .
- Du rЕdes stФrkt til at lade mig genere en ny konfigurations fil for dig.
-
-Template: ssh/protocol2_only
-Type: boolean
-Default: true
-Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which is
- much more secure.  Disabling ssh 1 is encouraged, however this will slow
- things down on low end machines and might prevent older clients from
- connecting (the ssh client shipped with "potato" is affected).
- .
- Also please note that keys used for protocol 1 are different so you will
- not be able to use them if you only allow protocol 2 connections.
- .
- If you later change your mind about this setting, README.Debian has
- instructions on what to do to your sshd_config file.
-Description-da: Tillad kun SSH protokol 2
- Denne udgave af OpenSSH understЬtter version 2 af ssh-protokollen, som er
- betydeligt mere sikker. Det anbefales af deaktivere version 1. Dog kan det
- slЬve langsomme maskiner, og forhindre Фldre klienter i at opnЕ
- forbindelse (ssh klienten der kommer med "potato" er en af dem).
- .
- Du skal ogsЕ bemФrke at de nЬgler som bliver anvendt til protokol 1 er
- forskellige, sЕ du vil ikke Фvre i stand til at bruge dem, hvis du kun
- tillader protokol 2 forbindelser.
- .
- Hvis du senere Фndrer din mening om denne indstilling, har README.Debian
- instruktioner pЕ hvad du skal gЬre ved din sshd_config fil.
-
-Template: ssh/ssh2_keys_merged
-Type: note
-Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2
- keys. This means the authorized_keys2 and known_hosts2 files are no longer
- needed. They will still be read in order to maintain backwards
- compatibility
-Description-da: ssh2-nЬgler flettet i opsФtningsfilerne
- Siden version 3 har OpenSSH ikke lФngere separate filer for ssh1- og
- ssh2-nЬgler. Det betyder, at filerne authorized_keys2 og known_hosts2 ikke
- lФngere er nЬdvendige. De vil stadig dog stadig blive lФst for
- bagudkompatilitetens skyld.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-da: Vil du fortsФtte (og risikere at afbryde aktive ssh-forbindelser)?
- Den udgave af /etc/init.d/ssh, du har installeret, vil sandsynligvis
- afbryde alle sshd-dФmoner. Det vil vФre en rigtigt dЕrlig idИ, hvis du er
- ved at opgradering via en ssh-forbindelse.
- .
- Du kan afhjФlpe dette ved at tilfЬje "--pidfile /var/run/sshd.pid" til
- 'start-stop-daemon'-linjen i stop-afsnittet af filen.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either in one of the
- configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-da: BEMфRK: Videregivelse af X11 og adgangkontrol er som standard deaktiveret.
- Af sikkerhedsgrunde har Debianudgaven af ssh sat ForwardX11 og
- ForwardAgent til 'off' som standard.
- .
- Du kan aktivere dem for servere, du stoler pЕ i en af opsФtningsfilerne
- eller med kommandolinjetilvalget '-X'.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that
- package.
-Description-da: Advarsel: rsh-serveren er installeret --- sikkert ikke en god idИ
- Den sikkerhed, du nok Ьnskede at opnЕ ved at installere ssh undermineres
- ved, at du har rsh-server installeret. Jeg vil rЕde dig til at fjerne
- pakken rsh-server.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-da: Advarsel: telnetd er installeret --- sikkert ikke en god idИ
- Jeg vil rЕde dig til enten at fjerne pakken telnetd (hvis du i
- virkeligheden ikke har brug for at tilbyde telnet-adgang) eller installere
- telnetd-ssl, sЕ der i det mindste er en mulighed for, at telnet-sessioner
- ikke sender adgangskoder og sessions-oplysninger ukrypteret over
- netvФrket.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
- can not handle this host key file, and I can't find the ssh-keygen utility
- from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-da: Advarsel: du skal oprette en ny vФrtsnЬgle
- Der ligger en gammel, IDEA-krypteret /etc/ssh/ssh_host_key. OpenSSH kan
- ikke hЕndtere sЕdan en vФrtsnЬglefil, og jeg kan ikke finde vФrktЬjet
- ssh-keygen fra den gamle (ikke-frie, 'non-free') SSH-installation.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID bit
- set.
- .
- If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
- host-based authentication.
- .
- If in doubt, I suggest you install it with SUID.  If it causes problems
- you can change your mind later by running:   dpkg-reconfigure ssh
-Description-da: Vil du have, at /usr/bin/ssh-keysign bliver installeret 'SUID root'?
- Du har mulighed for at installere ssh-keysign hjФlperen med SUID-flaget
- sat.
- .
- Hvis du gЬr ssh-keysign SUID, vil du blive i stand til at benytte SSH
- protokol 2's vФrtsnavn-baserede autentifikation.
- .
- Hvis du er i tvivl, vil jeg rЕde dig til at installere den med SUID. Hvis
- det skaber problemer, kan du Фndre det tilbage igen ved at kЬre:
- dpkg-reconfigure ssh
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote logins
- via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all using
- ssh, then you can disable sshd here.
-Description-da: Vil du kЬre sshd-serveren?
- Denne pakke indeholder bЕde ssh-klienten og sshd-serveren.
- .
- Normalt vil sshd sikker skalserver ('Secure Shell Server') blive aktiveret
- og tillade fjerne brugere i at logge pЕ via ssh.
- .
- Hvis du udelukkende er interesseret i at bruge ssh-klienten til udgЕende
- forbindelser fra denne maskine, og ikke Ьnsker at tilgЕ denne maskine
- udefra via ssh, kan du nu deaktivere sshd.
diff --git a/debian/templates.de b/debian/templates.de
deleted file mode 100644
index 5feb24cd9..000000000
--- a/debian/templates.de
+++ /dev/null
@@ -1,95 +0,0 @@
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-de: Wollen Sie weitermachen (und das Killen der Session riskieren)?
- Die Version von /etc/init.d/ssh, die Sie installiert haben, wird 
- vermutlich Ihre aktiven ssh-Instanzen killen. Wenn Sie das Upgrade
- via ssh erledigen, dann ist das ein Problem.
- .
- Sie kЖnnen das Problem beheben, indem sie "--pidfile /var/run/sshd.pid"
- an die start-stop-daemon Zeile in dem Bereich stop der Datei 
- /etc/init.d/ssh ergДnzen.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-de: HINWEIS: Forwarden von X11 und Authorisierung ist abgeschaltet.
- Aus SicherheitsgrЭnden sind die Debian Pakete von ssh ForwardX11 und
- ForwardAgent auf "off" gesetzt.
- .
- Sie kЖnnen dies fЭr Server, denen Sie trauen, entweder per Eintrag in
- die Konfigurations Dateien oder per Kommando-Zeilen Option -X Дndern.
- .
- Weitere Details koennen Sie in /usr/share/doc/ssh/README.Debian finden.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-de: Warnung: rsh-server ist installiert --- mЖglicherweise
- ist es eine schlechte Idee, den rsh-server installiert zu haben, da er 
- die Sicherheit untergrДbt. Wir empfehlen, das Paket zu entfernen.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-de: Warnung: telnetd ist installiert --- schlechte Idee
- Wir empfehlen das telnetd Paket zu entfernen (falls Sie keinen telnet Zugang
- anbieten) oder telnetd-ssl zu installieren, so daъ Sie verhindern kЖnnen,
- daъ Login und Password unverschlЭsselt durch das Netz gesendet
- werden.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-de: Warnung: Sie mЭssen einen neuen Host Key erzeugen
- Es existiert eine alte Variante von /etc/ssh/ssh_host_key welche
- per IDEA verschlЭsselt ist. OpenSSH kann eine solche Host Key Datei
- nicht lesen und ssh-keygen von der alten (nicht-freien) ssh Installation
- kann nicht gefunden werden.
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-de: MЖchten Sie den sshd Server starten?
- Das Paket enthДlt sowohl den Client als auch den sshd Server.
- .
- Normal wird der sshd Secure Shell Server fЭr Remote Logins per ssh
- gestartet.
- .
- Wenn Sie nur den ssh client nutzen wollen, um sich mit anderen Rechnern
- zu verbinden und sich nicht per ssh in diesen Computer einloggen wollen, 
- dann kЖnnen Sie hier den sshd abschalten.
diff --git a/debian/templates.es b/debian/templates.es
deleted file mode 100644
index 8d7b25a34..000000000
--- a/debian/templates.es
+++ /dev/null
@@ -1,266 +0,0 @@
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote logins
- via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all using
- ssh, then you can disable sshd here.
-Description-es: ©Quiere ejecutar el servidor sshd?
- Este paquete contiene el cliente ssh y el servidor sshd.
- .
- Generalmente, el servidor de ssh (Secure Shell Server) se ejecuta para
- permitir el acceso remoto mediante ssh.
- .
- Si sСlo estА interesado en usar el cliente ssh en conexiones salientes del
- sistema y no quiere acceder a Иl mediante ssh, entonces puede desactivar
- sshd.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-es: ©Desea continuar, aЗn a riesgo de matar las sesiones ssh activas?
- La versiСn de /etc/init.d/ssh que tiene instalada es muy probable que
- mate el demonio ssh. Si estА actualizando a travИs de una sesiСn ssh,
- puede que no sea muy buena idea.
- .
- Puede arreglarlo aЯadiendo "--pidfile /var/run/sshd.pid" a la lМnea
- 'start-stop-daemon', en la secciСn 'stop' del fichero.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID bit
- set.
- .
- If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
- host-based authentication.
- .
- If in doubt, I suggest you install it with SUID.  If it causes problems
- you can change your mind later by running:   dpkg-reconfigure ssh
-Description-es: ©Quiere instalar /usr/lib/ssh-keysign SUID root?
- Puede instalar ssh-keysign con el bit SUID (se ejecutarА con privilegios
- de root).
- .
- Si hace ssh-keysign SUID, podrА usar la autentificiaciСn basada en
- servidor de la versiСn 2 del protocolo SSH.
- .
- Si duda, se recomienda que lo instale SUID. Si surgen problemas puede
- cambiar de opiniСn posteriormente ejecutando ╚dpkg-reconfigure ssh╩.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
- can not handle this host key file, and I can't find the ssh-keygen utility
- from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-es: Aviso: debe crear una nueva clave para su servidor
- Su sistema tiene un /etc/ssh/ssh_host_key antiguo, que usa cifrado IDEA.
- OpenSSH no puede manejar este fichero de claves y tampoco se encuentra la
- utilidad ssh-keygen incluida en el paquete ssh no libre.
- .
- NecesitarА generar una nueva clave para su servidor.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-es: Aviso: tiene telnetd instalado
- Es muy aconsejable que borre el paquete telnetd si no necesita realmente
- ofrecer acceso mediante telnet o instalar telnetd-ssl para que las
- contraseЯas, nombres de usuario y demАs informaciСn de las sesiones telnet
- no viajen sin cifrar por la red.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either in one of the
- configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-es: NOTA: ReenvМo de X11 y AutorizaciСn desactivadas por defecto.
- Por razones de seguridad, la versiСn de ssh de Debian tiene por defecto
- ForwardX11 y ForwardAgent desactivadas.
- .
- Puede activar estas opciones para los servidores en los que confМe, en los
- ficheros de configuraciСn o con la opciСn -X en lМnea de comandos.
- .
- Puede encontrar mАs detalles en /usr/share/doc/ssh/README.Debian.
-
-Template: ssh/privsep_tell
-Type: note
-Description: Privilege separation
- This version of OpenSSH contains the new privilege separation option. This
- significantly reduces the quantity of code that runs as root, and
- therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any PAM
- session modules that need to run as root (pam_mkhomedir, for example) will
- fail, and PAM keyboard-interactive authentication won't work.
- .
- Privilege separation is turned on by default, so if you decide you want it
- turned off, you need to add "UsePrivilegeSeparation no" to
- /etc/ssh/sshd_config.
- .
- NB! If you are running a 2.0 series Linux kernel, then privilege
- separation will not work at all, and your sshd will fail to start unless
- you explicitly turn privilege separation off.
-Description-es: SeparaciСn de privilegios
- Esta versiСn de OpenSSH incluye una nueva opciСn de separaciСn de
- privilegios que reduce significativamente la cantidad de cСdigo que se
- ejecuta como root, por lo que reduce el impacto de posibles agujeros de
- seguridad en sshd.
- .
- Desafortunadamente, la separaciСn de privilegios no interactЗa
- correctamente con PAM. Cualquier mСdulo PAM que necesite ejecutarse como
- root (como, por ejemplo, pam_mkhomedir) y la autentificaciСn interactiva
- PAM con teclado no funcionarАn.
- .
- La separaciСn de privilegios estА activa por defecto, por lo que si decide
- desactivarla, tiene que aЯadir "UsePrivilegeSeparation no" al fichero
- /etc/ssh/sshd_config.
- .
- Nota: Si utiliza un nЗcleo Linux de la serie 2.0, la separaciСn de
- privilegios fallarА estrepitosamente y sshd no funcionarА a no ser que la
- desactive.
-
-Template: ssh/ssh2_keys_merged
-Type: note
-Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2
- keys. This means the authorized_keys2 and known_hosts2 files are no longer
- needed. They will still be read in order to maintain backwards
- compatibility
-Description-es: Las claves ssh2 ya se incluyen en los ficheros de configuraciСn
- A partir de la versiСn 3, OpenSSH ya no utiliza ficheros diferentes para
- las claves ssh1 y ssh2. Esto quiere decir que ya no son necesarios los
- ficheros authorized_keys2 y known_hosts2, aunque aЗn se seguirАn leyendo
- para mantener compatibilidad hacia atrАs.
-
-Template: ssh/protocol2_only
-Type: boolean
-Default: true
-Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which is
- much more secure.  Disabling ssh 1 is encouraged, however this will slow
- things down on low end machines and might prevent older clients from
- connecting (the ssh client shipped with "potato" is affected).
- .
- Also please note that keys used for protocol 1 are different so you will
- not be able to use them if you only allow protocol 2 connections.
- .
- If you later change your mind about this setting, README.Debian has
- instructions on what to do to your sshd_config file.
-Description-es: Permitir sСlo la versiСn 2 del protocolo SSH
- Esta versiСn de OpenSSH soporta la versiСn 2 del protocolo ssh, que es
- mucho mАs segura que la anterior. Se recomienda desactivar la versiСn 1,
- aunque funcionarА mАs lento en mАquinas modestas y puede impedir que se
- conecten clientes antiguos, como, por ejemplo, el incluido en "potato".
- .
- TambiИn tenga en cuenta que las claves utilizadas para el protocolo 1 son
- diferentes, por lo que no podrА usarlas si Зnicamente permite conexiones
- mediante la versiСn 2 del protocolo.
- .
- Si mАs tarde cambia de opiniСn, el fichero README.Debian contiene
- instrucciones sobre cСmo modificar en el fichero sshd_config.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that
- package.
-Description-es: Aviso: tiene rsh-server instalado
- Tener rsh-server instalado representa un menoscabo de la seguridad que
- probablemente desea obtener instalando ssh. Es muy aconsejable que borre
- ese paquete.
-
-Template: ssh/privsep_ask
-Type: boolean
-Default: true
-Description: Enable Privilege separation
- This version of OpenSSH contains the new privilege separation option. This
- significantly reduces the quantity of code that runs as root, and
- therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any PAM
- session modules that need to run as root (pam_mkhomedir, for example) will
- fail, and PAM keyboard-interactive authentication won't work.
- .
- Since you've opted to have me generate an sshd_config file for you, you
- can choose whether or not to have Privilege Separation turned on or not.
- Unless you are running 2.0 (in which case you *must* say no here or your
- sshd won't start at all) or know you need to use PAM features that won't
- work with this option, you should say yes here.
-Description-es: Activar separaciСn de privilegios
- Esta versiСn de OpenSSH incluye una nueva opciСn de separaciСn de
- privilegios que reduce significativamente la cantidad de cСdigo que se
- ejecuta como root, por lo que reduce el impacto de posibles agujeros de
- seguridad en sshd.
- .
- Desafortunadamente, la separaciСn de privilegios no interactЗa
- correctamente con PAM. Cualquier mСdulo PAM que necesite ejecutarse como
- root (como, por ejemplo, pam_mkhomedir) y la autentificaciСn PAM mediante
- teclado no funcionarАn.
- .
- Puesto que ha elegido crear automАticamente el fichero sshd_config, puede
- decidir ahora si quiere activar la opciСn de separaciСn de privilegios. A
- menos que utilice la versiСn 2.0 (en cuyo caso debe responer no aquМ o
- sshd no arrancarА) o sepa que necesita usar ciertas caracterМsticas de PAM
- que funcionan con esta opciСn, deberМa responder sМ a esta pregunta.
-
-Template: ssh/new_config
-Type: boolean
-Default: true
-Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from
- the version shipped in Debian 'Potato', which you appear to be upgrading
- from. I can now generate you a new configuration file
- (/etc/ssh/sshd.config), which will work with the new server version, but
- will not contain any customisations you made with the old version.
- .
- Please note that this new configuration file will set the value of
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password
- can ssh directly in as root). It is the opinion of the maintainer that
- this is the correct default (see README.Debian for more details), but you
- can always edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration
- file for you.
-Description-es: Generar un nuevo fichero de configuraciСn
- Esta versiСn de OpenSSH tiene un fichero de configuraciСn
- considerablemente diferente del incluido en Debian Potato, que es la
- versiСn desde la que parece estar actualizando. Puede crear
- automАticamente un nuevo fichero de configuraciСn (/etc/ssh/sshd_config),
- que funcionarА con la nueva versiСn del servidor, pero no incuirА las
- modificaciones que hiciera en la versiСn antigua.
- .
- AdemАs, recuerde que este nuevo fichero de configuraciСn dirА sМ en la
- opciСn 'PermitRootLogin', por lo que cualquiera que conozca la contraseЯa
- de root podrА entrar mediante ssh directamente como root. En opiniСn del
- mantenedor Иsta es la opciСn predeterminada mАs adecuada (puede leer
- README.Debian si quiere conocer mАs detalles), pero siempre puede editar
- sshd_config y poner no si lo desea.
- .
- Es muy recomendable que permita que se genere un nuevo fichero de
- configuraciСn ahora.
diff --git a/debian/templates.fr b/debian/templates.fr
deleted file mode 100644
index 5eee0f92a..000000000
--- a/debian/templates.fr
+++ /dev/null
@@ -1,278 +0,0 @@
-Template: ssh/privsep_tell
-Type: note
-Description: Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
- .
- Privilege separation is turned on by default, so if you decide you
- want it turned off, you need to add "UsePrivilegeSeparation no" to
- /etc/ssh/sshd_config.
- .
- NB! If you are running a 2.0 series Linux kernel, then privilege
- separation will not work at all, and your sshd will fail to start
- unless you explicitly turn privilege separation off.
-Description-fr: SИparation des privilХges
- Cette version d'OpenSSH est livrИe avec la nouvelle option de
- sИparation des privilХges. Cela rИduit de maniХre significative la
- quantitИ de code s'exИcutant en tant que super-utilisateur, et donc
- rИduit l'impact des trous de sИcuritИ dans sshd.
- .
- Malheureusement, la sИparation des privilХges interagit mal avec PAM.
- Tous les modules de session PAM qui doivent Йtre exИcutИs en tant
- que super-utilisateur (pam_mkhomedir, par exemple) ne s'exИcuteront
- pas, et l'authentification interactive au clavier ne fonctionnera pas.
- .
- La sИparation des privilХges est activИe par dИfaut ; si vous
- souhaitez la dИsactiver, vous devez ajouter ╚═UsePrivilegeSeparation
- no═╩ dans /etc/ssh/sshd_config.
- .
- NB═! Si vous avez un noyau Linux de la sИrie des 2.0, la sИparation
- des privilХges ne fonctionne pas, et votre dИmon sshd ne se lancera
- que si vous avez explicitement dИsactivИ la sИparation des privilХges.
-
-Template: ssh/privsep_ask
-Type: boolean
-Default: true
-Description: Enable Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
- .
- Since you've opted to have me generate an sshd_config file for you,
- you can choose whether or not to have Privilege Separation turned on
- or not. Unless you are running 2.0 (in which case you *must* say no
- here or your sshd won't start at all) or know you need to use PAM
- features that won't work with this option, you should say yes here.
-Description-fr: Activer la sИparation des privilХges
- Cette version d'OpenSSH est livrИe avec la nouvelle option de
- sИparation des privilХges. Cela rИduit de maniХre significative la
- quantitИ de code s'exИcutant en tant que super-utilisateur, et donc
- rИduit l'impact des trous de sИcuritИ dans sshd.
- .
- Malheureusement, la sИparation des privilХges interagit mal avec PAM.
- Tous les modules de session PAM qui doivent Йtre exИcutИs en tant
- que super-utilisateur (pam_mkhomedir, par exemple) ne s'exИcuteront
- pas, et l'authentification interactive au clavier ne fonctionnera pas.
- .
- Comme vous souhaitez que je gИnХre le fichier de configuration
- sshd_config Ю votre place, vous pouvez choisir d'activer ou non
- l'option de sИparation des privilХges. Si vous utilisez un noyau 2.0
- (dans ce cas vous *devez* dИsactiver cette option ou alors sshd ne se
- lancera pas) ou bien si vous avez besoin de fonctionnalitИs PAM, cela
- ne fonctionnera pas si cette option est activИe, dans le cas contraire
- vous devriez l'activer.
-
-Template: ssh/new_config
-Type: boolean
-Default: true
-Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from 
- the version shipped in Debian 'Potato', which you appear to be upgrading from.
- I can now generate you a new configuration file (/etc/ssh/sshd.config), which
- will work with the new server version, but will not contain any customisations
- you made with the old version. 
- .
- Please note that this new configuration file will set the value of 
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
- ssh directly in as root). It is the opinion of the maintainer that this is
- the correct default (see README.Debian for more details), but you can always
- edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration file 
- for you.
-Description-fr: CrИer un nouveau fichier de configuration
- Cette version d'OpenSSH utilise un fichier de configuration qui a
- ИnormИment changИ depuis la version contenue dans la distribution
- Debian ╚═Potato═╩, depuis laquelle vous semblez faire une mise Ю jour.
- Je peux gИnИrer maintenant pour vous un nouveau fichier de
- configuration (/etc/ssh/sshd.config) qui marchera avec la nouvelle
- version du serveur, mais ne contiendra aucun des rИglages que vous avez
- faits sur l'ancienne version.
- .
- Veuillez noter que ce nouveau fichier de configuration positionnera la
- valeur de ╚═PermitRootLogin═╩ Ю ╚═yes═╩ (ce qui signifie que quiconque
- connaissant le mot de passe du super-utilisateur peut se connecter
- en tant que tel sur la machine). Le responsable du paquet
- pense que c'est lЮ un comportement par dИfaut normal (lisez
- README.Debian pour plus d'informations), mais vous pouvez toujours
- Иditer le fichier sshd_config et changer cela.
- .
- Il est fortement recommandИ que vous me laissiez gИnИrer le nouveau
- fichier de configuration.
-
-Template: ssh/protocol2_only
-Type: boolean
-Default: true
-Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which
- is much more secure.  Disabling ssh 1 is encouraged, however this
- will slow things down on low end machines and might prevent older
- clients from connecting (the ssh client shipped with "potato" is affected).
- .
- Also please note that keys used for protocol 1 are different so you will
- not be able to use them if you only allow protocol 2 connections.
- .
- If you later change your mind about this setting, README.Debian has 
- instructions on what to do to your sshd_config file.
-Description-fr: Permettre seulement la version 2 du protocole SSH
- Cette version d'OpenSSH connaНt la version 2 du protocole ssh, qui est
- bien plus sШre. DИsactiver ssh 1 est une bonne chose, cependant cela
- peut ralentir les machines peu puissantes et pourrait empЙcher ceux qui
- utilisent des vieilles versions de la partie cliente de se connecter
- (le client ssh de la distribution Debian ╚═Potato═╩ en fait partie).
- .
- De plus, les clИs utilisИes par la version 1 du protocole sont
- diffИrentes et vous ne pourrez pas les utiliser si vous
- n'autorisez que les connexions utilisant la version 2 du protocole.
- .
- Si vous changez d'avis ultИrieurement et dИcidez de modifier ce
- rИglage, les instructions fournies dans le fichier README.Debian vous
- indiquent comment modifier le fichier sshd_config.
-
-Template: ssh/ssh2_keys_merged
-Type: note
-Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and
- ssh2 keys. This means the authorized_keys2 and known_hosts2 files
- are no longer needed. They will still be read in order to maintain
- backwards compatibility
-Description-fr: ClИs pour ssh2 fusionnИes dans les fichiers de configuration
- OpenSSH, depuis sa version 3, n'utilise plus de fichiers distincts pour
- les clИs ssh1 et ssh2. Cela signifie que les fichiers authorized_keys2
- et known_hosts2 ne sont plus utiles. Ils seront nИanmoins lus afin de
- prИserver la compatibilitИ descendante.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-fr: Voulez-vous continuer (et risquer de rompre les sessions ssh actives)═?
- Il est probable que la version de /etc/init.d/ssh installИe en ce moment
- tue toutes les instances de sshd en cours. En cas de mise Ю jour par ssh,
- Гa serait une mauvaise idИe.
- .
- Vous pouvez corriger cela en ajoutant dans /etc/init.d/ssh ╚═--pidfile
- /var/run/sshd.pid═╩ Ю la ligne ╚═start-stop-daemon═╩ dans la section
- ╚═stop═╩ du fichier.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-fr: NOTE═: suivi de session X11 et d'agent d'autorisation dИsactivИs par dИfaut.
- Pour des raisons de sИcuritИ, la version Debian de ssh positionne les
- options ForwardX11 et ForwardAgent Ю ╚═Off═╩ par dИfaut.
- .
- Vous pouvez activer ces options pour les serveurs en qui vous avez
- confiance, soit dans un des fichiers de configuration, soit avec l'option
- -X de la ligne de commande.
- .
- Plus d'informations sont disponibles dans /usr/share/doc/ssh/README.Debian.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-fr: Attention═: rsh-server est installИ -- ce n'est probablement pas une bonne idИe
- Avoir un serveur rsh installИ affaiblit la sИcuritИ que vous vouliez
- probablement obtenir en installant ssh. Je vous conseille de
- supprimer ce paquet.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-fr: Attention═: telnetd est installИ -- ce n'est probablement pas une bonne idИe
- Je vous conseille soit d'enlever le paquet telnetd (si ce service
- n'est pas nИcessaire), soit de le remplacer par le paquet telnetd-ssl pour
- qu'il y ait au moins une chance que les sessions telnet soient chiffrИes
- et que les mots de passe et noms d'utilisateurs ne passent pas en clair
- sur le rИseau.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-fr: Attention═: vous devez crИer une nouvelle clИ d'hТte
- Il existe un vieux /etc/ssh/ssh_host_key qui est chiffrИ avec IDEA.
- OpenSSH ne peut utiliser ce fichier de clИ, et je ne peux trouver
- l'utilitaire ssh-keygen de l'installation prИcИdente (non libre) de SSH.
- .
- Vous aurez besoin de gИnИrer une nouvelle clИ d'hТte.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID
- bit set.
- .
- If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
- host-based authentication.
- .
- If in doubt, I suggest you install it with SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh 
-Description-fr: Voulez-vous que /usr/lib/ssh-keysign soit installИ avec le bit SETUID activИ═?
- Vous avez la possibilitИ d'installer ssh-keysign avec le bit SETUID
- activИ.
- .
- Si vous mettez ssh-keysign avec le bit SETUID, vous permettrez
- l'authentification basИe sur les hТtes, disponible dans la version 2 du
- protocole SSH.
- .
- Dans le doute, je vous suggХre de l'installer avec le bit SETUID
- activИ. Si cela vous cause des problХmes, vous pourrez revenir sur
- votre dИcision avec ╚═dpkg-reconfigure ssh═╩.
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-fr: Voulez-vous utiliser le serveur sshd═?
- Ce paquet contient Ю la fois le client ssh et le serveur sshd.
- .
- Normalement le serveur sshd est lancИ pour permettre les connexions
- distantes via ssh.
- .
- Si vous dИsirez seulement utiliser le client ssh pour des connexions vers
- l'extИrieur, ou si vous ne voulez pas vous connecter sur cette machine 
- via ssh, vous pouvez dИsactiver sshd maintenant.
diff --git a/debian/templates.ja b/debian/templates.ja
deleted file mode 100644
index cdcc829cc..000000000
--- a/debian/templates.ja
+++ /dev/null
@@ -1,205 +0,0 @@
-Template: ssh/new_config
-Type: boolean
-Default: true
-Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from 
- the version shipped in Debian 'Potato', which you appear to be upgrading from.
- I can now generate you a new configuration file (/etc/ssh/sshd.config), which
- will work with the new server version, but will not contain any customisations
- you made with the old version. 
- .
- Please note that this new configuration file will set the value of 
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
- ssh directly in as root). It is the opinion of the maintainer that this is
- the correct default (see README.Debian for more details), but you can always
- edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration file 
- for you 
-Description-ja: ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╨Н╓Й╓ч╓╧
- OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒Debian 'Potato' ╓к╢ч╓ч╓Л╓ф╓╓╓К╔п║╪╔╦╔Г╔С
- (╓╓╓ч║╒╓╫╓н╔п║╪╔╦╔Г╔С╓╚╓И╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р╩Н╓ъ╓ф╓╓╓К╓х╓Ё╓М) ╓╚╓И║╒
- юъдЙ╔у╔║╔╓╔К╓╛бГиЩ╓кйя╡╫╓╥╓ф╓╓╓ч╓╧║ё╓╓╓ч║╒©╥╓╥╓╓╔п║╪╔╦╔Г╔С╓н╔╣║╪╔п╓г
- ╩х╓╕╓Ё╓х╓╛╓г╓╜╓К©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К (/etc/ssh/sshd/config) ╓Р╪╚ф╟ю╦ю╝
- ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒╓╫╓н╔у╔║╔╓╔К╓о║╒╦е╓╓╔п║╪╔╦╔Г╔С╓нюъдЙ╔у╔║╔╓╔К╓к
- ╢ч╓ч╓Л╓К╓╒╓й╓©╓нюъдЙ╓╛а╢╓╞╢ч╓ч╓Л╓ч╓╩╓С║ё
- .
- ╓Ё╓н©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓о║╒║жPermitRootLogin║в╓Р║жyes║в╓кюъдЙ╓╥╓ч╓╧║ё
- (╓д╓ч╓Й║╒root ╓н╔я╔╧╔О║╪╔и╓Рцн╓ц╓ф╓╓╓К©м╓й╓Иц╞╓г╓Бд╬юэ╔М╔╟╔╓╔С╓г╓╜╓ч
- ╓╧)║ё╓Ё╓Л╓г╓Х╓╓║╒╓х╓╓╓╕╓н╓╛╓Ё╓н╔я╔ц╔╠║╪╔╦╓н╔А╔С╔ф╔й╓н╟у╦╚╓г╓╧╓╛ (╬э╓╥
- ╓╞╓о README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓)║╒sshd_config ╓Рйт╫╦╓╥╓ф║жno║в╓кюъ
- дЙ╓╧╓К╓Ё╓х╓Б╓г╓╜╓ч╓╧║ё
- .
- ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Р╤╞╓╞╓╙╢╚╓А╓╥╓ч╓╧║ё
-
-Template: ssh/protocol2_only
-Type: boolean
-Default: true
-Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which
- is much more secure.  Disabling ssh 1 is encouraged, however this
- will slow things down on low end machines and might prevent older
- clients from connecting (the ssh client shipped with "potato" is affected).
- .
- Also please note that keys used for protocol 1 are different so you will
- not be able to use them if you only allow protocol 2 connections.
- .
- If you later change your mind about this setting, README.Debian has 
- instructions on what to do to your sshd_config file.
-Description-ja: SSH ╔в╔М╔х╔Ё╔К 2 ╓н╓ъ╓Р╣Ж╡д╓╥╓ч╓╧
- OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒╓╨╓ц╓х╟ба╢╓й║╒ssh ╔в╔М╔х╔Ё╔К╓н╔п║╪╔╦╔Г╔С
- 2 ╓Р╔╣╔щ║╪╔х╓╥╓ф╓╓╓ч╓╧║ёssh 1 ╓Р╤ь╩ъ╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧╓╛║╒цы╓╓╔ч
- ╔╥╔С╓г╓оф╟╨Н╓╛цы╓╞╓й╓ц╓©╓Й║╒╦е╓╓╔╞╔И╔╓╔╒╔С╔х╓╚╓ИюэбЁ╓г╓╜╓й╓╞╓й╓ц╓©╓Й
- ╓╥╓ч╓╧ ("potato" ╓н ssh ╔╞╔И╔╓╔╒╔С╔х╓БюэбЁ╓г╓╜╓й╓╞╓й╓Й╓ч╓╧)║ё
- .
- ╓ч╓©║╒╔в╔М╔х╔Ё╔К 1 ╓г╩х╓╕╔╜║╪╓о╟ш╓й╓К╓©╓А║╒╔в╔М╔х╔Ё╔К 2 ╓Рм╜╦З╓к╓╥╓©
- ╓ю╓╠╓г╓о╓╫╓н╔╜║╪╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╩╓С║ё
- .
- ╓Б╓╥╨ё╦Е╓╒╓й╓©╓╛╧м╓╗╓Рйя╓╗╓©╓И║╒README.Debian ╓Рфи╓Ю╓х sshd_config ╓Р
- ╓и╓н╓Х╓╕╓кйя╧╧╓╥╓©╓И╓Х╓╓╓╚╓╛й╛╓╚╓Й╓ч╓╧║ё
-
-Template: ssh/ssh2_keys_merged
-Type: note
-Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and
- ssh2 keys. This means the authorized_keys2 and known_hosts2 files
- are no longer needed. They will still be read in order to maintain
- backwards compatibility
-Description-ja: ssh2 ╔╜║╪╓оюъдЙ╔у╔║╔╓╔К╓кеЩ╧Г╓╣╓Л╓ч╓╧
- OpenSSH ╓н╔п║╪╔╦╔Г╔С 3 ╓о║╒ssh1 ╓х ssh2 ╓н╔╜║╪╓к╦дйл╓н╔у╔║╔╓╔К╓Р╩х╓╓
- ╓ч╓╩╓С║ё╓д╓ч╓Й║╒authorized_keys2 ╔у╔║╔╓╔К╓х known_hosts2 ╔у╔║╔╓╔К╓о╓Б
- ╓о╓Дитмв╓х╓й╓Й╓ч╓╥╓©║ё╦ЕйЩ╦ъ╢╧ю╜╓Рйщ╓д╓©╓А╓к╓о╓Ё╓Л╓И╓н╔у╔║╔╓╔К╓╛и╛мв
- ╓г╓╧║ё
-
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-ja: бЁ╓╠╓ф╓╓╓╓╓г╓╧╓╚ (юэбЁцФ╓н ssh ╔╩╔ц╔╥╔Г╔С╓╛юз╓Л╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С)
- ╓╓╓ч╔╓╔С╔╧╔х║╪╔К╓╥╓© /etc/init.d/ssh ╓о║╒╓╙╓╫╓И╓╞╪б╧тцФ╓н sshd ╓Ра╢╓ф
- дД╩ъ╓╣╓╩╓ч╓╧║ё╓Ё╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р ssh ╔╩╔ц╔╥╔Г╔С╓Рмя╓╓╓ф╧т╓╕╓н╓о╢ж
- ╟Ц╓ц╓©╓Д╓Й╓╚╓©╓г╓╧║ё
- .
- ╓Ё╓н╬У╤╥╓Р╫╓ю╣╓╧╓К╓к╓о║╒/etc/init.d/ssh ╓н stop ╔╩╔╞╔╥╔Г╔С╓н
- start-stop-daemon ╓н╧т╓к║ж--pidfile /var/run/sshd.pid║в╓хди╡ц╓╥╓ч╓╧║ё
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-ja: цМ╟у: X11 ╓хг╖╬з╓н╔у╔╘╔О║╪╔г╔ё╔С╔╟╓о╔г╔у╔╘╔К╔х╓г╓о╤ь╩ъ╓╣╓Л╓ч╓╧
- ╔╩╔╜╔Е╔Й╔ф╔ё╬Е╓нмЩмЁ╓╚╓И║╒Debian ╓н ssh ╓г╓о ForwardX11 ╓х
- ForwardAgent ╓о╔г╔у╔╘╔К╔х╓г╓о║жoff║в╓кюъдЙ╓╣╓Л╓ч╓╧║ё
- .
- юъдЙ╔у╔║╔╓╔К╓Р╩х╓ц╓©╓Й║╒-X ╔Ё╔ч╔С╔и╔И╔╓╔С╔╙╔в╔╥╔Г╔С╓Р╩х╓ц╓©╓Й╓╧╓К
- ╓Ё╓х╓г║╒©╝мя╓г╓╜╓К╔╣║╪╔п╓кбп╓╥╓ф╣Ж╡д╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
- .
- ╬э╨ы╓о /usr/share/doc/ssh/README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓║ё
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-ja: ╥ы╧П: rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
- rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓К╓х║╒╓╒╓й╓©╓╛ ssh ╓к╓Х╓ц╓ффю╓©╓╓╓х
- ╩в╓ц╓ф╓╓╓К╓г╓╒╓М╓╕╔╩╔╜╔Е╔Й╔ф╔ё╓╛б╩╓й╓О╓Л╓ч╓╧║ё╓╫╓н╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓
- ╔С╔╧╔х║╪╔К╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-ja: ╥ы╧П: telnetd ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
- (╓Б╓╥ telnet ╔╒╔╞╔╩╔╧╓РдС╤║╓╥╓©╓╓╓х╩в╓ц╓ф╓╓╓й╓╓╓н╓г╓╥╓©╓И) telnetd
- ╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓╔С╔╧╔х║╪╔К╓╧╓К╓╚║╒╓ч╓©╓о║╒telnetd-ssh ╔я╔ц╔╠║╪╔╦╓Р
- ╔╓╔С╔╧╔х║╪╔К╓╥╓ф╬╞╓й╓╞╓х╓Б╔м╔ц╔х╔О║╪╔╞╬Е╓Р╟е╧Ф╡╫╓╣╓Л╓ф╓╓╓й╓╓╔Ф║╪╔╤л╬
- ╓Д╔я╔╧╔О║╪╔и╓Д╔╩╔ц╔╥╔Г╔С╬ПйС╓╛н╝╓Л╓й╓╓╓Х╓╕╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-ja: ╥ы╧П: ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓И╓й╓╓╓х╓╓╓╠╓ч╓╩╓С
- IDEA ╓г╟е╧Ф╡╫╓╣╓Л╓©╦е╓╓╔╜║╪╓╛ /etc/ssh/ssh_host_key ╓к╓╒╓Й╓ч╓╧║ё
- OpenSSH ╓о╓Ё╓н╔ш╔╧╔х╔╜║╪╔у╔║╔╓╔К╓Р╟╥╓╗╓ч╓╩╓С║ё╓ч╓©║╒╨ё╔╓╔С╔╧╔х║╪╔К
- ╓╣╓Л╓ф╓╓╓К╦е╓╓ (╔у╔Й║╪╓г╓о╓й╓╓) SSH ╓к╓о ssh-keygen ╔Ф║╪╔ф╔ё╔Й╔ф╔ё
- ╓╛╢ч╓ч╓Л╓ф╓╓╓ч╓╩╓С║ё
- .
- ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓Ки╛мв╓╛╓╒╓Й╓ч╓╧║ё
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/bin/ssh to be installed SUID root?
- You have the option of installing the ssh client with the SUID bit set.
- .
- If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
- authentication, but will not be able to use socks via the LD_PRELOAD
- trick.  This is the traditional approach.
- .
- If you do not make ssh SUID, you will be able to use socks, but
- Rhosts/RhostsRSA authentication will stop working, which may stop you
- logging in to remote systems.  It will also mean that the source
- port will be above 1024, which may confound firewall rules you've set up.
- .
- If in doubt, I suggest you install it with SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh 
-Description-ja: /usr/bin/ssh ╓Р SUID root ╓г╔╓╔С╔╧╔х║╪╔К╓╥╓ч╓╧╓╚?
- ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╔╓╔С╔╧╔х║╪╔К╓╧╓К╨щ║╒SUID ╔с╔ц╔х╓РюъдЙ╓╧╓К╓╚╓╥╓й╓╓╓╚
- ╓Ра╙╓ж╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
- .
- SUID ╓РюъдЙ╓╧╓Л╓п║╒Rhosts/RhostsRSA г╖╬з╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒
- LD_PRELOAD ╔х╔Й╔ц╔╞╓Рмя╓╓╓ф socks ╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓й╓╞╓й╓Й╓ч╓╧║ё╓Ё╓Л
- ╓оеаеЩе╙╓й╓Д╓Й╓╚╓©╓г╓╧║ё
- .
- SUID ╓РюъдЙ╓╥╓й╓╠╓Л╓п║╒socks ╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒Rhosts/RhostRSA
- г╖╬з╓╛ф╞╓╚╓й╓╞╓й╓Й║╒╔Й╔Б║╪╔х╔╥╔╧╔ф╔Ю╓ь╓н╔М╔╟╔╓╔С╓╛╓г╓╜╓й╓╞╓й╓К╓╚╓Б╓╥
- ╓Л╓ч╓╩╓С║ё╓ч╓©║╒╔╫║╪╔╧╔щ║╪╔х╓╛ 1024 ╟й╬Е╓х╓й╓Й║╒╓╒╓й╓©╓╛юъдЙ╓╥╓©╔у╔║
- ╔╓╔╒╔╕╔╘║╪╔К╓н╔К║╪╔К╓Р╨╝мП╓╣╓╩╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С║ё
- .
- ╓Б╓╥й╛╓╚╓И╓й╓╠╓Л╓п║╒SUID ╓РюъдЙ╓╥╓©╬Убж╓г╔╓╔С╔╧╔х║╪╔К╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А
- ╓╥╓ч╓╧║ё╓╫╓Л╓г╓Б╓╥╡©╓╚лДбЙ╓╛╓╒╓Л╓п║╒dpkg-reconfigure ssh ╓Р╪б╧т╓╧╓К╓Ё
- ╓х╓гюъдЙ╓Рйя╧╧╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-ja: sshd ╔╣║╪╔п╓Р╪б╧т╓╥╓ч╓╧╓╚?
- ╓Ё╓н╔я╔ц╔╠║╪╔╦╓о║╒ssh ╔╞╔И╔╓╔╒╔С╔х╓х sshd ╔╣║╪╔п╓нн╬йЩ╓Р╢ч╓С╓г╓╓╓ч╓╧║ё
- .
- дл╬О║╒sshd ╔╩╔╜╔Е╔╒╔╥╔╖╔К╔╣║╪╔п╓о║╒ssh ╓Рмя╓╓╓©╔Й╔Б║╪╔х╓╚╓И╓н╔М╔╟╔╓╔С
- ╓Р╡дг╫╓к╓╧╓К╓©╓А╓к╪б╧т╓╥╓ч╓╧║ё
- .
- ╓Б╓╥ ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╩х╓ц╓ф╓Ё╓н╔ч╔╥╔С╓╚╓Иб╬╔ч╔╥╔С╓ь╓хюэбЁ╓╧╓К╓ю╓╠╓г
- ╓г║╒╓Ё╓н╔ч╔╥╔С╓ь╓х ssh ╓Р╩х╓ц╓ф╔М╔╟╔╓╔С╓╥╓й╓╓╓н╓г╓╥╓©╓И║╒╓Ё╓Ё╓г sshd
- ╓Р╪б╧т╓╥╓й╓╓╓г╓╙╓╜╓ч╓╧║ё
-
diff --git a/debian/templates.master b/debian/templates.master
new file mode 100644
index 000000000..3f0ccd079
--- /dev/null
+++ b/debian/templates.master
@@ -0,0 +1,162 @@
+Template: ssh/privsep_tell
+Type: note
+_Description: Privilege separation
+ This version of OpenSSH contains the new privilege separation option. This
+ significantly reduces the quantity of code that runs as root, and
+ therefore reduces the impact of security holes in sshd.
+ .
+ Unfortunately, privilege separation interacts badly with PAM. Any PAM
+ session modules that need to run as root (pam_mkhomedir, for example) will
+ fail, and PAM keyboard-interactive authentication won't work.
+ .
+ Privilege separation is turned on by default, so if you decide you want it
+ turned off, you need to add "UsePrivilegeSeparation no" to
+ /etc/ssh/sshd_config.
+ .
+ NB! If you are running a 2.0 series Linux kernel, then privilege
+ separation will not work at all, and your sshd will fail to start unless
+ you explicitly turn privilege separation off.
+
+Template: ssh/privsep_ask
+Type: boolean
+Default: true
+_Description: Enable Privilege separation
+ This version of OpenSSH contains the new privilege separation option. This
+ significantly reduces the quantity of code that runs as root, and
+ therefore reduces the impact of security holes in sshd.
+ .
+ Unfortunately, privilege separation interacts badly with PAM. Any PAM
+ session modules that need to run as root (pam_mkhomedir, for example) will
+ fail, and PAM keyboard-interactive authentication won't work.
+ .
+ Since you've opted to have me generate an sshd_config file for you, you
+ can choose whether or not to have Privilege Separation turned on or not.
+ Unless you are running 2.0 (in which case you *must* say no here or your
+ sshd won't start at all) or know you need to use PAM features that won't
+ work with this option, you should say yes here.
+
+Template: ssh/new_config
+Type: boolean
+Default: true
+_Description: Generate new configuration file
+ This version of OpenSSH has a considerably changed configuration file from
+ the version shipped in Debian 'Potato', which you appear to be upgrading
+ from. I can now generate you a new configuration file
+ (/etc/ssh/sshd.config), which will work with the new server version, but
+ will not contain any customisations you made with the old version.
+ .
+ Please note that this new configuration file will set the value of
+ 'PermitRootLogin' to yes (meaning that anyone knowing the root password
+ can ssh directly in as root). It is the opinion of the maintainer that
+ this is the correct default (see README.Debian for more details), but you
+ can always edit sshd_config and set it to no if you wish.
+ .
+ It is strongly recommended that you let me generate a new configuration
+ file for you.
+
+Template: ssh/protocol2_only
+Type: boolean
+Default: true
+_Description: Allow SSH protocol 2 only
+ This version of OpenSSH supports version 2 of the ssh protocol, which is
+ much more secure.  Disabling ssh 1 is encouraged, however this will slow
+ things down on low end machines and might prevent older clients from
+ connecting (the ssh client shipped with "potato" is affected).
+ .
+ Also please note that keys used for protocol 1 are different so you will
+ not be able to use them if you only allow protocol 2 connections.
+ .
+ If you later change your mind about this setting, README.Debian has
+ instructions on what to do to your sshd_config file.
+
+Template: ssh/ssh2_keys_merged
+Type: note
+_Description: ssh2 keys merged in configuration files
+ As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2
+ keys. This means the authorized_keys2 and known_hosts2 files are no longer
+ needed. They will still be read in order to maintain backwards
+ compatibility
+
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+_Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+
+Template: ssh/forward_warning
+Type: note
+_Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either in one of the
+ configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+
+Template: ssh/insecure_rshd
+Type: note
+_Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that
+ package.
+
+Template: ssh/insecure_telnetd
+Type: note
+_Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+_Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
+ can not handle this host key file, and I can't find the ssh-keygen utility
+ from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: true
+_Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
+ You have the option of installing the ssh-keysign helper with the SUID bit
+ set.
+ .
+ If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
+ host-based authentication.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes problems
+ you can change your mind later by running:   dpkg-reconfigure ssh
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+_Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote logins
+ via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all using
+ ssh, then you can disable sshd here.
+
+Template: ssh/user_environment_tell
+Type: note
+_Description: Environment options on keys have been deprecated
+ This version of OpenSSH disables the environment option for public keys by
+ default, in order to avoid certain attacks (for example, LD_PRELOAD). If
+ you are using this option in an authorized_keys file, beware that the keys
+ in question will no longer work until the option is removed.
+ .
+ To re-enable this option, set "PermitUserEnvironment yes" in
+ /etc/ssh/sshd_config after the upgrade is complete, taking note of the
+ warning in the sshd_config(5) manual page.
diff --git a/debian/templates.pl b/debian/templates.pl
deleted file mode 100644
index d4b8fda6d..000000000
--- a/debian/templates.pl
+++ /dev/null
@@ -1,264 +0,0 @@
-Template: ssh/privsep_tell
-Type: note
-Description: Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
- .
- Privilege separation is turned on by default, so if you decide you
- want it turned off, you need to add "UsePrivilegeSeparation no" to
- /etc/ssh/sshd_config.
- .
- NB! If you are running a 2.0 series Linux kernel, then privilege
- separation will not work at all, and your sshd will fail to start
- unless you explicitly turn privilege separation off.
-Description-pl: Separacja uprawnieЯ
- Ta wersja OpenSSH zawiera now╠ opcjЙ separacji uprawnieЯ. Znacz╠co
- zmniejsza ona ilo╤Ф kodu, ktСry jest uruchamiany jako root i co
- za tym idzie redukuje efekty luk bezpieczeЯstwa w sshd.
- .
- Niestety separacja uprawnieЯ ╪le reaguje z PAMem. Jakikolwiek moduЁ
- sesji PAM, ktСry musi byФ uruchamiany jako root (pam_mkhomedir, na
- przykЁad) zawiedzie. Nie bЙdzie dziaЁaФ rСwnie© interaktywna 
- autentykacja z klawiatury (keyboard-interactive authentication).
- .
- Separacja uprawnieЯ jest domy╤lnie wЁ╠czona, wiЙc je╤li zdecydujesz
- siЙ j╠ wyЁ╠czyФ, musisz dodaФ "UsePrivilegeSeparation no" do pliku
- /etc/ssh/sshd_config.
- .
- UWAGA! Je©eli u©ywasz j╠dra Linux'a z serii 2.0, to separacja uprawnieЯ
- w ogСle nie bЙdzie dziaЁaФ i sshd nie wystartuje dopСki wЁasnorЙcznie
- nie wyЁ╠czysz separacji uprawnieЯ w /etc/ssh/sshd_config.
-
-Template: ssh/privsep_ask
-Type: boolean
-Default: true
-Description: Enable Privilege separation
- This version of OpenSSH contains the new privilege separation
- option. This significantly reduces the quantity of code that runs as
- root, and therefore reduces the impact of security holes in sshd.
- .
- Unfortunately, privilege separation interacts badly with PAM. Any
- PAM session modules that need to run as root (pam_mkhomedir, for
- example) will fail, and PAM keyboard-interactive authentication 
- won't work.
- .
- Since you've opted to have me generate an sshd_config file for you,
- you can choose whether or not to have Privilege Separation turned on
- or not. Unless you are running 2.0 (in which case you *must* say no
- here or your sshd won't start at all) or know you need to use PAM
- features that won't work with this option, you should say yes here.
-Description-pl: WЁ╠czenie separacji uprawnieЯ
- Ta wersja OpenSSH zawiera now╠ opcjЙ separacji uprawnieЯ. Znacz╠co
- zmniejsza ona ilo╤Ф kodu, ktСry jest uruchamiany jako root i co
- za tym idzie redukuje efekty luk bezpieczeЯstwa w sshd.
- .
- Niestety separacja uprawnieЯ ╪le reaguje z PAMem. Jakikolwiek moduЁ
- sesji PAM, ktСry musi byФ uruchamiany jako root (pam_mkhomedir, na
- przykЁad) zawiedzie. Nie bЙdzie dziaЁaФ rСwnie© interaktywna 
- autentykacja z klawiatury (keyboard-interactive authentication).
- .
- ZdecydowaЁe╤ siЙ na to abym wygenerowaЁ dla ciebie plik sshd_config,
- i mo©esz wybraФ czy chcesz wЁ╠czyФ SeparacjЙ UprawnieЯ, czy te© nie.
- Je╤li nie u©ywasz j╠dra z serii 2.0 (w ktСrym to przypadku *musisz*
- odpowiedzieФ tutaj 'nie' albo sshd w ogСle nie ruszy) i je╤li nie 
- musisz korzystaФ z mo©liwo╤ci PAMa, ktСre nie bЙd╠ dziaЁaЁy z t╠ opcj╠,
- powiniene╤ odpowiedzieФ tutaj 'tak'.
-
-Template: ssh/new_config
-Type: boolean
-Default: true
-Description: Generate new configuration file
- This version of OpenSSH has a considerably changed configuration file from 
- the version shipped in Debian 'Potato', which you appear to be upgrading from.
- I can now generate you a new configuration file (/etc/ssh/sshd.config), which
- will work with the new server version, but will not contain any customisations
- you made with the old version. 
- .
- Please note that this new configuration file will set the value of 
- 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
- ssh directly in as root). It is the opinion of the maintainer that this is
- the correct default (see README.Debian for more details), but you can always
- edit sshd_config and set it to no if you wish.
- .
- It is strongly recommended that you let me generate a new configuration file 
- for you.
-Description-pl: Wygeneruj nowy plik konfiguracyjny
- W tej wersji OpenSSH zmieniЁ siЙ plik konfiguracyjny w stosunku do wersji 
- dostarczanej z Debianem 'Potato', ktСr╠ zdajesz siЙ aktualizowaФ. MogЙ teraz 
- wygenerowaФ nowy plik konfiguracyjny (/etc/ssh/sshd.config), ktСry bЙdzie
- dziaЁaЁ z now╠ wersj╠ serwera, ale nie bЙdzie zawieraЁ ©adnych dokonanych
- przez ciebie w starej wersji zmian.
- .
- Zauwa© proszЙ, ©e nowy plik konfiguracyjny bЙdzie ustawiaЁ warto╤Ф opcji
- 'PermitRootLogin' na 'tak' (co oznacza, ©e ka©dy kto zna hasЁo root'a mo©e
- zdalnie zalogowaФ siЙ przez ssh jako root). W opinii opiekuna pakietu to
- jest poprawna warto╤Ф domy╤lna (szczegСЁy w README.Debian), ale mo©esz sobie
- wyedytowaФ sshd_config i ustawiФ tЙ opcjЙ na 'nie' je╤li siЙ z t╠ opini╠ nie
- zgadzasz.
- .
- Jest bardzo wskazane aby╤ pozwoliЁ mi wygenerowaФ nowy plik konfiguracyjny.
-
-Template: ssh/protocol2_only
-Type: boolean
-Default: true
-Description: Allow SSH protocol 2 only
- This version of OpenSSH supports version 2 of the ssh protocol, which
- is much more secure.  Disabling ssh 1 is encouraged, however this
- will slow things down on low end machines and might prevent older
- clients from connecting (the ssh client shipped with "potato" is affected).
- .
- Also please note that keys used for protocol 1 are different so you will
- not be able to use them if you only allow protocol 2 connections.
- .
- If you later change your mind about this setting, README.Debian has 
- instructions on what to do to your sshd_config file.
-Description-pl: Zezwalaj wyЁ╠cznie na wersjЙ 2 protokoЁu SSH
- Ta wersja OpenSSH wspiera drug╠ wersjЙ protokoЁu ssh, ktСra jest znacznie
- bardziej bezpieczna. WyЁ╠czenie ssh 1 jest zalecane, choФ spowalnia to
- dziaЁanie na starych maszynach i mo©e uniemo©liwiФ poЁ╠czenie starszym
- wersjom klientСw (dotyczy to np. klienta ssh doЁ╠czanego do "potato").
- .
- Ponadto, zauwa© proszЙ, ©e klucze u©ywane przez protokСЁ 1 s╠ inne, wiЙc
- nie bЙdziesz mСgЁ ich u©ywaФ je╤li zezwolisz na korzystanie wyЁ╠cznie z
- wersji 2 protokoЁu.
- .
- Je╤li pС╪niej zmienisz zdanie co do tego ustawienia, to instrukcje co 
- zmieniФ w sshd_config znajduj╠ siЙ w README.Debian.
-
-Template: ssh/ssh2_keys_merged
-Type: note
-Description: ssh2 keys merged in configuration files
- As of version 3 OpenSSH no longer uses separate files for ssh1 and
- ssh2 keys. This means the authorized_keys2 and known_hosts2 files
- are no longer needed. They will still be read in order to maintain
- backwards compatibility
-Description-pl: klucze ssh2 wЁ╠czone do plikСw konfiguracyjnych
- Pocz╠wszy od wersji 3 OpenSSH nie u©ywa ju© osobnych plikСw dla kluczy
- ssh1 i ssh2. Oznacza to, ©e pliki authorized_keys2 i known_hosts2 nie
- s╠ ju© potrzebne. BЙd╠ one jednak odczytywane aby zachowaФ wsteczn╠
- kompatybilno╤Ф.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Default: false
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-pl: Czy chcesz kontynuowaФ (i ryzykowaФ zabicie aktywnych sesji ssh) ?
- Zainstalowana wЁa╤nie wersja /etc/init.d/ssh mo©e zabiФ wszystkie dziaЁaj╠ce
- obecnie kopie sshd. Je╤li robisz ten upgrade via ssh, to byЁaby ZЁa Rzecz(tm).
- .
- Mo©esz to naprawiФ dodaj╠c "--pidfile /var/run/sshd.pid" do linijki
- start-stop-daemon w sekcji stop tego pliku.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-pl: UWAGA: Przekazywanie (forwarding) X11 i Autoryzacji jest domy╤lnie wyЁ╠czone.
- Ze wzglЙdСw bezpieczeЯstwa Debianowa wersja ssh ma ForwardX11 i ForwardAgent
- ustawione  domy╤lnie na 'off'.
- .
- Dla zaufanych serwerСw mo©esz wЁ╠czyФ te opcje w pliku konfiguracyjnym lub
- przy pomocy opcji -X z linii komend.
- .
- WiЙcej szczegСЁСw znajdziesz w /usr/share/doc/ssh/README.Debian.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-pl: Uwaga: serwer rsh jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ
- Posiadanie zainstalowanego serwera rsh podminowuje zabezpieczenia, ktСre 
- prawdopodobnie starasz siЙ uzyskaФ instaluj╠c ssh. RadziЁbym usun╠Ф ten 
- pakiet.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-pl: Uwaga: telnetd jest zainstalowany --- prawdopodobnie nienajlepszy pomysЁ
- RadziЁbym albo usun╠Ф pakiet telnetd (je╤li nie potrzebujesz koniecznie
- udostЙpniaФ telnet'a) albo zainstalowaФ telnetd-ssl aby byЁa choФ szansza,
- ©e sesje telnet nie bЙd╠ przesyЁaФ niezaszyfrowanego loginu/hasЁa oraz 
- danych sesji przez sieФ.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-pl: Uwaga: musisz utworzyФ nowy klucz hosta 
- Istnieje stary /etc/ssh/ssh_host_key, ktСry jest zaszyfrowany przez
- IDEA. OpenSSH nie umie korzystaФ z tak zaszyfrowanego klucza, a nie
- mo©e znale╪Ф polecenia ssh-keygen ze starego SSH (non-free).
- .
- BЙdziesz musiaЁ wygenerowaФ nowy klucz hosta.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
- You have the option of installing the ssh-keysign helper with the SUID
- bit set.
- .
- If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
- host-based authentication.
- .
- If in doubt, I suggest you install it with SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh 
-Description-pl: Czy chcesz aby /usr/lib/ssh-keysign byЁ zainstalowany jako SUID root? 
- Masz mo©liwo╤Ф zainstalowania pomocniczego programu ssh-keysign z wЁ╠czonym
- bitem SETUID.
- .
- Je╤li uczynisz ssh-keysign SUIDowym, bЙdziesz mСgЁ u©ywaФ opartej na hostach
- autentykacji drugiej wersji protokoЁu SSH.
- .
- Je╤li masz w╠tpliwo╤ci, radzЙ zainstalowaФ go z SUIDem. Je╤li to sprawia
- problemy, mo©esz zmieniФ swoje zdanie uruchamiaj╠c pС╪niej polecenie:
- dpkg-reconfigure ssh
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-pl: Czy chcesz uruchamiaФ serwer sshd ?
- Ten pakiet zawiera zarСwno klienta ssh, jak i serwer sshd.
- .
- Normalnie serwer sshd (Secure Shell Server) bЙdzie uruchomiony aby
- umo©liwiФ zdalny dostЙp przez ssh.
- .
- Je╤li jeste╤ zainteresowny u©ywaniem wyЁ╠cznie klienta ssh dla poЁ╠czeЯ
- wychodz╠cych z tej maszyny, i nie chcesz siЙ na ni╠ logowaФ przy pomocy
- ssh, to mo©esz teraz wyЁ╠czyФ serwer sshd.
diff --git a/debian/templates.pt_BR b/debian/templates.pt_BR
deleted file mode 100644
index 2d0b3e1e7..000000000
--- a/debian/templates.pt_BR
+++ /dev/null
@@ -1,181 +0,0 @@
-Template: ssh/upgrade_to_openssh
-Type: boolean
-Description: Are you sure you want to upgrade to OpenSSH?
- This version of ssh (a.k.a. OpenSSH) is supposed to be a 100% compatible
- drop in replacement for the original (non-free) implemetation.
- .
- If you find that it is not, please report the problem as a bug.
- .
- You can still find the old version of ssh in the ssh-nonfree package
- (although the only reason you are likely to want that is if you also
- want to install the ssh2 package).
- .
- NOTE: If you're upgrading a machine remotely, via ssh, make sure you have at
- least one other ssh session running as root, and once this is installed,
- check that you can still log in (with a third session), before logging out.
-Description-pt_BR: VocЙ tem certeza que quer atualizar para o OpenSSH ?
- Esta versЦo do ssh (tambИm conhecida como OpenSSH) И supostamente um
- substituto 100% compatМvel para a implementaГЦo original (non-free).
- .
- Caso vocЙ ache que nЦo И, por favor reporte o problema como um bug.
- .
- VocЙ continuarА a encontrar a versЦo antiga do ssh no pacote ssh-nonfree
- (embora a Зnica razЦo pela qual vocЙ queira isso И se vocЙ tambИm quer
- instalar o pacote ssh2).
- .
- NOTA: Se vocЙ estА atualizando uma mАquina remotamente, via ssh,
- certifique-se que vocЙ possui pelo menos outra sessЦo ssh executando como
- root e, uma vez que o pacote esteja instalado, verifique se vocЙ continua
- podendo se logar (com uma terceira sessЦo) antes de se desconectar
- (logging out).
-
-Template: ssh/ancient_version
-Type: note
-Description: You are trying to upgrade from an ancient version of non-free ssh
- This is bound to be using IDEA encryption for your identity files.
- You should upgrade to a vaguely contemporary (1.2.15 or later) version of
- non-free ssh, and then upgrade all your key files using ssh-keygen -u
- before attempting to migrate to OpenSSH.
- .
- Alternatively, you could just forget about that, and generate new keys.
-Description-pt_BR: VocЙ estА tentando atualizar a partir de uma versЦo antiga do ssh non-free
- Isto estА ligado a estar usando encriptaГЦo IDEA para seus arquivos de
- identidade. VocЙ deverА atualizar para uma versЦo vagamente contemporБnea
- (1.2.15 ou superior) do ssh non-free, e entЦo atualizar todos seus
- arquivos de chaves usando ssh-keygen -u antes de tentar migrar para
- OpenSSH.
- .
- Alternativamente, vocЙ poderia somente esquecer tudo isso e gerar
- novas chaves.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-pt_BR: VocЙ quer continuar (e arriscar matar sessУes ssh ativas) ?
- A versЦo de /etc/init.d/ssh que vocЙ possui instalada estА prestes a
- matar todas as instБncias sshd sendo executadas. Se vocЙ estА fazendo
- esta atualizaГЦo atravИs de uma sessЦo ssh, isto seria uma Coisa
- Ruim(tm).
- .
- VocЙ pode corrigir isto adicionando "--pidfile /var/run/sshd.pid" na
- linha start-stop-daemon na seГЦo stop deste arquivo.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-pt_BR: NOTA: Forwarding de X11 e Authorization desabilitados por padrЦo.
- Por razТes de seguranГa, a versЦo Debian do ssh tem as opГУes ForwardX11
- e ForwardAgent definidas como ``off'' por padrЦo.
- .
- VocЙ pode habilitar isso para servidores que vocЙ confia, ou em um dos
- arquivos de configuraГЦo, ou com a opГЦo de linha de comando -X.
- .
- Maiores detalhes podem ser encontrados em
- /usr/share/doc/ssh/README.Debian.
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-pt_BR: Aviso: rsh-server estА instalado --- provavelmente nЦo И uma boa idИia
- Possuir o rsh-server instalado minarА a seguranГa que vocЙ estava
- provavelmente querendo obter instalando o ssh. Eu recomendaria a vocЙ
- remover este pacote.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-pt_BR: Aviso: telnetd estА instalado --- provavelmente nЦo И uma boa idИia
- Eu recomendaria a vocЙ ou remover o pacote telnetd (se vocЙ atualmente
- nЦo precisa oferecer acesso telnet) ou instalar telnetd-ssl. Assim existe
- pelo menos uma chance das sessУes telnet nЦo enviarem login/senha nЦo
- encriptados e informaГУes de sessЦo atravИs da rede.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-pt_BR: Aviso: vocЙ deve criar uma nova host key
- Existe uma antiga /etc/ssh/ssh_host_key, a qual И encriptada usando IDEA.
- O OpenSSH nЦo pode gerenciar este arquivo host key e eu nЦo consigo
- encontrar o utilitАrio ssh-keygen da antiga (non-free) instalaГЦo SSH.
- .
- VocЙ precisarА gerar uma nova host key.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: false
-Description: Do you want /usr/bin/ssh to be installed SUID root?
- You have the option of installing the ssh client with the SUID bit set.
- .
- If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
- authentication, but will not be able to use socks via the LD_PRELOAD
- trick.  This is the traditional approach.
- .
- If you do not make ssh SUID, you will be able to use socks, but
- Rhosts/RhostsRSA authentication will stop working, which may stop you
- logging in to remote systems.  It will also mean that the source
- port will be above 1024, which may confound firewall rules you've set up.
- .
- If in doubt, I suggest you install it without SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh
-Description-pt_BR: VocЙ quer que /usr/bin/ssh seja instalado SUID root ?
- VocЙ tem a opГЦo de instalar o cliente ssh com o bit SUID setado.
- .
- Se vocЙ fizer o ssh SUID, vocЙ conseguirА usar autenticaГЦo
- Rhosts/RhostsRSA, mas nЦo serА capaz de usar socks atravИs do truque
- LD_PRELOAD. Isto И o tradicional.
- .
- Se vocЙ nЦo fizer o ssh SUID, vocЙ poderА usar socks, mas a autenticaГЦo
- Rhosts/RhostsRSA irА parar de funcionar, o que poderА lhe impedir de
- logar em sistemas remotos. Isto significarА tambИm que a porta fonte
- estarА acima de 1024, o que poderА confundir regras de firewall que vocЙ
- tenha definido.
- .
- Caso esteja em dЗvida, eu sugiro a vocЙ instalar sem SUID. Se isso causar
- problemas vocЙ pode mudar sua escolha posteriormente executando:
- dpkg-reconfigure ssh.
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-pt_BR: VocЙ quer executar o servidor sshd ?
- Este pacote contИm ambos o cliente ssh e o servidor sshd.
- .
- Normalmente o sshd Secure Shell Server serА executado para permitir
- logins remotos via ssh.
- .
- Se vocЙ estА interessado somente em usar o cliente ssh para conexУes
- para fora desta mАquina, e nЦo quer logar na mesma usando ssh, entЦo vocЙ
- pode desabilitar o sshd aqui.
diff --git a/debian/templates.ru b/debian/templates.ru
deleted file mode 100644
index 39038ff22..000000000
--- a/debian/templates.ru
+++ /dev/null
@@ -1,207 +0,0 @@
-Template: ssh/upgrade_to_openssh
-Type: boolean
-Description: Are you sure you want to upgrade to OpenSSH?
- This version of ssh (a.k.a. OpenSSH) is supposed to be a 100% compatible
- drop in replacement for the original (non-free) implemetation.
- .
- If you find that it is not, please report the problem as a bug.
- .
- You can still find the old version of ssh in the ssh-nonfree package
- (although the only reason you are likely to want that is if you also
- want to install the ssh2 package).
- .
- NOTE: If you're upgrading a machine remotely, via ssh, make sure you have at
- least one other ssh session running as root, and once this is installed,
- check that you can still log in (with a third session), before logging out.
-Description-ru: Вы уверены, что хотите обновить OpenSSH?
- Эта версия ssh(он же OpenSSH) является 100%-совместимой с оригинальной
- (несвободной) реализацией.
- .
- Если вы обнаружили различие, то, пожалуйста, сообщите об этой ошибке.
- .
- Вы  можете  по  прежнему  найти старую версию ssh в пакете ssh-nonfree
- (хотя действительно необходимо его использовать только, если вы хотите
- установить еще и пакет ssh2).
- .
- Примечание: Если вы удаленно обновляете машину через ssh, то убедитесь
- что  как  минимум  еще  одна сессия ssh запущена от root, и как только
- процесс  обновления  закончится,  убедитесь,  что  вы  сможете войти в
- систему (установив третью сессию), перед тем как отсоединяться.
-
-Template: ssh/protocol2_default
-Type: note
-Description: SSH uses protocol 2 by default.
- This version of SSH (unlike previous ones) uses ssh
- protocol version 2 by default. The key file formats have changed
- between the protocol versions, so your old key files will not be
- useful. You may either pass the '-1' option to ssh to force it to use
- the older protocol (and your old keys), or generate new keys. Protocol
- version 2 is thought to be more secure, so this is the preferred
- course of action. See README.Debian for a little more information
- .
- Also, due to problems with IPv4 and IPv6 interoperation, IPv4 is now
- the default (this is a change from previous versions). Passing ssh the
- -6 flag will cause IPv6 addresses to be used. Once the current issues
- with using IPv6 on machines with IPv4 addresses have been solved, the
- previous default will be restored
-Description-ru: SSH использует по умолчанию протокол версии 2.
- Эта  версия  SSH  (в  отличии  от  предыдущих) использует по умолчанию
- протокол  версии  2.  В  этой  версии  протокола изменен формат файлов
- ключей,  так что ваши старые ключи станут бесполезными. Вы можете либо
- указывать  опцию  '-1' для ssh, чтобы принудительно использовать более
- старую  версию  протокола,  либо  сгенерируйте новый  ключи.  Протокол
- версии  2  более защищенный, и поэтому предопределен по умолчанию. См.
- подробности в файле README.Debian.
- .
- Также   из-за  проблем  взаимосоответствия  IPv4  и  IPv6,  сейчас  по
- умолчанию  по  умолчанию  используется  IPv4  (в отличии от предыдущих
- версий).  Чтобы использовать IPv6, надо задать флаг -6. Как только все
- сложности  с  использованием  IPv6  на  машинах  с адресами IPv4 будут
- решены, то прежнее поведение по умолчанию будет восстановлено.
-
-Template: ssh/ancient_version
-Type: note
-Description: You are trying to upgrade from an ancient version of non-free ssh
- This is bound to be using IDEA encryption for your identity files.
- You should upgrade to a vaguely contemporary (1.2.15 or later) version of
- non-free ssh, and then upgrade all your key files using ssh-keygen -u
- before attempting to migrate to OpenSSH.
- .
- Alternatively, you could just forget about that, and generate new keys.
-Description-ru: Вы пытаетесь обновить древнюю версию коммерческого ssh
- Она  ограничена  использованием   шифрования  IDEA  для  ваших  файлов
- идентификации. Рекомендуется обновить более современные версии (1.2.15
- или  более  поздние) коммерческого ssh, и потом обновить ваши ключевые
- файлы командой `ssh-keygen -u` перед попыткой перейти на OpenSSH.
- .
- Как вариант, можете забыть обо всем этом и сгенерировать новые ключи.
-
-Template: ssh/use_old_init_script
-Type: boolean
-Description: Do you want to continue (and risk killing active ssh sessions) ?
- The version of /etc/init.d/ssh that you have installed, is likely to kill
- all running sshd instances.  If you are doing this upgrade via an ssh
- session, that would be a Bad Thing(tm).
- .
- You can fix this by adding "--pidfile /var/run/sshd.pid" to the
- start-stop-daemon line in the stop section of the file.
-Description-ru: Вы хотите продолжить (рискуя потерять активные ssh-соединения)?
- Версия  /etc/init.d/ssh,  которую  вы  устанавливаете, может убить все
- запущенные  процессы  ssh.  Если вы осуществляете это обновление через
- ssh сессию, то это Плохая Вещь (tm).
- .
- Это можно исправить добавлением "--pidfile /var/run/sshd.pid" в строке
- start-stop-daemon в разделе stop этого файла.
-
-Template: ssh/forward_warning
-Type: note
-Description: NOTE: Forwarding of X11 and Authorization disabled by default.
- For security reasons, the Debian version of ssh has ForwardX11 and
- ForwardAgent set to ``off'' by default.
- .
- You can enable it for servers you trust, either
- in one of the configuration files, or with the -X command line option.
- .
- More details can be found in /usr/share/doc/ssh/README.Debian
-Description-ru: ПРИМЕЧАНИЕ: Форвардинг X11 и Authorization запрещен по умолчанию.
- По причинам безопасности, в версии для Debian ssh имеет ForwardX11 и
- ForwardAgent установленными в ``off'' по умолчанию.
- .
- Вы можете разрешить их для серверов, которым доверяете либо в одном из
- настроечных файлов, или параметром командной строки -X.
- .
- Дополнительую информацию можно найти в /usr/share/doc/ssh/README.Debian
-
-Template: ssh/insecure_rshd
-Type: note
-Description: Warning: rsh-server is installed --- probably not a good idea
- having rsh-server installed undermines the security that you were probably
- wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-ru: Предупреждение: установлен rsh-server --- видимо, не очень хорошо
- Установленный  rsh-server  снижает  безопасность,  которую вы вероятно
- хотите повысить устанавливая ssh. Рекомендуется удалить этот пакет.
-
-Template: ssh/insecure_telnetd
-Type: note
-Description: Warning: telnetd is installed --- probably not a good idea
- I'd advise you to either remove the telnetd package (if you don't actually
- need to offer telnet access) or install telnetd-ssl so that there is at
- least some chance that telnet sessions will not be sending unencrypted
- login/password and session information over the network.
-Description-ru: Предупреждение: установлен telnetd --- видимо, не очень хорошо
- Я рекомендовал бы вам удалить пакет telnetd (если вам действительно не
- нужен доступ telnet) или установить  telnet-ssl,  чтобы  иметь хотя бы
- возможность  не  передавать  по  сети  незашифрованные  имена и пароли
- пользователей и прочую информацию в telnet-сессиях.
-
-Template: ssh/encrypted_host_key_but_no_keygen
-Type: note
-Description: Warning: you must create a new host key
- There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
- OpenSSH can not handle this host key file, and I can't find the
- ssh-keygen utility from the old (non-free) SSH installation.
- .
- You will need to generate a new host key.
-Description-ru: Предупреждение: вы должны создать новый ключ машины.
- Есть старый /etc/ssh/ssh_host_key, который зашифрован IDEA. OpenSSH не
- может  работать  с  этим  ключом  машины,  и  я  не могу найти утилиту 
- ssh-keygen от старой (несвободной) инсталляции SSH.
- .
- Вам надо будет сгенерировать новый ключ хоста.
-
-Template: ssh/SUID_client
-Type: boolean
-Default: true
-Description: Do you want /usr/bin/ssh to be installed SUID root?
- You have the option of installing the ssh client with the SUID bit set.
- .
- If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
- authentication, but will not be able to use socks via the LD_PRELOAD
- trick.  This is the traditional approach.
- .
- If you do not make ssh SUID, you will be able to use socks, but
- Rhosts/RhostsRSA authentication will stop working, which may stop you
- logging in to remote systems.  It will also mean that the source
- port will be above 1024, which may confound firewall rules you've set up.
- .
- If in doubt, I suggest you install it with SUID.  If it causes
- problems you can change your mind later by running:   dpkg-reconfigure ssh 
-Description-ru: Хотите установить /usr/bin/ssh как SUID root?
- Вы  имеете  возможность  установить /usr/bin/ssh с установленным битом
- SUID.
- .
- Если  вы  делаете  ssh SUID, то вы сможете использовать аутентификацию
- Rhosts/RhostsRSA,  но  не сможете использовать socks через LD_PRELOAD.
- Это традиционное поведение.
- .
- Если  вы  сделаете ssh SUID, то вы сможете использовать socks, но зато
- аутентификация  Rhosts/RhostsRSA  не будет работать, что может сделать
- невозможным вашу регистрацию на удаленных системах. Также это означает
- что номер источникового порта будет больше 1024, что может не нарушить
- работу установленных вами правил файрвола.
- .
- Если вы не знаете, что решить, то рекомендуется установить его с битом
- SUID. Если вы потом передумаете, то эту установку можно будет изменить
- командой: "dpkg-reconfigure ssh".
-
-Template: ssh/run_sshd
-Type: boolean
-Default: true
-Description: Do you want to run the sshd server ?
- This package contains both the ssh client, and the sshd server.
- .
- Normally the sshd Secure Shell Server will be run to allow remote
- logins via ssh.
- .
- If you are only interested in using the ssh client for outbound
- connections on this machine, and don't want to log into it at all
- using ssh, then you can disable sshd here.
-Description-ru: Хотите запустить сервер sshd?
- Этот пакет содержит и ssh-клиент, и ssh-сервер.
- .
- Обычно  sshd  Secure Shell Server  запускается  для удаленного входа в
- регистрации в системе через ssh.
- .
- Если  вас  интересует  только  использование ssh-клиента для исходящих
- соединений с  этой  машины, и вы  не хотите входить в ее систему через
- ssh, то вы можете сейчас запретить sshd.