11 files changed, 1355 insertions, 91 deletions

diff --git a/debian/changelog b/debian/changelog
index f2e32f13e..71a950772 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,25 @@
+openssh (1:3.4p1-3) unstable; urgency=low
+
+  * Add myself to Uploaders: and begin acting as temporary maintainer, at
+    Matthew's request. (Normal service will resume in some months' time.)
+  * Add sharutils to Build-Depends (closes: #138465).
+  * Stop creating the /usr/doc/ssh symlink.
+
+  * Fix some debconf template typos (closes: #160358).
+  * Split debconf templates into one file per language.
+  * Add debconf template translations:
+    - Brazilian Portuguese (thanks, Andre Luis Lopes; closes: #106173).
+    - Danish (thanks, Claus Hindsgaul; closes: #126607).
+    - Japanese (thanks, Tomohiro KUBOTA; closes: #137427).
+    - Russian (thanks, Ilgiz Kalmetev; closes: #136610).
+    - Spanish (thanks, Carlos Valdivia YagЭe; closes: #129041).
+  * Update debconf template translations:
+    - French (thanks, Igor Genibel; closes: #151361).
+    - German (thanks, Axel Noetzold; closes: #147069).
+  * Some of these translations are fuzzy. Please send updates.
+
+ -- Colin Watson <cjwatson@debian.org>  Sun, 13 Oct 2002 14:09:57 +0100
+
 openssh (1:3.4p1-2) unstable; urgency=high
 
   * Get a security-fixed version into unstable
diff --git a/debian/control b/debian/control
index 7063438ad..acda7997a 100644
--- a/debian/control
+++ b/debian/control
@@ -2,8 +2,9 @@ Source: openssh
 Section: net
 Priority: standard
 Maintainer: Matthew Vernon <matthew@debian.org>
-Build-Depends: libwrap0-dev | libwrap-dev, zlib1g-dev | libz-dev, libssl-dev, libpam0g-dev | libpam-dev, libgnome-dev, groff, debhelper (>=1.1.17)
+Build-Depends: libwrap0-dev | libwrap-dev, zlib1g-dev | libz-dev, libssl-dev, libpam0g-dev | libpam-dev, libgnome-dev, groff, debhelper (>=1.1.17), sharutils
 Standards-Version: 3.5.2
+Uploaders: Colin Watson <cjwatson@debian.org>
 
 Package: ssh
 Architecture: any
diff --git a/debian/postinst b/debian/postinst
index 34fee95d8..10d61d86e 100644
--- a/debian/postinst
+++ b/debian/postinst
@@ -315,15 +315,6 @@ setup_startup
 setup_init
 
 
-# Automatically added by dh_installdocs
-if [ "$1" = "configure" ]; then
-        if [ -d /usr/doc -a ! -e /usr/doc/ssh -a -d /usr/share/doc/ssh ]; then
-                ln -sf ../share/doc/ssh /usr/doc/ssh
-        fi
-fi
-# End automatically added section
-
-
 [ -e /usr/share/debconf/confmodule ] && db_stop
 
 exit 0
diff --git a/debian/templates b/debian/templates
index a9b4394d4..b56f8a5ec 100644
--- a/debian/templates
+++ b/debian/templates
@@ -12,11 +12,11 @@ Description: Privilege separation
  .
  Privilege separation is turned on by default, so if you decide you
  want it turned off, you need to add "UsePrivilegeSeparation no" to
- /etc/ssh/sshd_config 
+ /etc/ssh/sshd_config.
  .
  NB! If you are running a 2.0 series Linux kernel, then privilege
  separation will not work at all, and your sshd will fail to start
- unless you explicity turn privilege separation off.
+ unless you explicitly turn privilege separation off.
 
 Template: ssh/privsep_ask
 Type: boolean
@@ -54,7 +54,7 @@ Description: Generate new configuration file
  edit sshd_config and set it to no if you wish.
  .
  It is strongly recommended that you let me generate a new configuration file 
- for you 
+ for you.
 
 Template: ssh/protocol2_only
 Type: boolean
@@ -89,21 +89,6 @@ Description: Do you want to continue (and risk killing active ssh sessions) ?
  .
  You can fix this by adding "--pidfile /var/run/sshd.pid" to the
  start-stop-daemon line in the stop section of the file.
-Description-de: Wollen Sie weitermachen (und das Killen der Session riskieren)?
- Die Version von /etc/init.d/ssh, die sie installiert haben, wird 
- vermutlich ihre aktiven ssh-Instanzen killen. Wenn Sie das Upgrade
- via ssh erledigen, dann ist das ein Problem.
- .
- Sie koennen das Problem beheben, indem sie "--pidfile /var/run/sshd.pid"
- an die start-stop-daemon Zeile in dem Bereich stop der Datei 
- /etc/init.d/ssh ergaenzen.
-Description-fr: Voulez vous continuer (et risquer de rompre les sessions ssh actives) ?
- Il est probable que la version de /etc/init.d/ssh install=E9e en ce moment
- tue toutes les instances de sshd lanc=E9es en ce moment. Si vous faite une
- mise =E0 jour via ssh, ca serait une Mauvaise Chose(tm).
- .
- Vous pouvez corriger /etc/init.d/ssh en ajoutant '--pidfile /var/run/sshd.pid'
- a la ligne 'start-stop-daemon' dans la section 'stop' du fichier.
 
 Template: ssh/forward_warning
 Type: note
@@ -115,36 +100,12 @@ Description: NOTE: Forwarding of X11 and Authorization disabled by default.
  in one of the configuration files, or with the -X command line option.
  .
  More details can be found in /usr/share/doc/ssh/README.Debian
-Description-de: HINWEIS: Forwarden von X11 und Authorisierung ist abgeschaltet.
- Aus Sicherheitsgruenden haben die Debian Pakete von ssh ForwardX11 und
- ForwardAgent auf "off" gesetzt.
- .
- Sie koenne dies fuer Server denen Sie trauen, entweder per Eintrag im
- den Konfigurations Dateien oder per -X Kommando-Zeilen Option aendern.
- .
- Weitere Details koennen Sie in /usr/share/doc/ssh/README.Debian finden.
-Description-fr: NOTE: Suivi de session X11 et d'agent d'autorisation d=E9sactiv=E9s par d=E9faut.
- Pour des raisons de s=E9curit=E9, la version Debian de ssh positionne les
- options ForwardX11 et ForwardAgent a ``Off'' par d=E9faut.
- .
- Vous pouvez activer ces options pour les serveurs en lesquels vous avez
- confiance, soit dans un des fichiers de configuration, soit avec l'option
- -X de la ligne de commande.
- .
- Plus d'informations sont disponibles dans /usr/share/doc/ssh/README.Debian.
 
 Template: ssh/insecure_rshd
 Type: note
 Description: Warning: rsh-server is installed --- probably not a good idea
  having rsh-server installed undermines the security that you were probably
  wanting to obtain by installing ssh.  I'd advise you to remove that package.
-Description-de: Warnung: rsh-server ist installiert --- moeglicherweise
- ist es eine schlechte Idee den rsh-server installiert zu haben, da er 
- die Sicherheit untergraebt. Wir empfehlen das Paket zu entfernen.
-Description-fr: Attention: le paquet rsh-server est install=E9 --- ce n'estprobablement pas une bonne id=E9e
- Avoir un serveur rsh install=E9 affaibli la s=E9curit=E9 que vous vouliez
- probablement obtenir en installant ssh. Je vous conseillerais de
- d=E9installer ce paquet.
 
 Template: ssh/insecure_telnetd
 Type: note
@@ -153,17 +114,6 @@ Description: Warning: telnetd is installed --- probably not a good idea
  need to offer telnet access) or install telnetd-ssl so that there is at
  least some chance that telnet sessions will not be sending unencrypted
  login/password and session information over the network.
-Description-de: Warnung: telnetd ist installiert --- schlechte Idee
- Wir empfehlen das telnetd Paket zu entfernen (wenn sie keine telnet Zugang
- anbieten) oder telnetd-ssl zu installieren, so dass die Moeglichkeit besteht
- dass das Login und Password nicht unverschluesselt durch das Netz gesendet
- werden.
-Description-fr: Attention: le paquet telnetd est install=E9 --- ce n'est probablement pas une bonne id=E9e
- Je vous conseillerais de, soit enlever le paquet telnetd (si ce service
- n'est pas n=E9cessaire), soit de le remplacer par le paquet telnetd-ssl
- pour qu'il y ait au moins une chance que les sessions telnet soient
- encrypt=E9es et que les mot de passes et logins ne passent pas en clair sur
- le r=E9seau.
 
 Template: ssh/encrypted_host_key_but_no_keygen
 Type: note
@@ -173,15 +123,6 @@ Description: Warning: you must create a new host key
  ssh-keygen utility from the old (non-free) SSH installation.
  .
  You will need to generate a new host key.
-Description-de: Warnung: Sie muessen einen neuen Host Key erzeugen
- Es existiert eine alte Variante von /etc/ssh/ssh_host_key welche
- per IDEA verschluesselt ist. OpenSSH kann eine solche Host Key Datei
- nicht lesen und ssh-keygen von der alten (nicht-freien) ssh Installation
- kann nicht gefunden werden.
-Description-fr: Attention: vous devez cr=E9er une nouvelle cl=E9 d'h=F4te
- Il existe un vieux /etc/ssh/ssh_host_key qui est encrypt=E9 avec IDEA.
- OpenSSH ne peut utiliser ce fichier de cl=E9, et je ne peux trouver
- l'utilitaire ssh-keygen de l'installation pr=E9c=E9dente (non libre) de SSH.
 
 Template: ssh/SUID_client
 Type: boolean
@@ -208,22 +149,3 @@ Description: Do you want to run the sshd server ?
  If you are only interested in using the ssh client for outbound
  connections on this machine, and don't want to log into it at all
  using ssh, then you can disable sshd here.
-Description-de: Wollen Sie den sshd Server starten?
- Das Paket enthaelt sowohl den client als auch den sshd server.
- .
- Normal wird der sshd Secure Shell Server fuer Remote Logins per ssh
- gestartet.
- .
- Wenn Sie nur den ssh client nutzen wollen, um sich mit anderen Rechner
- zu verbinden und sich nicht per ssh in diesen Computer einloggen wollen, 
- dann koennen Sie hier den sshd abschalten.
-Description-fr: Voulez vous utiliser le serveur sshd ?
- Ce paquet contient a la fois le client ssh et le serveur sshd.
- .
- Normalement le serveur sshd sera lanc=E9 pour permettre les logins distants
- via ssh.
- .
- Si vous d=E9sirez seulement utiliser le client ssh pour vous connecter a
- distance sur d'autres machines a partir de celle-ci, et que vous ne
- voulez pas vous logguer sur cette machine a distance via ssh, alors vous
- pouvez d=E9sactiver sshd maintenant.
diff --git a/debian/templates.da b/debian/templates.da
new file mode 100644
index 000000000..c17c60039
--- /dev/null
+++ b/debian/templates.da
@@ -0,0 +1,157 @@
+Template: ssh/protocol2_only
+Type: boolean
+Default: true
+Description: Allow SSH protocol 2 only
+ This version of OpenSSH supports version 2 of the ssh protocol, which is
+ much more secure.  Disabling ssh 1 is encouraged, however this will slow
+ things down on low end machines and might prevent older clients from
+ connecting.
+ .
+ Also please note that keys used for protocol 1 are different so you will
+ not be able to use them if you only allow protocol 2 connections.
+Description-da: Tillad kun SSH protokol 2
+ Denne udgave af OpenSSH understЬtter version 2 af ssh-protokollen, som er
+ betydeligt mere sikker. Det anbefales af deaktivere version 1. Dog kan det
+ slЬve langsomme maskiner, og forhindre Фldre klienter i at opnЕ forbindelse.
+
+Template: ssh/ssh2_keys_merged
+Type: note
+Description: ssh2 keys merged in configuration files
+ As of version 3 OpenSSH no longer uses seperate files for ssh1 and ssh2
+ keys. This means the authorized_keys2 and known_hosts2 files are no longer
+ needed. They will still be read in order to maintain backwards
+ compatibility
+Description-da: ssh2-nЬgler flettet i opsФtningsfilerne
+ Siden version 3 har OpenSSH ikke lФngere separate filer for ssh1- og
+ ssh2-nЬgler. Det betyder, at filerne authorized_keys2 og known_hosts2 ikke
+ lФngere er nЬdvendige. De vil stadig dog stadig blive lФst for
+ bagudkompatilitetens skyld.
+
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-da: Vil du fortsФtte (og risikere at afbryde aktive ssh-forbindelser)?
+ Den udgave af /etc/init.d/ssh, du har installeret, vil sandsynligvis afbryde
+ alle sshd-dФmoner. Det vil vФre en rigtigt dЕrlig idИ, hvis du er ved at
+ opgradering via en ssh-forbindelse.
+ .
+ Du kan afhjФlpe dette ved at tilfЬje "--pidfile /var/run/sshd.pid" til
+ 'start-stop-daemon'-linjen i stop-afsnittet af filen.
+
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either in one of the
+ configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-da: BEMфRK: Videregivelse af X11 og adgangkontrol er som standard deaktiveret.
+ Af sikkerhedsgrunde har Debianudgaven af ssh sat ForwardX11 og ForwardAgent
+ til 'off' som standard.
+ .
+ Du kan aktivere dem for servere, du stoler pЕ i en af opsФtningsfilerne
+ eller med kommandolinjetilvalget '-X'.
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that
+ package.
+Description-da: Advarsel: rsh-serveren er installeret --- sikkert ikke en god idИ
+ Den sikkerhed, du nok Ьnskede at opnЕ ved at installere ssh undermineres
+ ved, at du har rsh-server installeret. Jeg vil rЕde dig til at fjerne
+ pakken rsh-server.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-da: Advarsel: telnetd er installeret --- sikkert ikke en god idИ
+ Jeg vil rЕde dig til enten at fjerne pakken telnetd (hvis du i virkeligheden
+ ikke har brug for at tilbyde telnet-adgang) eller installere telnetd-ssl, sЕ
+ der i det mindste er en mulighed for, at telnet-sessioner ikke sender
+ adgangskoder og sessions-oplysninger ukrypteret over netvФrket.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
+ can not handle this host key file, and I can't find the ssh-keygen utility
+ from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-da: Advarsel: du skal oprette en ny vФrtsnЬgle
+ Der ligger en gammel, IDEA-krypteret /etc/ssh/ssh_host_key. OpenSSH kan
+ ikke hЕndtere sЕdan en vФrtsnЬglefil, og jeg kan ikke finde vФrktЬjet
+ ssh-keygen fra den gamle (ikke-frie, 'non-free') SSH-installation.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: false
+Description: Do you want /usr/bin/ssh to be installed SUID root?
+ You have the option of installing the ssh client with the SUID bit set.
+ .
+ If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
+ authentication, but will not be able to use socks via the LD_PRELOAD
+ trick.  This is the traditional approach.
+ .
+ If you do not make ssh SUID, you will be able to use socks, but
+ Rhosts/RhostsRSA authentication will stop working, which may stop you
+ logging in to remote systems.  It will also mean that the source port will
+ be above 1024, which may confound firewall rules you've set up.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes problems
+ you can change your mind later by running:   dpkg-reconfigure ssh 
+Description-da: Vil du have, at /usr/bin/ssh bliver installeret 'SUID root'?
+ Du har mulighed for at installere ssh-klienten med SUID-flaget sat.
+ .
+ Hvis du gЬr ssh SUID, vil du kunne bruge adgangskontrollen
+ Rhosts/RhostsRSA, men vil ikke kunne bruge socks med LD_PRELOAD-tricket.
+ Det vil vФre den almindelige fremgangsmЕde.
+ .
+ Hvis du ikke gЬr ssh SUID, vil du kunne bruge socks, men adgangskontrol
+ med Rhosts/RhostRSA vil holde op med at virke, hvilket kan forhindre dig
+ i at logge ind pЕ fjerne systemer. Det vil ogsЕ betyde, at kildeporten
+ vil ligge over 1024, hvilket kan kollidere med eventuelle brandmure, du
+ har sat op.
+ .
+ Hvis du er i tvivl, foreslЕr jeg, at du installerer den med SUID. Hvis det
+ giver problemer, kan du senere ombestemme dig ved at kЬre:
+ 'dpkg-reconfigure ssh'.
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote logins
+ via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all using
+ ssh, then you can disable sshd here.
+Description-da: Vil du kЬre sshd-serveren?
+ Denne pakke indeholder bЕde ssh-klienten og sshd-serveren.
+ .
+ Normalt vil sshd sikker skalserver ('Secure Shell Server') blive aktiveret
+ og tillade fjerne brugere i at logge pЕ via ssh.
+ .
+ Hvis du udelukkende er interesseret i at bruge ssh-klienten til udgЕende
+ forbindelser fra denne maskine, og ikke Ьnsker at tilgЕ denne maskine
+ udefra via ssh, kan du nu deaktivere sshd.
diff --git a/debian/templates.de b/debian/templates.de
new file mode 100644
index 000000000..5feb24cd9
--- /dev/null
+++ b/debian/templates.de
@@ -0,0 +1,95 @@
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-de: Wollen Sie weitermachen (und das Killen der Session riskieren)?
+ Die Version von /etc/init.d/ssh, die Sie installiert haben, wird 
+ vermutlich Ihre aktiven ssh-Instanzen killen. Wenn Sie das Upgrade
+ via ssh erledigen, dann ist das ein Problem.
+ .
+ Sie kЖnnen das Problem beheben, indem sie "--pidfile /var/run/sshd.pid"
+ an die start-stop-daemon Zeile in dem Bereich stop der Datei 
+ /etc/init.d/ssh ergДnzen.
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either
+ in one of the configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-de: HINWEIS: Forwarden von X11 und Authorisierung ist abgeschaltet.
+ Aus SicherheitsgrЭnden sind die Debian Pakete von ssh ForwardX11 und
+ ForwardAgent auf "off" gesetzt.
+ .
+ Sie kЖnnen dies fЭr Server, denen Sie trauen, entweder per Eintrag in
+ die Konfigurations Dateien oder per Kommando-Zeilen Option -X Дndern.
+ .
+ Weitere Details koennen Sie in /usr/share/doc/ssh/README.Debian finden.
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that package.
+Description-de: Warnung: rsh-server ist installiert --- mЖglicherweise
+ ist es eine schlechte Idee, den rsh-server installiert zu haben, da er 
+ die Sicherheit untergrДbt. Wir empfehlen, das Paket zu entfernen.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-de: Warnung: telnetd ist installiert --- schlechte Idee
+ Wir empfehlen das telnetd Paket zu entfernen (falls Sie keinen telnet Zugang
+ anbieten) oder telnetd-ssl zu installieren, so daъ Sie verhindern kЖnnen,
+ daъ Login und Password unverschlЭsselt durch das Netz gesendet
+ werden.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
+ OpenSSH can not handle this host key file, and I can't find the
+ ssh-keygen utility from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-de: Warnung: Sie mЭssen einen neuen Host Key erzeugen
+ Es existiert eine alte Variante von /etc/ssh/ssh_host_key welche
+ per IDEA verschlЭsselt ist. OpenSSH kann eine solche Host Key Datei
+ nicht lesen und ssh-keygen von der alten (nicht-freien) ssh Installation
+ kann nicht gefunden werden.
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote
+ logins via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all
+ using ssh, then you can disable sshd here.
+Description-de: MЖchten Sie den sshd Server starten?
+ Das Paket enthДlt sowohl den Client als auch den sshd Server.
+ .
+ Normal wird der sshd Secure Shell Server fЭr Remote Logins per ssh
+ gestartet.
+ .
+ Wenn Sie nur den ssh client nutzen wollen, um sich mit anderen Rechnern
+ zu verbinden und sich nicht per ssh in diesen Computer einloggen wollen, 
+ dann kЖnnen Sie hier den sshd abschalten.
diff --git a/debian/templates.es b/debian/templates.es
new file mode 100644
index 000000000..c3cc971ca
--- /dev/null
+++ b/debian/templates.es
@@ -0,0 +1,207 @@
+Template: ssh/new_config
+Type: boolean
+Default: true
+Description: Generate new configuration file
+ This version of OpenSSH has a considerably changed configuration file from
+ the version shipped in Debian 'Potato', which you appear to be upgrading
+ from. I can now generate you a new configuration file
+ (/etc/ssh/sshd.config), which will work with the new server version, but
+ will not contain any customisations you made with the old version. 
+ .
+ Please note that this new configuration file will set the value of
+ 'PermitRootLogin' to yes (meaning that anyone knowing the root password
+ can ssh directly in as root). It is the opinion of the maintainer that
+ this is the correct default (see README.Debian for more details), but you
+ can always edit sshd_config and set it to no if you wish.
+ .
+ It is strongly recommended that you let me generate a new configuration
+ file for you 
+Description-es: Generar un fichero de configuraciСn nuevo
+ Esta versiСn de OpenSSH tiene un fichero de configuraciСn muy distinto del
+ que incluМa la versiСn de 'Potato'. Parece que estА actualizando desde esa
+ versiСn, por lo que puede generar un nuevo fichero de configuraciСn
+ (/etc/ssh/sshd.config), que funcionarА con la nueva versiСn del servidor,
+ pero no tendrА ninguno de los cambios que hubiera hecho a la versiСn
+ antigua.
+ .
+ Debe saber que este nuevo fichero de configuraciСn pondrА el valor de
+ 'PermitRootLogin' a "yes" (por lo que root podrА entrar directamente por
+ ssh). El mantenedor opina que Иsta es la opciСn por defecto mАs adecuada
+ (consulte README.Debian para conocer mАs detalles), pero recuerde que
+ siempre puede editar sshd_config y cambiarlo.
+ .
+ Es muy recomendable generar ahora automАticamente un nuevo fichero de
+ configuraciСn.
+
+Template: ssh/protocol2_only
+Type: boolean
+Default: true
+Description: Allow SSH protocol 2 only
+ This version of OpenSSH supports version 2 of the ssh protocol, which is
+ much more secure.  Disabling ssh 1 is encouraged, however this will slow
+ things down on low end machines and might prevent older clients from
+ connecting (the ssh client shipped with "potato" is affected).
+ .
+ Also please note that keys used for protocol 1 are different so you will
+ not be able to use them if you only allow protocol 2 connections.
+ .
+ If you later change your mind about this setting, README.Debian has
+ instructions on what to do to your sshd_config file.
+Description-es: Permitir sСlo la versiСn 2 del protocolo SSH
+ Esta versiСn de OpenSSH soporta la versiСn 2 del protocolo ssh, que es
+ mucho mАs segura que la anterior. Se recomienda no usar ssh versiСn 1,
+ aunque irА mАs lento en mАquinas modestas y puede impedir que se conecten
+ clientes antiguos, como por ejemplo el cliente de ssh incluido en
+ "potato".
+ .
+ TambiИn tenga en cuenta que las claves utilizadas para el protocolo 1 son
+ diferentes, por lo que no podrА usarlas si Зnicamente permite conexiones
+ mediante el protocolo 2.
+ .
+ Si cambia de opiniСn mАs tarde, el fichero README.Debian contiene
+ instrucciones sobre quИ ha de cambiar en el fichero sshd_config.
+
+Template: ssh/ssh2_keys_merged
+Type: note
+Description: ssh2 keys merged in configuration files
+ As of version 3 OpenSSH no longer uses separate files for ssh1 and ssh2
+ keys. This means the authorized_keys2 and known_hosts2 files are no longer
+ needed. They will still be read in order to maintain backwards
+ compatibility
+Description-es: Las claves ssh2 ya se incluyen en los ficheros de configuraciСn
+ A partir de la versiСn 3, OpenSSH ya no utiliza ficheros diferentes para
+ las claves ssh1 y ssh2. Esto quiere decir que ya no son necesarios los
+ ficheros authorized_keys2 y known_hosts2, aunque aЗn se seguirАn leyendo
+ para mantener compatibilidad hacia atrАs.
+
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-es: ©Desea continuar, aЗn a riesgo de matar todas las sesiones ssh?
+ La versiСn de /etc/init.d/ssh que tiene instalada, es muy probable que
+ mate el demonio ssh. Si estА actualizando mediante una sesiСn ssh, puede
+ no ser muy buena idea.
+ .
+ Puede arreglarlo aЯadiendo "--pidfile /var/run/sshd.pid" a la lМnea
+ 'start-stop-daemon' en la secciСn 'stop' del fichero.
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either in one of the
+ configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-es: NOTA: ReenvМo de X11 y AutorizaciСn desactivadas por defecto.
+ Por razones de seguridad, la versiСn de ssh de Debian tiene por defecto
+ ForwardX11 y ForwardAgent puestas a ``off''.
+ .
+ Puede activar estas opciones para los servidores en los que confМe, en
+ los ficheros de configuraciСn o con la opciСn -X en lМnea de comandos.
+ .
+ Puede encontrar mАs detalles en /usr/share/doc/ssh/README.Debian.
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that
+ package.
+Description-es: Aviso: tiene rsh-server instalado (no es una buena idea)
+ Tener rsh-server instalado representa un menoscabo de la seguridad que
+ probablemente desea obtener instalando ssh. Le aconsejarМa borrar ese
+ paquete.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-es: Aviso: tiene telnetd instalado (no es una buena idea)
+ Le aconsejarМa borrar el paquete telnetd si no necesita realmente
+ ofrecer acceso mediante telnet o instalar telnetd-ssl para que las
+ contraseЯas, login y demАs informaciСn de las sesiones telnet no viajen
+ sin cifrar por la red.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted. OpenSSH
+ can not handle this host key file, and I can't find the ssh-keygen utility
+ from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-es: Aviso: debe crear una nueva clave para su servidor
+ Su sistema tiene un /etc/ssh/ssh_host_key antiguo, que usa cifrado IDEA.
+ OpenSSH no puede manejar este fichero de claves y tampoco se encuentra la
+ utilidad ssh-keygen incluida en el paquete ssh no libre.
+ .
+ NecesitarА generar una nueva clave para su servidor.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: true
+Description: Do you want /usr/bin/ssh to be installed SUID root?
+ You have the option of installing the ssh client with the SUID bit set.
+ .
+ If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
+ authentication, but will not be able to use socks via the LD_PRELOAD
+ trick.  This is the traditional approach.
+ .
+ If you do not make ssh SUID, you will be able to use socks, but
+ Rhosts/RhostsRSA authentication will stop working, which may stop you
+ logging in to remote systems.  It will also mean that the source port will
+ be above 1024, which may confound firewall rules you've set up.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes problems
+ you can change your mind later by running:   dpkg-reconfigure ssh 
+Description-es: ©Desea hacer que /usr/bin/ssh se ejecute con permisos de root?
+ Tiene la posibilidad de instalar el cliente ssh setuid root.
+ .
+ Instalarlo setuid root le permitirА usar la autentificaciСn
+ Rhosts/RhostsRSA, pero no podrА usar socks mediante el truco de
+ LD_PRELOAD. Tradicionalmente, este ha sido el enfoque mАs habitual.
+ .
+ Si no hace ssh setuid, podrА usar socks pero la autentificaciСn
+ Rhosts/RhostsRSA dejarА de funcionar, lo cual le puede impedir el acceso
+ a sistemas remotos. TambiИn significarА que el puerto de origen se
+ encontrarА por encima del 1024, lo cual puede confundir a las reglas del
+ cortafuegos que haya configurado.
+ .
+ Si tiene dudas, le sugiero que lo instale sin setuid. Si esto le causa
+ algЗn problema puede cambiar posteriormente la configuraciСn ejecutando:
+ dpkg-reconfigure ssh
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote logins
+ via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all using
+ ssh, then you can disable sshd here.
+Description-es: ©Quiere ejecutar el servidor sshd?
+ Este paquete contiene el cliente ssh y el servidor sshd.
+ .
+ Generalmente, el servidor de ssh se ejecuta para permitir el acceso
+ mediante ssh.
+ .
+ Si sСlo estА interesado en usar el cliente ssh en conexiones salientes de
+ esta mАquina, y no quiere acceder a ella mediante ssh, entonces puede
+ desactivar sshd.
diff --git a/debian/templates.fr b/debian/templates.fr
new file mode 100644
index 000000000..f23a83ae1
--- /dev/null
+++ b/debian/templates.fr
@@ -0,0 +1,276 @@
+Template: ssh/privsep_tell
+Type: note
+Description: Privilege separation
+ This version of OpenSSH contains the new privilege separation
+ option. This significantly reduces the quantity of code that runs as
+ root, and therefore reduces the impact of security holes in sshd.
+ .
+ Unfortunately, privilege separation interacts badly with PAM. Any
+ PAM session modules that need to run as root (pam_mkhomedir, for
+ example) will fail, and PAM keyboard-interactive authentication 
+ won't work.
+ .
+ Privilege separation is turned on by default, so if you decide you
+ want it turned off, you need to add "UsePrivilegeSeparation no" to
+ /etc/ssh/sshd_config 
+ .
+ NB! If you are running a 2.0 series Linux kernel, then privilege
+ separation will not work at all, and your sshd will fail to start
+ unless you explicity turn privilege separation off.
+Description-fr: La sИparation des privilХges
+ Cette version d'OpenSSH est livrИe avec la nouvelle option de 
+ sИparation des privilХges. CelЮ rИduit de maniХre signifiante la 
+ quantitИ de code s'exИctutant en tant que root, et donc rИduit 
+ l'impact des trous de sИcuritИ dans sshd.
+ .
+ Malheureusement, la sИparation des privilХges intИragit mal avec PAM.
+ Tous les modules de session PAM ayant besoin d'Йtre exИcutИ en tant que
+ root (pam_mkhomedir, par exemple) ne s'exИcutera pas, et
+ l'authentification intИractive au clavier ne fonctionnera pas.
+ .
+ La sИparation des privilХges est activИe par dИfaut, donc si vous
+ souhaitez la dИsactiver, vous devez ajouter ╚UsePrivilegeSeparation no╩ 
+ dans /etc/ssh/sshd_config
+ .
+ NB! Si vous avez un noyau Linux de la sИrie des 2.0, alors la
+ sИparation des privilХges ne fonctionnera pas, et votre dИmon sshd ne
+ se lancera pas jusqu'Ю ce que vous dИsactiviez explicitement la
+ sИparation des privilХges.
+
+Template: ssh/privsep_ask
+Type: boolean
+Default: true
+Description: Enable Privilege separation
+ This version of OpenSSH contains the new privilege separation
+ option. This significantly reduces the quantity of code that runs as
+ root, and therefore reduces the impact of security holes in sshd.
+ .
+ Unfortunately, privilege separation interacts badly with PAM. Any
+ PAM session modules that need to run as root (pam_mkhomedir, for
+ example) will fail, and PAM keyboard-interactive authentication 
+ won't work.
+ .
+ Since you've opted to have me generate an sshd_config file for you,
+ you can choose whether or not to have Privilege Separation turned on
+ or not. Unless you are running 2.0 (in which case you *must* say no
+ here or your sshd won't start at all) or know you need to use PAM
+ features that won't work with this option, you should say yes here.
+Description-fr: Activation de la sИparation des privilХges
+ Cette version d'OpenSSH est livrИe avec la nouvelle option de 
+ sИparation des privilХges. CelЮ rИduit de maniХre signifiante la 
+ quantitИ de code s'exИctutant en tant que root, et donc rИduit 
+ l'impact des trous de sИcuritИ dans sshd.
+ .
+ Malheureusement, la sИparation des privilХges intИragit mal avec PAM.
+ Tous les modules de session PAM ayant besoin d'Йtre exИcutИ en tant que
+ root (pam_mkhomedir, par exemple) ne s'exИcutera pas, et
+ l'authentification intИractive au clavier ne fonctionnera pas.
+ .
+ Comme vous souhaitez que je gИnХre le fichier de configuration Ю votre
+ place, vous pouvez choisir d'activer ou non l'option de sИparation des
+ privilХges. Si vous utilisez un noyau 2.0 (dans ce cas vous *devez*
+ rИpondre non ici ou bien sshd ne se lancera pas) ou bien si vous avez
+ besoin de fonctionnalitИs PAM, cela ne fonctionnera pas avec cette
+ option d'activИe, dans le cas contraire vous pouvez dire oui.
+
+Template: ssh/new_config
+Type: boolean
+Default: true
+Description: Generate new configuration file
+ This version of OpenSSH has a considerably changed configuration file from 
+ the version shipped in Debian 'Potato', which you appear to be upgrading from.
+ I can now generate you a new configuration file (/etc/ssh/sshd.config), which
+ will work with the new server version, but will not contain any customisations
+ you made with the old version. 
+ .
+ Please note that this new configuration file will set the value of 
+ 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
+ ssh directly in as root). It is the opinion of the maintainer that this is
+ the correct default (see README.Debian for more details), but you can always
+ edit sshd_config and set it to no if you wish.
+ .
+ It is strongly recommended that you let me generate a new configuration file 
+ for you 
+Description-fr: GИnИration du fichier de configuration
+ Cette version d'OpenSSH possХde un fichier de configuration
+ considИrablement diffИrent de celui fournit avec la Debian 'Potato',
+ qui apparement est la version Ю partir de laquelle vous effectuez la
+ mise Ю jour. Je peux gИnИrer pour vous un nouveau fichier de
+ configuration (/etc/ssh/sshd_config), lequel fonctionnera avec la
+ nouvelle version du serveur, mais ne contiendra aucuns des paramИtrages
+ personnels que vous avaient dИjЮ fait.
+ .
+ Notez que le nouveau fichier de configuration mettre l'option
+ 'PermitRootLogin' Ю yes (signifiant que toute personne connaissant le
+ mot de passe root pourra directement se connecter en tant que root).
+ C'est ce que considХre comme option par dИfaut le mainteneur (voir le
+ fichier README.Debian pour plus de dИtails), mais vous pouvez toujours
+ Иditer le fichier sshd_config et mettre la valeur Ю no si vous le
+ souhaitez.
+ .
+ Il est fortement conseillИ de me laisser gИnИrer le nouveau fichier de
+ configuration Ю votre place.
+
+Template: ssh/protocol2_only
+Type: boolean
+Default: true
+Description: Allow SSH protocol 2 only
+ This version of OpenSSH supports version 2 of the ssh protocol, which
+ is much more secure.  Disabling ssh 1 is encouraged, however this
+ will slow things down on low end machines and might prevent older
+ clients from connecting (the ssh client shipped with "potato" is affected).
+ .
+ Also please note that keys used for protocol 1 are different so you will
+ not be able to use them if you only allow protocol 2 connections.
+ .
+ If you later change your mind about this setting, README.Debian has 
+ instructions on what to do to your sshd_config file.
+Description-fr: Permettre seulement la version 2 du protocole SSH
+ Cette version d'OpenSSH supporte la version 2 du protocole ssh, lequel
+ Иtant beaucoup plus sИcurisИ. DИsactiver ssh 1 est conseillИ, sinon
+ cela risque de ralentir les transactions et les machines et cela peut
+ prИvenir de la connexion d'anciens client (le client ssh fournit dans
+ la ╚potato╩ est affectИ).
+ .
+ De plus, les clИs utilisИs par la version 1 du protocol sont
+ diffИrentes et vous ne serez donc plus capable de les utiliser si vous
+ n'autoriser seulement que les connexions utilisant la version 2 du
+ protocole.
+ .
+ Si vous changez d'avis ultИrieurement par rapport Ю ce point de
+ configuration, les instructions sur ce que vous devez modifier dans le
+ fichier sshd_config sont fournies dans le README.Debian.
+
+Template: ssh/ssh2_keys_merged
+Type: note
+Description: ssh2 keys merged in configuration files
+ As of version 3 OpenSSH no longer uses separate files for ssh1 and
+ ssh2 keys. This means the authorized_keys2 and known_hosts2 files
+ are no longer needed. They will still be read in order to maintain
+ backwards compatibility
+Description-fr: AgrИgation des clИs ssh2 dans le fichier de configuration
+ иtant donnИ que la version 3 d'OpenSSH n'utilise plus de fichiers
+ sИparИ pour les clИs ssh1 et ssh2. Cela signifie que les fichier
+ authorized_key2 et known_hosts2 ne sont plus nИcessaires. Ils sont
+ quand mЙme lus afin de concerver une compatibilitИ ascendante.
+
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-fr: Voulez vous continuer (et risquer de rompre les sessions ssh actives) ?
+ Il est probable que la version de /etc/init.d/ssh installИe en ce moment
+ tue toutes les instances de sshd lancИes en ce moment. Si vous faite une
+ mise Ю jour via ssh, ca serait une Mauvaise Chose(tm).
+ .
+ Vous pouvez corriger /etc/init.d/ssh en ajoutant '--pidfile /var/run/sshd.pid'
+ a la ligne 'start-stop-daemon' dans la section 'stop' du fichier.
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either
+ in one of the configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-fr: NOTE: Suivi de session X11 et d'agent d'autorisation dИsactivИs par dИfaut.
+ Pour des raisons de sИcuritИ, la version Debian de ssh positionne les
+ options ForwardX11 et ForwardAgent a ``Off'' par dИfaut.
+ .
+ Vous pouvez activer ces options pour les serveurs en lesquels vous avez
+ confiance, soit dans un des fichiers de configuration, soit avec l'option
+ -X de la ligne de commande.
+ .
+ Plus d'informations sont disponibles dans /usr/share/doc/ssh/README.Debian.
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that package.
+Description-fr: Attention: le paquet rsh-server est installИ --- ce n'est probablement pas une bonne idИe
+ Avoir un serveur rsh installИ affaibli la sИcuritИ que vous vouliez
+ probablement obtenir en installant ssh. Je vous conseillerais de
+ dИinstaller ce paquet.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-fr: Attention: le paquet telnetd est installИ --- ce n'est probablement pas une bonne idИe
+ Je vous conseillerais de, soit enlever le paquet telnetd (si ce service
+ n'est pas nИcessaire), soit de le remplacer par le paquet telnetd-ssl
+ pour qu'il y ait au moins une chance que les sessions telnet soient
+ encryptИes et que les mot de passes et logins ne passent pas en clair sur
+ le rИseau.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
+ OpenSSH can not handle this host key file, and I can't find the
+ ssh-keygen utility from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-fr: Attention: vous devez crИer une nouvelle clИ d'hТte
+ Il existe un vieux /etc/ssh/ssh_host_key qui est encryptИ avec IDEA.
+ OpenSSH ne peut utiliser ce fichier de clИ, et je ne peux trouver
+ l'utilitaire ssh-keygen de l'installation prИcИdente (non libre) de SSH.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: true
+Description: Do you want /usr/lib/ssh-keysign to be installed SUID root?
+ You have the option of installing the ssh-keysign helper with the SUID
+ bit set.
+ .
+ If you make ssh-keysign SUID, you will be able to use SSH's Protocol 2
+ host-based authentication.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes
+ problems you can change your mind later by running:   dpkg-reconfigure ssh 
+Description-fr: Souhaitez-vous que /usr/lib/ssh-keysign soit installИ avec le bit SETUID root d'activИ ?
+ Vous avez la possibilitИ d'installer ssh-keysign avec le bit SETIUD
+ d'activИ.
+ .
+ Si vous mettez sshХkeysign avec le bit SETUID, vous permettrez
+ l'authentification basИ sur les hТtes de la version 2 du protocole ssh.
+ .
+ Dans le doute, je vous suggХre de l'installer avec le bit SETUID
+ d'activИ. Si cela vous cause des problХmes vous pourrez revenir sur
+ votre dИsicion: dpkg-reconfigure ssh
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote
+ logins via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all
+ using ssh, then you can disable sshd here.
+Description-fr: Voulez vous utiliser le serveur sshd ?
+ Ce paquet contient a la fois le client ssh et le serveur sshd.
+ .
+ Normalement le serveur sshd sera lancИ pour permettre les logins distants
+ via ssh.
+ .
+ Si vous dИsirez seulement utiliser le client ssh pour vous connecter a
+ distance sur d'autres machines a partir de celle-ci, et que vous ne
+ voulez pas vous logguer sur cette machine a distance via ssh, alors vous
+ pouvez dИsactiver sshd maintenant.
diff --git a/debian/templates.ja b/debian/templates.ja
new file mode 100644
index 000000000..cdcc829cc
--- /dev/null
+++ b/debian/templates.ja
@@ -0,0 +1,205 @@
+Template: ssh/new_config
+Type: boolean
+Default: true
+Description: Generate new configuration file
+ This version of OpenSSH has a considerably changed configuration file from 
+ the version shipped in Debian 'Potato', which you appear to be upgrading from.
+ I can now generate you a new configuration file (/etc/ssh/sshd.config), which
+ will work with the new server version, but will not contain any customisations
+ you made with the old version. 
+ .
+ Please note that this new configuration file will set the value of 
+ 'PermitRootLogin' to yes (meaning that anyone knowing the root password can
+ ssh directly in as root). It is the opinion of the maintainer that this is
+ the correct default (see README.Debian for more details), but you can always
+ edit sshd_config and set it to no if you wish.
+ .
+ It is strongly recommended that you let me generate a new configuration file 
+ for you 
+Description-ja: ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╨Н╓Й╓ч╓╧
+ OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒Debian 'Potato' ╓к╢ч╓ч╓Л╓ф╓╓╓К╔п║╪╔╦╔Г╔С
+ (╓╓╓ч║╒╓╫╓н╔п║╪╔╦╔Г╔С╓╚╓И╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р╩Н╓ъ╓ф╓╓╓К╓х╓Ё╓М) ╓╚╓И║╒
+ юъдЙ╔у╔║╔╓╔К╓╛бГиЩ╓кйя╡╫╓╥╓ф╓╓╓ч╓╧║ё╓╓╓ч║╒©╥╓╥╓╓╔п║╪╔╦╔Г╔С╓н╔╣║╪╔п╓г
+ ╩х╓╕╓Ё╓х╓╛╓г╓╜╓К©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К (/etc/ssh/sshd/config) ╓Р╪╚ф╟ю╦ю╝
+ ╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒╓╫╓н╔у╔║╔╓╔К╓о║╒╦е╓╓╔п║╪╔╦╔Г╔С╓нюъдЙ╔у╔║╔╓╔К╓к
+ ╢ч╓ч╓Л╓К╓╒╓й╓©╓нюъдЙ╓╛а╢╓╞╢ч╓ч╓Л╓ч╓╩╓С║ё
+ .
+ ╓Ё╓н©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓о║╒║жPermitRootLogin║в╓Р║жyes║в╓кюъдЙ╓╥╓ч╓╧║ё
+ (╓д╓ч╓Й║╒root ╓н╔я╔╧╔О║╪╔и╓Рцн╓ц╓ф╓╓╓К©м╓й╓Иц╞╓г╓Бд╬юэ╔М╔╟╔╓╔С╓г╓╜╓ч
+ ╓╧)║ё╓Ё╓Л╓г╓Х╓╓║╒╓х╓╓╓╕╓н╓╛╓Ё╓н╔я╔ц╔╠║╪╔╦╓н╔А╔С╔ф╔й╓н╟у╦╚╓г╓╧╓╛ (╬э╓╥
+ ╓╞╓о README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓)║╒sshd_config ╓Рйт╫╦╓╥╓ф║жno║в╓кюъ
+ дЙ╓╧╓К╓Ё╓х╓Б╓г╓╜╓ч╓╧║ё
+ .
+ ©╥╓╥╓╓юъдЙ╔у╔║╔╓╔К╓Р╪╚ф╟ю╦ю╝╓╧╓К╓Ё╓х╓Р╤╞╓╞╓╙╢╚╓А╓╥╓ч╓╧║ё
+
+Template: ssh/protocol2_only
+Type: boolean
+Default: true
+Description: Allow SSH protocol 2 only
+ This version of OpenSSH supports version 2 of the ssh protocol, which
+ is much more secure.  Disabling ssh 1 is encouraged, however this
+ will slow things down on low end machines and might prevent older
+ clients from connecting (the ssh client shipped with "potato" is affected).
+ .
+ Also please note that keys used for protocol 1 are different so you will
+ not be able to use them if you only allow protocol 2 connections.
+ .
+ If you later change your mind about this setting, README.Debian has 
+ instructions on what to do to your sshd_config file.
+Description-ja: SSH ╔в╔М╔х╔Ё╔К 2 ╓н╓ъ╓Р╣Ж╡д╓╥╓ч╓╧
+ OpenSSH ╓н╓Ё╓н╔п║╪╔╦╔Г╔С╓о║╒╓╨╓ц╓х╟ба╢╓й║╒ssh ╔в╔М╔х╔Ё╔К╓н╔п║╪╔╦╔Г╔С
+ 2 ╓Р╔╣╔щ║╪╔х╓╥╓ф╓╓╓ч╓╧║ёssh 1 ╓Р╤ь╩ъ╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧╓╛║╒цы╓╓╔ч
+ ╔╥╔С╓г╓оф╟╨Н╓╛цы╓╞╓й╓ц╓©╓Й║╒╦е╓╓╔╞╔И╔╓╔╒╔С╔х╓╚╓ИюэбЁ╓г╓╜╓й╓╞╓й╓ц╓©╓Й
+ ╓╥╓ч╓╧ ("potato" ╓н ssh ╔╞╔И╔╓╔╒╔С╔х╓БюэбЁ╓г╓╜╓й╓╞╓й╓Й╓ч╓╧)║ё
+ .
+ ╓ч╓©║╒╔в╔М╔х╔Ё╔К 1 ╓г╩х╓╕╔╜║╪╓о╟ш╓й╓К╓©╓А║╒╔в╔М╔х╔Ё╔К 2 ╓Рм╜╦З╓к╓╥╓©
+ ╓ю╓╠╓г╓о╓╫╓н╔╜║╪╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╩╓С║ё
+ .
+ ╓Б╓╥╨ё╦Е╓╒╓й╓©╓╛╧м╓╗╓Рйя╓╗╓©╓И║╒README.Debian ╓Рфи╓Ю╓х sshd_config ╓Р
+ ╓и╓н╓Х╓╕╓кйя╧╧╓╥╓©╓И╓Х╓╓╓╚╓╛й╛╓╚╓Й╓ч╓╧║ё
+
+Template: ssh/ssh2_keys_merged
+Type: note
+Description: ssh2 keys merged in configuration files
+ As of version 3 OpenSSH no longer uses separate files for ssh1 and
+ ssh2 keys. This means the authorized_keys2 and known_hosts2 files
+ are no longer needed. They will still be read in order to maintain
+ backwards compatibility
+Description-ja: ssh2 ╔╜║╪╓оюъдЙ╔у╔║╔╓╔К╓кеЩ╧Г╓╣╓Л╓ч╓╧
+ OpenSSH ╓н╔п║╪╔╦╔Г╔С 3 ╓о║╒ssh1 ╓х ssh2 ╓н╔╜║╪╓к╦дйл╓н╔у╔║╔╓╔К╓Р╩х╓╓
+ ╓ч╓╩╓С║ё╓д╓ч╓Й║╒authorized_keys2 ╔у╔║╔╓╔К╓х known_hosts2 ╔у╔║╔╓╔К╓о╓Б
+ ╓о╓Дитмв╓х╓й╓Й╓ч╓╥╓©║ё╦ЕйЩ╦ъ╢╧ю╜╓Рйщ╓д╓©╓А╓к╓о╓Ё╓Л╓И╓н╔у╔║╔╓╔К╓╛и╛мв
+ ╓г╓╧║ё
+
+Template: ssh/use_old_init_script
+Type: boolean
+Default: false
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-ja: бЁ╓╠╓ф╓╓╓╓╓г╓╧╓╚ (юэбЁцФ╓н ssh ╔╩╔ц╔╥╔Г╔С╓╛юз╓Л╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С)
+ ╓╓╓ч╔╓╔С╔╧╔х║╪╔К╓╥╓© /etc/init.d/ssh ╓о║╒╓╙╓╫╓И╓╞╪б╧тцФ╓н sshd ╓Ра╢╓ф
+ дД╩ъ╓╣╓╩╓ч╓╧║ё╓Ё╓н╔п║╪╔╦╔Г╔С╔╒╔ц╔в╓Р ssh ╔╩╔ц╔╥╔Г╔С╓Рмя╓╓╓ф╧т╓╕╓н╓о╢ж
+ ╟Ц╓ц╓©╓Д╓Й╓╚╓©╓г╓╧║ё
+ .
+ ╓Ё╓н╬У╤╥╓Р╫╓ю╣╓╧╓К╓к╓о║╒/etc/init.d/ssh ╓н stop ╔╩╔╞╔╥╔Г╔С╓н
+ start-stop-daemon ╓н╧т╓к║ж--pidfile /var/run/sshd.pid║в╓хди╡ц╓╥╓ч╓╧║ё
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either
+ in one of the configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-ja: цМ╟у: X11 ╓хг╖╬з╓н╔у╔╘╔О║╪╔г╔ё╔С╔╟╓о╔г╔у╔╘╔К╔х╓г╓о╤ь╩ъ╓╣╓Л╓ч╓╧
+ ╔╩╔╜╔Е╔Й╔ф╔ё╬Е╓нмЩмЁ╓╚╓И║╒Debian ╓н ssh ╓г╓о ForwardX11 ╓х
+ ForwardAgent ╓о╔г╔у╔╘╔К╔х╓г╓о║жoff║в╓кюъдЙ╓╣╓Л╓ч╓╧║ё
+ .
+ юъдЙ╔у╔║╔╓╔К╓Р╩х╓ц╓©╓Й║╒-X ╔Ё╔ч╔С╔и╔И╔╓╔С╔╙╔в╔╥╔Г╔С╓Р╩х╓ц╓©╓Й╓╧╓К
+ ╓Ё╓х╓г║╒©╝мя╓г╓╜╓К╔╣║╪╔п╓кбп╓╥╓ф╣Ж╡д╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ ╬э╨ы╓о /usr/share/doc/ssh/README.Debian ╓Рфи╓С╓г╡╪╓╣╓╓║ё
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that package.
+Description-ja: ╥ы╧П: rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
+ rsh-server ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓К╓х║╒╓╒╓й╓©╓╛ ssh ╓к╓Х╓ц╓ффю╓©╓╓╓х
+ ╩в╓ц╓ф╓╓╓К╓г╓╒╓М╓╕╔╩╔╜╔Е╔Й╔ф╔ё╓╛б╩╓й╓О╓Л╓ч╓╧║ё╓╫╓н╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓
+ ╔С╔╧╔х║╪╔К╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-ja: ╥ы╧П: telnetd ╓╛╔╓╔С╔╧╔х║╪╔К╓╣╓Л╓ф╓╓╓ч╓╧║ё╓©╓ж╓Сни╓╓╧м╓╗╓г╓о╓╒╓Й╓ч╓╩╓С
+ (╓Б╓╥ telnet ╔╒╔╞╔╩╔╧╓РдС╤║╓╥╓©╓╓╓х╩в╓ц╓ф╓╓╓й╓╓╓н╓г╓╥╓©╓И) telnetd
+ ╔я╔ц╔╠║╪╔╦╓Р╔╒╔С╔╓╔С╔╧╔х║╪╔К╓╧╓К╓╚║╒╓ч╓©╓о║╒telnetd-ssh ╔я╔ц╔╠║╪╔╦╓Р
+ ╔╓╔С╔╧╔х║╪╔К╓╥╓ф╬╞╓й╓╞╓х╓Б╔м╔ц╔х╔О║╪╔╞╬Е╓Р╟е╧Ф╡╫╓╣╓Л╓ф╓╓╓й╓╓╔Ф║╪╔╤л╬
+ ╓Д╔я╔╧╔О║╪╔и╓Д╔╩╔ц╔╥╔Г╔С╬ПйС╓╛н╝╓Л╓й╓╓╓Х╓╕╓к╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А╓╥╓ч╓╧║ё
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
+ OpenSSH can not handle this host key file, and I can't find the
+ ssh-keygen utility from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-ja: ╥ы╧П: ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓И╓й╓╓╓х╓╓╓╠╓ч╓╩╓С
+ IDEA ╓г╟е╧Ф╡╫╓╣╓Л╓©╦е╓╓╔╜║╪╓╛ /etc/ssh/ssh_host_key ╓к╓╒╓Й╓ч╓╧║ё
+ OpenSSH ╓о╓Ё╓н╔ш╔╧╔х╔╜║╪╔у╔║╔╓╔К╓Р╟╥╓╗╓ч╓╩╓С║ё╓ч╓©║╒╨ё╔╓╔С╔╧╔х║╪╔К
+ ╓╣╓Л╓ф╓╓╓К╦е╓╓ (╔у╔Й║╪╓г╓о╓й╓╓) SSH ╓к╓о ssh-keygen ╔Ф║╪╔ф╔ё╔Й╔ф╔ё
+ ╓╛╢ч╓ч╓Л╓ф╓╓╓ч╓╩╓С║ё
+ .
+ ©╥╓╥╓╓╔ш╔╧╔х╔╜║╪╓Р╨Н╓Ки╛мв╓╛╓╒╓Й╓ч╓╧║ё
+
+Template: ssh/SUID_client
+Type: boolean
+Default: true
+Description: Do you want /usr/bin/ssh to be installed SUID root?
+ You have the option of installing the ssh client with the SUID bit set.
+ .
+ If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
+ authentication, but will not be able to use socks via the LD_PRELOAD
+ trick.  This is the traditional approach.
+ .
+ If you do not make ssh SUID, you will be able to use socks, but
+ Rhosts/RhostsRSA authentication will stop working, which may stop you
+ logging in to remote systems.  It will also mean that the source
+ port will be above 1024, which may confound firewall rules you've set up.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes
+ problems you can change your mind later by running:   dpkg-reconfigure ssh 
+Description-ja: /usr/bin/ssh ╓Р SUID root ╓г╔╓╔С╔╧╔х║╪╔К╓╥╓ч╓╧╓╚?
+ ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╔╓╔С╔╧╔х║╪╔К╓╧╓К╨щ║╒SUID ╔с╔ц╔х╓РюъдЙ╓╧╓К╓╚╓╥╓й╓╓╓╚
+ ╓Ра╙╓ж╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+ .
+ SUID ╓РюъдЙ╓╧╓Л╓п║╒Rhosts/RhostsRSA г╖╬з╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒
+ LD_PRELOAD ╔х╔Й╔ц╔╞╓Рмя╓╓╓ф socks ╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓й╓╞╓й╓Й╓ч╓╧║ё╓Ё╓Л
+ ╓оеаеЩе╙╓й╓Д╓Й╓╚╓©╓г╓╧║ё
+ .
+ SUID ╓РюъдЙ╓╥╓й╓╠╓Л╓п║╒socks ╓Р╩х╓╕╓Ё╓х╓╛╓г╓╜╓ч╓╧╓╛║╒Rhosts/RhostRSA
+ г╖╬з╓╛ф╞╓╚╓й╓╞╓й╓Й║╒╔Й╔Б║╪╔х╔╥╔╧╔ф╔Ю╓ь╓н╔М╔╟╔╓╔С╓╛╓г╓╜╓й╓╞╓й╓К╓╚╓Б╓╥
+ ╓Л╓ч╓╩╓С║ё╓ч╓©║╒╔╫║╪╔╧╔щ║╪╔х╓╛ 1024 ╟й╬Е╓х╓й╓Й║╒╓╒╓й╓©╓╛юъдЙ╓╥╓©╔у╔║
+ ╔╓╔╒╔╕╔╘║╪╔К╓н╔К║╪╔К╓Р╨╝мП╓╣╓╩╓К╓╚╓Б╓╥╓Л╓ч╓╩╓С║ё
+ .
+ ╓Б╓╥й╛╓╚╓И╓й╓╠╓Л╓п║╒SUID ╓РюъдЙ╓╥╓©╬Убж╓г╔╓╔С╔╧╔х║╪╔К╓╧╓К╓Ё╓х╓Р╓╙╢╚╓А
+ ╓╥╓ч╓╧║ё╓╫╓Л╓г╓Б╓╥╡©╓╚лДбЙ╓╛╓╒╓Л╓п║╒dpkg-reconfigure ssh ╓Р╪б╧т╓╧╓К╓Ё
+ ╓х╓гюъдЙ╓Рйя╧╧╓╧╓К╓Ё╓х╓╛╓г╓╜╓ч╓╧║ё
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote
+ logins via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all
+ using ssh, then you can disable sshd here.
+Description-ja: sshd ╔╣║╪╔п╓Р╪б╧т╓╥╓ч╓╧╓╚?
+ ╓Ё╓н╔я╔ц╔╠║╪╔╦╓о║╒ssh ╔╞╔И╔╓╔╒╔С╔х╓х sshd ╔╣║╪╔п╓нн╬йЩ╓Р╢ч╓С╓г╓╓╓ч╓╧║ё
+ .
+ дл╬О║╒sshd ╔╩╔╜╔Е╔╒╔╥╔╖╔К╔╣║╪╔п╓о║╒ssh ╓Рмя╓╓╓©╔Й╔Б║╪╔х╓╚╓И╓н╔М╔╟╔╓╔С
+ ╓Р╡дг╫╓к╓╧╓К╓©╓А╓к╪б╧т╓╥╓ч╓╧║ё
+ .
+ ╓Б╓╥ ssh ╔╞╔И╔╓╔╒╔С╔х╓Р╩х╓ц╓ф╓Ё╓н╔ч╔╥╔С╓╚╓Иб╬╔ч╔╥╔С╓ь╓хюэбЁ╓╧╓К╓ю╓╠╓г
+ ╓г║╒╓Ё╓н╔ч╔╥╔С╓ь╓х ssh ╓Р╩х╓ц╓ф╔М╔╟╔╓╔С╓╥╓й╓╓╓н╓г╓╥╓©╓И║╒╓Ё╓Ё╓г sshd
+ ╓Р╪б╧т╓╥╓й╓╓╓г╓╙╓╜╓ч╓╧║ё
+
diff --git a/debian/templates.pt_BR b/debian/templates.pt_BR
new file mode 100644
index 000000000..2d0b3e1e7
--- /dev/null
+++ b/debian/templates.pt_BR
@@ -0,0 +1,181 @@
+Template: ssh/upgrade_to_openssh
+Type: boolean
+Description: Are you sure you want to upgrade to OpenSSH?
+ This version of ssh (a.k.a. OpenSSH) is supposed to be a 100% compatible
+ drop in replacement for the original (non-free) implemetation.
+ .
+ If you find that it is not, please report the problem as a bug.
+ .
+ You can still find the old version of ssh in the ssh-nonfree package
+ (although the only reason you are likely to want that is if you also
+ want to install the ssh2 package).
+ .
+ NOTE: If you're upgrading a machine remotely, via ssh, make sure you have at
+ least one other ssh session running as root, and once this is installed,
+ check that you can still log in (with a third session), before logging out.
+Description-pt_BR: VocЙ tem certeza que quer atualizar para o OpenSSH ?
+ Esta versЦo do ssh (tambИm conhecida como OpenSSH) И supostamente um
+ substituto 100% compatМvel para a implementaГЦo original (non-free).
+ .
+ Caso vocЙ ache que nЦo И, por favor reporte o problema como um bug.
+ .
+ VocЙ continuarА a encontrar a versЦo antiga do ssh no pacote ssh-nonfree
+ (embora a Зnica razЦo pela qual vocЙ queira isso И se vocЙ tambИm quer
+ instalar o pacote ssh2).
+ .
+ NOTA: Se vocЙ estА atualizando uma mАquina remotamente, via ssh,
+ certifique-se que vocЙ possui pelo menos outra sessЦo ssh executando como
+ root e, uma vez que o pacote esteja instalado, verifique se vocЙ continua
+ podendo se logar (com uma terceira sessЦo) antes de se desconectar
+ (logging out).
+
+Template: ssh/ancient_version
+Type: note
+Description: You are trying to upgrade from an ancient version of non-free ssh
+ This is bound to be using IDEA encryption for your identity files.
+ You should upgrade to a vaguely contemporary (1.2.15 or later) version of
+ non-free ssh, and then upgrade all your key files using ssh-keygen -u
+ before attempting to migrate to OpenSSH.
+ .
+ Alternatively, you could just forget about that, and generate new keys.
+Description-pt_BR: VocЙ estА tentando atualizar a partir de uma versЦo antiga do ssh non-free
+ Isto estА ligado a estar usando encriptaГЦo IDEA para seus arquivos de
+ identidade. VocЙ deverА atualizar para uma versЦo vagamente contemporБnea
+ (1.2.15 ou superior) do ssh non-free, e entЦo atualizar todos seus
+ arquivos de chaves usando ssh-keygen -u antes de tentar migrar para
+ OpenSSH.
+ .
+ Alternativamente, vocЙ poderia somente esquecer tudo isso e gerar
+ novas chaves.
+
+Template: ssh/use_old_init_script
+Type: boolean
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-pt_BR: VocЙ quer continuar (e arriscar matar sessУes ssh ativas) ?
+ A versЦo de /etc/init.d/ssh que vocЙ possui instalada estА prestes a
+ matar todas as instБncias sshd sendo executadas. Se vocЙ estА fazendo
+ esta atualizaГЦo atravИs de uma sessЦo ssh, isto seria uma Coisa
+ Ruim(tm).
+ .
+ VocЙ pode corrigir isto adicionando "--pidfile /var/run/sshd.pid" na
+ linha start-stop-daemon na seГЦo stop deste arquivo.
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either
+ in one of the configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-pt_BR: NOTA: Forwarding de X11 e Authorization desabilitados por padrЦo.
+ Por razТes de seguranГa, a versЦo Debian do ssh tem as opГУes ForwardX11
+ e ForwardAgent definidas como ``off'' por padrЦo.
+ .
+ VocЙ pode habilitar isso para servidores que vocЙ confia, ou em um dos
+ arquivos de configuraГЦo, ou com a opГЦo de linha de comando -X.
+ .
+ Maiores detalhes podem ser encontrados em
+ /usr/share/doc/ssh/README.Debian.
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that package.
+Description-pt_BR: Aviso: rsh-server estА instalado --- provavelmente nЦo И uma boa idИia
+ Possuir o rsh-server instalado minarА a seguranГa que vocЙ estava
+ provavelmente querendo obter instalando o ssh. Eu recomendaria a vocЙ
+ remover este pacote.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-pt_BR: Aviso: telnetd estА instalado --- provavelmente nЦo И uma boa idИia
+ Eu recomendaria a vocЙ ou remover o pacote telnetd (se vocЙ atualmente
+ nЦo precisa oferecer acesso telnet) ou instalar telnetd-ssl. Assim existe
+ pelo menos uma chance das sessУes telnet nЦo enviarem login/senha nЦo
+ encriptados e informaГУes de sessЦo atravИs da rede.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
+ OpenSSH can not handle this host key file, and I can't find the
+ ssh-keygen utility from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-pt_BR: Aviso: vocЙ deve criar uma nova host key
+ Existe uma antiga /etc/ssh/ssh_host_key, a qual И encriptada usando IDEA.
+ O OpenSSH nЦo pode gerenciar este arquivo host key e eu nЦo consigo
+ encontrar o utilitАrio ssh-keygen da antiga (non-free) instalaГЦo SSH.
+ .
+ VocЙ precisarА gerar uma nova host key.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: false
+Description: Do you want /usr/bin/ssh to be installed SUID root?
+ You have the option of installing the ssh client with the SUID bit set.
+ .
+ If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
+ authentication, but will not be able to use socks via the LD_PRELOAD
+ trick.  This is the traditional approach.
+ .
+ If you do not make ssh SUID, you will be able to use socks, but
+ Rhosts/RhostsRSA authentication will stop working, which may stop you
+ logging in to remote systems.  It will also mean that the source
+ port will be above 1024, which may confound firewall rules you've set up.
+ .
+ If in doubt, I suggest you install it without SUID.  If it causes
+ problems you can change your mind later by running:   dpkg-reconfigure ssh
+Description-pt_BR: VocЙ quer que /usr/bin/ssh seja instalado SUID root ?
+ VocЙ tem a opГЦo de instalar o cliente ssh com o bit SUID setado.
+ .
+ Se vocЙ fizer o ssh SUID, vocЙ conseguirА usar autenticaГЦo
+ Rhosts/RhostsRSA, mas nЦo serА capaz de usar socks atravИs do truque
+ LD_PRELOAD. Isto И o tradicional.
+ .
+ Se vocЙ nЦo fizer o ssh SUID, vocЙ poderА usar socks, mas a autenticaГЦo
+ Rhosts/RhostsRSA irА parar de funcionar, o que poderА lhe impedir de
+ logar em sistemas remotos. Isto significarА tambИm que a porta fonte
+ estarА acima de 1024, o que poderА confundir regras de firewall que vocЙ
+ tenha definido.
+ .
+ Caso esteja em dЗvida, eu sugiro a vocЙ instalar sem SUID. Se isso causar
+ problemas vocЙ pode mudar sua escolha posteriormente executando:
+ dpkg-reconfigure ssh.
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote
+ logins via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all
+ using ssh, then you can disable sshd here.
+Description-pt_BR: VocЙ quer executar o servidor sshd ?
+ Este pacote contИm ambos o cliente ssh e o servidor sshd.
+ .
+ Normalmente o sshd Secure Shell Server serА executado para permitir
+ logins remotos via ssh.
+ .
+ Se vocЙ estА interessado somente em usar o cliente ssh para conexУes
+ para fora desta mАquina, e nЦo quer logar na mesma usando ssh, entЦo vocЙ
+ pode desabilitar o sshd aqui.
diff --git a/debian/templates.ru b/debian/templates.ru
new file mode 100644
index 000000000..39038ff22
--- /dev/null
+++ b/debian/templates.ru
@@ -0,0 +1,207 @@
+Template: ssh/upgrade_to_openssh
+Type: boolean
+Description: Are you sure you want to upgrade to OpenSSH?
+ This version of ssh (a.k.a. OpenSSH) is supposed to be a 100% compatible
+ drop in replacement for the original (non-free) implemetation.
+ .
+ If you find that it is not, please report the problem as a bug.
+ .
+ You can still find the old version of ssh in the ssh-nonfree package
+ (although the only reason you are likely to want that is if you also
+ want to install the ssh2 package).
+ .
+ NOTE: If you're upgrading a machine remotely, via ssh, make sure you have at
+ least one other ssh session running as root, and once this is installed,
+ check that you can still log in (with a third session), before logging out.
+Description-ru: Вы уверены, что хотите обновить OpenSSH?
+ Эта версия ssh(он же OpenSSH) является 100%-совместимой с оригинальной
+ (несвободной) реализацией.
+ .
+ Если вы обнаружили различие, то, пожалуйста, сообщите об этой ошибке.
+ .
+ Вы  можете  по  прежнему  найти старую версию ssh в пакете ssh-nonfree
+ (хотя действительно необходимо его использовать только, если вы хотите
+ установить еще и пакет ssh2).
+ .
+ Примечание: Если вы удаленно обновляете машину через ssh, то убедитесь
+ что  как  минимум  еще  одна сессия ssh запущена от root, и как только
+ процесс  обновления  закончится,  убедитесь,  что  вы  сможете войти в
+ систему (установив третью сессию), перед тем как отсоединяться.
+
+Template: ssh/protocol2_default
+Type: note
+Description: SSH uses protocol 2 by default.
+ This version of SSH (unlike previous ones) uses ssh
+ protocol version 2 by default. The key file formats have changed
+ between the protocol versions, so your old key files will not be
+ useful. You may either pass the '-1' option to ssh to force it to use
+ the older protocol (and your old keys), or generate new keys. Protocol
+ version 2 is thought to be more secure, so this is the preferred
+ course of action. See README.Debian for a little more information
+ .
+ Also, due to problems with IPv4 and IPv6 interoperation, IPv4 is now
+ the default (this is a change from previous versions). Passing ssh the
+ -6 flag will cause IPv6 addresses to be used. Once the current issues
+ with using IPv6 on machines with IPv4 addresses have been solved, the
+ previous default will be restored
+Description-ru: SSH использует по умолчанию протокол версии 2.
+ Эта  версия  SSH  (в  отличии  от  предыдущих) использует по умолчанию
+ протокол  версии  2.  В  этой  версии  протокола изменен формат файлов
+ ключей,  так что ваши старые ключи станут бесполезными. Вы можете либо
+ указывать  опцию  '-1' для ssh, чтобы принудительно использовать более
+ старую  версию  протокола,  либо  сгенерируйте новый  ключи.  Протокол
+ версии  2  более защищенный, и поэтому предопределен по умолчанию. См.
+ подробности в файле README.Debian.
+ .
+ Также   из-за  проблем  взаимосоответствия  IPv4  и  IPv6,  сейчас  по
+ умолчанию  по  умолчанию  используется  IPv4  (в отличии от предыдущих
+ версий).  Чтобы использовать IPv6, надо задать флаг -6. Как только все
+ сложности  с  использованием  IPv6  на  машинах  с адресами IPv4 будут
+ решены, то прежнее поведение по умолчанию будет восстановлено.
+
+Template: ssh/ancient_version
+Type: note
+Description: You are trying to upgrade from an ancient version of non-free ssh
+ This is bound to be using IDEA encryption for your identity files.
+ You should upgrade to a vaguely contemporary (1.2.15 or later) version of
+ non-free ssh, and then upgrade all your key files using ssh-keygen -u
+ before attempting to migrate to OpenSSH.
+ .
+ Alternatively, you could just forget about that, and generate new keys.
+Description-ru: Вы пытаетесь обновить древнюю версию коммерческого ssh
+ Она  ограничена  использованием   шифрования  IDEA  для  ваших  файлов
+ идентификации. Рекомендуется обновить более современные версии (1.2.15
+ или  более  поздние) коммерческого ssh, и потом обновить ваши ключевые
+ файлы командой `ssh-keygen -u` перед попыткой перейти на OpenSSH.
+ .
+ Как вариант, можете забыть обо всем этом и сгенерировать новые ключи.
+
+Template: ssh/use_old_init_script
+Type: boolean
+Description: Do you want to continue (and risk killing active ssh sessions) ?
+ The version of /etc/init.d/ssh that you have installed, is likely to kill
+ all running sshd instances.  If you are doing this upgrade via an ssh
+ session, that would be a Bad Thing(tm).
+ .
+ You can fix this by adding "--pidfile /var/run/sshd.pid" to the
+ start-stop-daemon line in the stop section of the file.
+Description-ru: Вы хотите продолжить (рискуя потерять активные ssh-соединения)?
+ Версия  /etc/init.d/ssh,  которую  вы  устанавливаете, может убить все
+ запущенные  процессы  ssh.  Если вы осуществляете это обновление через
+ ssh сессию, то это Плохая Вещь (tm).
+ .
+ Это можно исправить добавлением "--pidfile /var/run/sshd.pid" в строке
+ start-stop-daemon в разделе stop этого файла.
+
+Template: ssh/forward_warning
+Type: note
+Description: NOTE: Forwarding of X11 and Authorization disabled by default.
+ For security reasons, the Debian version of ssh has ForwardX11 and
+ ForwardAgent set to ``off'' by default.
+ .
+ You can enable it for servers you trust, either
+ in one of the configuration files, or with the -X command line option.
+ .
+ More details can be found in /usr/share/doc/ssh/README.Debian
+Description-ru: ПРИМЕЧАНИЕ: Форвардинг X11 и Authorization запрещен по умолчанию.
+ По причинам безопасности, в версии для Debian ssh имеет ForwardX11 и
+ ForwardAgent установленными в ``off'' по умолчанию.
+ .
+ Вы можете разрешить их для серверов, которым доверяете либо в одном из
+ настроечных файлов, или параметром командной строки -X.
+ .
+ Дополнительую информацию можно найти в /usr/share/doc/ssh/README.Debian
+
+Template: ssh/insecure_rshd
+Type: note
+Description: Warning: rsh-server is installed --- probably not a good idea
+ having rsh-server installed undermines the security that you were probably
+ wanting to obtain by installing ssh.  I'd advise you to remove that package.
+Description-ru: Предупреждение: установлен rsh-server --- видимо, не очень хорошо
+ Установленный  rsh-server  снижает  безопасность,  которую вы вероятно
+ хотите повысить устанавливая ssh. Рекомендуется удалить этот пакет.
+
+Template: ssh/insecure_telnetd
+Type: note
+Description: Warning: telnetd is installed --- probably not a good idea
+ I'd advise you to either remove the telnetd package (if you don't actually
+ need to offer telnet access) or install telnetd-ssl so that there is at
+ least some chance that telnet sessions will not be sending unencrypted
+ login/password and session information over the network.
+Description-ru: Предупреждение: установлен telnetd --- видимо, не очень хорошо
+ Я рекомендовал бы вам удалить пакет telnetd (если вам действительно не
+ нужен доступ telnet) или установить  telnet-ssl,  чтобы  иметь хотя бы
+ возможность  не  передавать  по  сети  незашифрованные  имена и пароли
+ пользователей и прочую информацию в telnet-сессиях.
+
+Template: ssh/encrypted_host_key_but_no_keygen
+Type: note
+Description: Warning: you must create a new host key
+ There is an old /etc/ssh/ssh_host_key, which is IDEA encrypted.
+ OpenSSH can not handle this host key file, and I can't find the
+ ssh-keygen utility from the old (non-free) SSH installation.
+ .
+ You will need to generate a new host key.
+Description-ru: Предупреждение: вы должны создать новый ключ машины.
+ Есть старый /etc/ssh/ssh_host_key, который зашифрован IDEA. OpenSSH не
+ может  работать  с  этим  ключом  машины,  и  я  не могу найти утилиту 
+ ssh-keygen от старой (несвободной) инсталляции SSH.
+ .
+ Вам надо будет сгенерировать новый ключ хоста.
+
+Template: ssh/SUID_client
+Type: boolean
+Default: true
+Description: Do you want /usr/bin/ssh to be installed SUID root?
+ You have the option of installing the ssh client with the SUID bit set.
+ .
+ If you make ssh SUID, you will be able to use Rhosts/RhostsRSA
+ authentication, but will not be able to use socks via the LD_PRELOAD
+ trick.  This is the traditional approach.
+ .
+ If you do not make ssh SUID, you will be able to use socks, but
+ Rhosts/RhostsRSA authentication will stop working, which may stop you
+ logging in to remote systems.  It will also mean that the source
+ port will be above 1024, which may confound firewall rules you've set up.
+ .
+ If in doubt, I suggest you install it with SUID.  If it causes
+ problems you can change your mind later by running:   dpkg-reconfigure ssh 
+Description-ru: Хотите установить /usr/bin/ssh как SUID root?
+ Вы  имеете  возможность  установить /usr/bin/ssh с установленным битом
+ SUID.
+ .
+ Если  вы  делаете  ssh SUID, то вы сможете использовать аутентификацию
+ Rhosts/RhostsRSA,  но  не сможете использовать socks через LD_PRELOAD.
+ Это традиционное поведение.
+ .
+ Если  вы  сделаете ssh SUID, то вы сможете использовать socks, но зато
+ аутентификация  Rhosts/RhostsRSA  не будет работать, что может сделать
+ невозможным вашу регистрацию на удаленных системах. Также это означает
+ что номер источникового порта будет больше 1024, что может не нарушить
+ работу установленных вами правил файрвола.
+ .
+ Если вы не знаете, что решить, то рекомендуется установить его с битом
+ SUID. Если вы потом передумаете, то эту установку можно будет изменить
+ командой: "dpkg-reconfigure ssh".
+
+Template: ssh/run_sshd
+Type: boolean
+Default: true
+Description: Do you want to run the sshd server ?
+ This package contains both the ssh client, and the sshd server.
+ .
+ Normally the sshd Secure Shell Server will be run to allow remote
+ logins via ssh.
+ .
+ If you are only interested in using the ssh client for outbound
+ connections on this machine, and don't want to log into it at all
+ using ssh, then you can disable sshd here.
+Description-ru: Хотите запустить сервер sshd?
+ Этот пакет содержит и ssh-клиент, и ssh-сервер.
+ .
+ Обычно  sshd  Secure Shell Server  запускается  для удаленного входа в
+ регистрации в системе через ssh.
+ .
+ Если  вас  интересует  только  использование ssh-клиента для исходящих
+ соединений с  этой  машины, и вы  не хотите входить в ее систему через
+ ssh, то вы можете сейчас запретить sshd.