Messages/en.php - master - mikopbx/ModuleLdapSync

Messages/en.php
124 строки9 KB
Nikolai Beketov
feat: LDAPS/StartTLS, custom CA, test-bind button, PHP 8.4, sync fixes
23 апр 2026, 08:23
23 апр 2026, 08:23e025d61
<?php
return [
    'mo_ModuleModuleLdapSync' => 'Synchronization with LDAP/AD',
    'BreadcrumbModuleLdapSync' => 'Synchronization with LDAP/AD',
    'module_ldap_LdapServerConnectionHeader' => 'Domain controller connection settings',
    'module_ldap_TableColumnServerName' => 'Server address',
    'module_ldap_OrganizationalUnit' => 'Subdivision',
    'module_ldap_UserNameAttribute' => 'User\'s first and last name',
    'module_ldap_UserAccountControl' => 'Attribute where the user\'s lock status is stored',
    'module_ldap_LdapGetUsersButton' => 'Run request',
    'module_ldap_usersSyncResult' => 'Status',
    'module_ldap_UPDATED' => 'processed',
    /*
 * MikoPBX - free phone system for small business
 * Copyright © 2017-2023 Alexey Portnov and Nikolay Beketov
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along with this program.
 * If not, see <https://www.gnu.org/licenses/>.
 */
    'repModuleLdapSync' => 'Synchronization with LDAP/AD - %repesent%',
    'SubHeaderModuleLdapSync' => 'The module allows you to load users from a domain',
    'module_ldap_AddServer' => 'Add server',
    'module_ldap_AddServerShort' => 'Add',
    'module_ldap_NoAnyServers' => 'No servers configured',
    'module_ldap_BaseDN' => 'Domain root',
    'module_ldap_ldapType' => 'Server type',
    'module_ldap_LdapServerName' => 'Domain controller address',
    'module_ldap_LdapServerPort' => 'Port',
    'module_ldap_LdapAdminLogin' => 'Username and password with read/write access to the domain',
    'module_ldap_LdapBaseDN' => 'Domain root',
    'module_ldap_LdapPassword' => 'Password',
    'module_ldap_LdapAttributesHeader' => 'Attributes in the domain for matching with data in MikoPBX',
    'module_ldap_UserExtensionAttribute' => 'User extension number',
    'module_ldap_UserMobileAttribute' => 'Mobile phone',
    'module_ldap_UserEmailAttribute' => 'Email address',
    'module_ldap_UserAvatarAttribute' => 'Photo attribute',
    'module_ldap_UpdateAttributes' => 'Update data in the domain when changing it in MikoPBX (write rights required)',
    'module_ldap_LdapOrganizationalUnit' => 'Subdivision',
    'module_ldap_LdapUserFilter' => 'Additional user filter',
    'module_ldap_LdapCheckGetListHeader' => 'Test to get list of LDAP users',
    'module_ldap_LdapCheckGetUsersList' => 'Using the specified access parameters and filters, we will execute a request to LDAP/AD and receive a portion of 20 users for synchronization',
    'module_ldap_user_not_found' => 'The user does not have access to the domain, or the parameters specified are incorrect',
    'module_ldap_ValidateServerNameIsEmpty' => 'Domain controller address not filled',
    'module_ldap_ValidateServerPortIsEmpty' => 'Domain controller port not populated',
    'module_ldap_ValidateAdministrativeLoginIsEmpty' => 'Login for domain user is not filled',
    'module_ldap_ValidateAdministrativePasswordIsEmpty' => 'Password not filled for domain user',
    'module_ldap_ValidateBaseDNIsEmpty' => 'Domain root not filled',
    'module_ldap_LdapManualSyncHeader' => 'Manual sync',
    'module_ldap_LdapManualSyncManual' => 'When you click the button, a portion of 20 users will be synchronized between the specified domain controller and MikoPBX',
    'module_ldap_LdapManualSyncButton' => 'Synchronize data',
    'module_ldap_userHadChangesOnTheSide' => 'Updated',
    'module_ldap_OnPBXSide' => 'inside MikoPBX',
    'module_ldap_OnDomainSide' => 'in the domain',
    'module_ldap_SKIPPED' => 'skipped',
    'module_ldap_EnableAutoSync' => 'Enable scheduled synchronization',
    'module_ldap_ValidateUserNameAttributeIsEmpty' => 'The attribute with the username in the domain is not filled',
    'module_ldap_ValidateUserMobileAttributeIsEmpty' => 'The attribute with the user\'s mobile phone in the domain is not filled',
    'module_ldap_ValidateUserExtensionAttributeIsEmpty' => 'The attribute with the internal phone number of the user in the domain is not filled',
    'module_ldap_ValidateUserEmailAttributeIsEmpty' => 'The attribute with the user\'s e-mail in the domain is not filled',
    'module_ldap_ValidateUserAccountControlIsEmpty' => 'The attribute with the attribute of user activity in the domain is not filled',
    'module_ldap_TableColumnAutoSync' => 'Auto-sync',
    'module_ldap_PBX_UPDATE_CONFLICT' => 'PBX',
    'module_ldap_LDAP_UPDATE_CONFLICT' => 'LDAP/AD',
    'module_ldap_ConflictsTabHeader' => 'Synchronization Conflicts',
    'module_ldap_NoAnyConflicts' => 'No problems found',
    'module_ldap_deleteCurrentConflict' => 'Delete current entry, does not change data either in PBX or on LDAP/AD server side',
    'module_ldap_ConflictTime' => 'Date',
    'module_ldap_ConflictUserData' => 'Stored data',
    'module_ldap_ConflictSide' => 'Who refused?',
    'module_ldap_ConflictErrorMessages' => 'Reason for refusal',
    'module_ldap_CONFLICT' => 'conflict',
    'module_ldap_SyncTabHeader' => 'Synchronization and conflicts',
    'module_ldap_TabAttributes' => 'Synchronization fields',
    'module_ldap_DeleteAllConflicts' => 'Clear all conflicts',
    'module_ldap_UpdateAttributesMessage' => 'When changing data in MikoPBX, the domain will update: internal number, mobile number, email, avatar, SIP password',
    'module_ldap_UserPasswordAttribute' => 'SIP Password',
    'module_ldap_UseTLS' => 'TLS/SSL',
    'module_ldap_UserName' => 'Username',
    'module_ldap_UserNumber' => 'Internal number',
    'module_ldap_findExtension' => 'Find in user list',
    'module_ldap_DeletedUsersHeader' => 'Disabled Employees in LDAP/AD',
    'module_ldap_DeletedUsersEmpty' => 'No disabled employees',
    'module_ldap_UserEmail' => 'Email',
    'module_ldap_VerifyCertificate' => 'Validate server certificate',
    'module_ldap_CaCertificate' => 'CA certificate bundle (PEM)',
    'module_ldap_CaCertificateHint' => 'Paste the PEM-encoded CA certificate used to sign the LDAP server. Multiple certificates (intermediate + root) may be concatenated. Leave empty to use the system trust store.',
    'module_ldap_InsecureTlsWarning' => 'LDAPS is enabled but certificate validation is off — traffic is encrypted yet the server identity is not verified. Turn on validation and provide the CA certificate for a secure setup.',
    'module_ldap_InvalidPemCert' => 'The provided CA certificate is not a valid PEM block.',
    'module_ldap_TestBindHeader' => 'Test LDAP bind',
    'module_ldap_TestBindHint' => 'Verifies that the server is reachable and the administrative credentials above authenticate successfully. No data is read or modified.',
    'module_ldap_TestBindButton' => 'Test bind',
    'module_ldap_TestBindSuccess' => 'LDAP bind successful.',
    'module_ldap_TestBindFailure' => 'LDAP bind failed',
    'module_ldap_TabCertificate' => 'Certificate',
    'module_ldap_tt_serverName_header' => 'Transport modes',
    'module_ldap_tt_serverName_plain' => 'unencrypted LDAP, port 389.',
    'module_ldap_tt_serverName_starttls' => 'LDAP on port 389 upgraded to TLS.',
    'module_ldap_tt_serverName_ldaps' => 'LDAP over TLS from the first byte, port 636.',
    'module_ldap_tt_adminLogin_header' => 'Bind login format',
    'module_ldap_tt_adminLogin_desc' => 'Active Directory accepts any of these forms for the bind login:',
    'module_ldap_tt_adminLogin_note' => 'LDAPS proxies in a DMZ often reject short forms with "Invalid DN syntax" — use the full DN in that case.',
    'module_ldap_tt_verify_header' => 'Certificate validation',
    'module_ldap_tt_verify_desc' => 'When enabled, self-signed, expired or CA-mismatched certificates are rejected. Provide the signing CA on the Certificate tab.',
    'module_ldap_tt_verify_warning_header' => 'Insecure without CA',
    'module_ldap_tt_verify_warning' => 'With validation off, the connection is still encrypted but an attacker with network access can impersonate the LDAP server.',
    'module_ldap_tt_updateAttr_header' => 'Two-way sync',
    'module_ldap_tt_updateAttr_desc' => 'When on, changes made in MikoPBX are written back to the LDAP directory. The following user attributes get propagated:',
    'module_ldap_tt_updateAttr_extension' => 'internal extension number',
    'module_ldap_tt_updateAttr_mobile' => 'mobile phone',
    'module_ldap_tt_updateAttr_email' => 'email address',
    'module_ldap_tt_updateAttr_avatar' => 'avatar photo',
    'module_ldap_tt_updateAttr_sip' => 'SIP password',
    'module_ldap_tt_updateAttr_note' => 'The bind account must have write permission on the matching attributes.',
];