overmind
/
matrix-docker-ansible-deploy
镜像自地址 https://github.com/spantaleev/matrix-docker-ansible-deploy
1
0
派生 0
代码 工单 0 版本发布 0 百科 动态
Matrix Docker Ansible eploy
您最多选择25个主题 主题必须以字母或数字开头，可以包含连字符 (-)，并且长度不得超过35个字符
8820 提交
5 分支
409 MiB
 
 
 
目录树: c51e771d1a
分支列表 标签列表
${ item.name }
创建分支 ${ searchTerm }
从 'c51e771d1a'
${ noResults }
matrix-docker-ansible-deploy/i18n/locales/bg/LC_MESSAGES/docs/configuring-playbook-matrix...

1046 行
43 KiB
原始文件 Blame 文件历史 

  1. # SOME DESCRIPTIVE TITLE.

  2. # Copyright (C) 2018-2024, Slavi Pantaleev, Aine Etke, MDAD community

  3. # members

  4. # This file is distributed under the same license as the

  5. # matrix-docker-ansible-deploy package.

  6. # FIRST AUTHOR <EMAIL@ADDRESS>, 2024.

  7. #

  8. #, fuzzy

  9. msgid ""

  10. msgstr ""

  11. "Project-Id-Version: matrix-docker-ansible-deploy \n"

  12. "Report-Msgid-Bugs-To: \n"

  13. "POT-Creation-Date: 2024-12-16 12:05+0900\n"

  14. "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"

  15. "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"

  16. "Language: bg\n"

  17. "Language-Team: bg <LL@li.org>\n"

  18. "Plural-Forms: nplurals=2; plural=(n != 1);\n"

  19. "MIME-Version: 1.0\n"

  20. "Content-Type: text/plain; charset=utf-8\n"

  21. "Content-Transfer-Encoding: 8bit\n"

  22. "Generated-By: Babel 2.16.0\n"

  23. 

  24. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:1

  25. msgid "Setting up Matrix Authentication Service (optional)"

  26. msgstr ""

  27. 

  28. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:3

  29. msgid ""

  30. "This playbook can install and configure [Matrix Authentication "

  31. "Service](https://github.com/element-hq/matrix-authentication-service/) "

  32. "(MAS) - a service operating alongside your existing [Synapse"

  33. "](./configuring-playbook-synapse.md) homeserver and providing [better "

  34. "authentication, session management and permissions in "

  35. "Matrix](https://matrix.org/blog/2023/09/better-auth/)."

  36. msgstr ""

  37. 

  38. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:5

  39. msgid ""

  40. "Matrix Authentication Service is an implementation of [MSC3861: Next-"

  41. "generation auth for Matrix, based on OAuth 2.0/OIDC](https://github.com"

  42. "/matrix-org/matrix-spec-proposals/pull/3861) and still work in progress, "

  43. "tracked at the [areweoidcyet.com](https://areweoidcyet.com/) website."

  44. msgstr ""

  45. 

  46. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:7

  47. msgid ""

  48. "**Before going through with starting to use Matrix Authentication "

  49. "Service**, make sure to read:"

  50. msgstr ""

  51. 

  52. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:9

  53. msgid ""

  54. "the [Reasons to use Matrix Authentication Service](#reasons-to-use-"

  55. "matrix-authentication-service) section below"

  56. msgstr ""

  57. 

  58. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:10

  59. msgid "the [Expectations](#expectations) section below"

  60. msgstr ""

  61. 

  62. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:11

  63. msgid "the [FAQ section on areweoidcyet.com](https://areweoidcyet.com/#faqs)"

  64. msgstr ""

  65. 

  66. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:13

  67. msgid ""

  68. "**If you've already been using Synapse** and have user accounts in its "

  69. "database, you can [migrate to Matrix Authentication Service](#migrating-"

  70. "an-existing-synapse-homeserver-to-matrix-authentication-service)."

  71. msgstr ""

  72. 

  73. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:15

  74. msgid "Reasons to use Matrix Authentication Service"

  75. msgstr ""

  76. 

  77. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:17

  78. msgid ""

  79. "You may be wondering whether you should make the switch to Matrix "

  80. "Authentication Service (MAS) or keep using your existing authentication "

  81. "flow via Synapse (password-based or [OIDC](./configuring-playbook-"

  82. "synapse.md#synapse--openid-connect-for-single-sign-on)-enabled)."

  83. msgstr ""

  84. 

  85. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:19

  86. msgid ""

  87. "Matrix Authentication Service is **still an experimental service** and "

  88. "**not a default** for this Ansible playbook."

  89. msgstr ""

  90. 

  91. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:21

  92. msgid ""

  93. "The [Expectations](#expectations) section contains a list of what works "

  94. "and what doesn't (**some services don't work with MAS yet**), as well as "

  95. "the **relative irreversability** of the migration process."

  96. msgstr ""

  97. 

  98. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:23

  99. msgid ""

  100. "Below, we'll try to **highlight some potential reasons for switching** to"

  101. " Matrix Authentication Service:"

  102. msgstr ""

  103. 

  104. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:25

  105. msgid ""

  106. "To use SSO in [Element X](https://element.io/blog/element-x-ignition/). "

  107. "The old [Synapse OIDC](./configuring-playbook-synapse.md#synapse--openid-"

  108. "connect-for-single-sign-on) login flow is only supported in old Element "

  109. "clients and will not be supported in Element X. Element X will only "

  110. "support the new SSO-based login flow provided by MAS, so if you want to "

  111. "use SSO with Element X, you will need to switch to MAS."

  112. msgstr ""

  113. 

  114. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:27

  115. msgid ""

  116. "To help drive adoption of the \"Next-generation auth for Matrix\" by "

  117. "switching to what's ultimately coming anyway"

  118. msgstr ""

  119. 

  120. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:29

  121. msgid ""

  122. "To help discover (and potentially fix) MAS integration issues with this "

  123. "Ansible playbook"

  124. msgstr ""

  125. 

  126. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:31

  127. msgid ""

  128. "To help discover (and potentially fix) MAS integration issues with "

  129. "various other Matrix components (bridges, bots, clients, etc.)"

  130. msgstr ""

  131. 

  132. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:33

  133. msgid ""

  134. "To reap some of the security benefits that Matrix Authentication Service "

  135. "offers, as outlined in the [Better authentication, session management and"

  136. " permissions in Matrix](https://matrix.org/blog/2023/09/better-auth/) "

  137. "article."

  138. msgstr ""

  139. 

  140. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:35

  141. msgid "Prerequisites"

  142. msgstr ""

  143. 

  144. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:37

  145. msgid ""

  146. "⚠️ the [Synapse](configuring-playbook-synapse.md) homeserver "

  147. "implementation (which is the default for this playbook). Other homeserver"

  148. " implementations ([Dendrite](./configuring-playbook-dendrite.md), "

  149. "[Conduit](./configuring-playbook-conduit.md), etc.) do not support "

  150. "integrating wtih Matrix Authentication Service yet."

  151. msgstr ""

  152. 

  153. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:39

  154. msgid ""

  155. "⚠️ **email sending** configured (see [Adjusting email-sending settings"

  156. "](./configuring-playbook-email.md)), because **Matrix Authentication "

  157. "Service [still insists](https://github.com/element-hq/matrix-"

  158. "authentication-service/issues/1505) on having a verified email address "

  159. "for each user** going through the new SSO-based login flow. It's also "

  160. "possible to [work around email deliverability issues](#working-around-"

  161. "email-deliverability-issues) if your email configuration is not working."

  162. msgstr ""

  163. 

  164. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:41

  165. msgid ""

  166. "❌ **disabling all password providers** for Synapse (things like [shared-"

  167. "secret-auth](./configuring-playbook-shared-secret-auth.md), [rest-auth"

  168. "](./configuring-playbook-rest-auth.md), [LDAP auth](./configuring-"

  169. "playbook-ldap-auth.md), etc.) More details about this are available in "

  170. "the [Expectations](#expectations) section below."

  171. msgstr ""

  172. 

  173. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:43

  174. msgid "Expectations"

  175. msgstr ""

  176. 

  177. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:45

  178. msgid ""

  179. "This section details what you can expect when switching to the Matrix "

  180. "Authentication Service (MAS)."

  181. msgstr ""

  182. 

  183. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:47

  184. msgid ""

  185. "❌ **Synapse password providers will need to be disabled**. You can no "

  186. "longer use [shared-secret-auth](./configuring-playbook-shared-secret-"

  187. "auth.md), [rest-auth](./configuring-playbook-rest-auth.md), [LDAP auth"

  188. "](./configuring-playbook-ldap-auth.md), etc. When the authentication flow"

  189. " is handled by MAS (not by Synapse anymore), it doesn't make sense to "

  190. "extend the Synapse authentication flow with additional modules. Many "

  191. "bridges used to rely on shared-secret-auth for doing double-puppeting "

  192. "(impersonating other users), but most (at least the mautrix bridges) "

  193. "nowadays use [Appservice Double Puppet](./configuring-playbook-"

  194. "appservice-double-puppet.md) as a better alternative. Older/maintained "

  195. "bridges may still rely on shared-secret-auth, as do other services like "

  196. "[matrix-corporal](./configuring-playbook-matrix-corporal.md)."

  197. msgstr ""

  198. 

  199. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:49

  200. msgid ""

  201. "❌ Certain **tools like [synapse-admin](./configuring-playbook-synapse-"

  202. "admin.md) do not have full compatibility with MAS yet**. synapse-admin "

  203. "already supports [login with access token](https://github.com/etkecc"

  204. "/synapse-admin/pull/58), browsing users (which Synapse will internally "

  205. "fetch from MAS) and updating user avatars. However, editing users "

  206. "(passwords, etc.) now needs to happen directly against MAS using the [MAS"

  207. " Admin API](https://element-hq.github.io/matrix-authentication-"

  208. "service/api/index.html), which synapse-admin cannot interact with yet."

  209. msgstr ""

  210. 

  211. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:51

  212. msgid "❌ **Some services experience issues when authenticating via MAS**:"

  213. msgstr ""

  214. 

  215. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:53

  216. msgid ""

  217. "[Postmoogle](./configuring-playbook-bridge-postmoogle.md) works the first"

  218. " time around, but it consistently fails after restarting:"

  219. msgstr ""

  220. 

  221. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:55

  222. msgid ""

  223. "cannot initialize matrix bot error=\"olm account is marked as shared, "

  224. "keys seem to have disappeared from the server\""

  225. msgstr ""

  226. 

  227. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:57

  228. msgid ""

  229. "[matrix-reminder-bot](./configuring-playbook-bot-matrix-reminder-bot.md) "

  230. "fails to start (see [element-hq/matrix-authentication-"

  231. "service#3439](https://github.com/element-hq/matrix-authentication-"

  232. "service/issues/3439))"

  233. msgstr ""

  234. 

  235. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:58

  236. msgid "Other services may be similarly affected. This list is not exhaustive."

  237. msgstr ""

  238. 

  239. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:60

  240. msgid ""

  241. "❌ **Encrypted appservices** do not work yet (related to "

  242. "[MSC4190](https://github.com/matrix-org/matrix-spec-proposals/pull/4190) "

  243. "and [PR 17705 for Synapse](https://github.com/element-"

  244. "hq/synapse/pull/17705)), so all bridges/bots that rely on encryption will"

  245. " fail to start (see [this issue](https://github.com/spantaleev/matrix-"

  246. "docker-ansible-deploy/issues/3658) for Hookshot). You can use these "

  247. "bridges/bots only if you **keep end-to-bridge encryption disabled** "

  248. "(which is the default setting)."

  249. msgstr ""

  250. 

  251. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:62

  252. msgid ""

  253. "⚠️ **You will need to have email sending configured** (see [Adjusting "

  254. "email-sending settings](./configuring-playbook-email.md)), because "

  255. "**Matrix Authentication Service [still insists](https://github.com"

  256. "/element-hq/matrix-authentication-service/issues/1505) on having a "

  257. "verified email address for each user** going through the new SSO-based "

  258. "login flow. It's also possible to [work around email deliverability "

  259. "issues](#working-around-email-deliverability-issues) if your email "

  260. "configuration is not working."

  261. msgstr ""

  262. 

  263. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:64

  264. msgid ""

  265. "⚠️ [Migrating an existing Synapse homeserver to Matrix Authentication "

  266. "Service](#migrating-an-existing-synapse-homeserver-to-matrix-"

  267. "authentication-service) is **possible**, but requires **some playbook-"

  268. "assisted manual work**. Migration is **reversible with no or minor issues"

  269. " if done quickly enough**, but as users start logging in (creating new "

  270. "login sessions) via the new MAS setup, disabling MAS and reverting back "

  271. "to the Synapse user database will cause these new sessions to break."

  272. msgstr ""

  273. 

  274. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:66

  275. msgid ""

  276. "⚠️ [Migrating an existing Synapse homeserver to Matrix Authentication "

  277. "Service](#migrating-an-existing-synapse-homeserver-to-matrix-"

  278. "authentication-service) does not currently seem to preserve the \"admin\""

  279. " flag for users (as found in the Synapse database). All users are "

  280. "imported as non-admin - see [element-hq/matrix-authentication-"

  281. "service#3440](https://github.com/element-hq/matrix-authentication-"

  282. "service/issues/3440). You may need update the Matrix Authentication "

  283. "Service's database manually and adjust the `can_request_admin` column in "

  284. "the `users` table to `true` for users that need to be administrators "

  285. "(e.g. `UPDATE users SET can_request_admin = true WHERE username = "

  286. "'someone';`)"

  287. msgstr ""

  288. 

  289. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:68

  290. msgid ""

  291. "⚠️ Delegating user authentication to MAS causes **your Synapse server to "

  292. "be completely dependant on one more service** for its operations. MAS is "

  293. "quick & lightweight and should be stable enough already, but this is "

  294. "something to keep in mind when making the switch."

  295. msgstr ""

  296. 

  297. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:70

  298. msgid ""

  299. "⚠️ If you've got [OIDC configured in Synapse](./configuring-playbook-"

  300. "synapse.md#synapse--openid-connect-for-single-sign-on), you will need to "

  301. "migrate your OIDC configuration to MAS by adding an [Upstream OAuth2 "

  302. "configuration](#upstream-oauth2-configuration)."

  303. msgstr ""

  304. 

  305. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:72

  306. msgid ""

  307. "⚠️ A [compatibility layer](https://element-hq.github.io/matrix-"

  308. "authentication-service/setup/homeserver.html#set-up-the-compatibility-"

  309. "layer) is installed - all `/_matrix/client/*/login` (etc.) requests will "

  310. "be routed to MAS instead of going to the homeserver. This is done both "

  311. "publicly (e.g. `https://matrix.example.com/_matrix/client/*/login`) and "

  312. "on the internal Traefik entrypoint (e.g. `https://matrix-"

  313. "traefik:8008/_matrix/client/*/login`) which helps addon services reach "

  314. "the homeserver's Client-Server API. You typically don't need to do "

  315. "anything to make this work, but it's good to be aware of it, especially "

  316. "if you have a [custom webserver setup](./configuring-playbook-own-"

  317. "webserver.md)."

  318. msgstr ""

  319. 

  320. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:74

  321. msgid ""

  322. "✅ Your **existing login sessions will continue to work** (you won't get "

  323. "logged out). Migration will require a bit of manual work and minutes of "

  324. "downtime, but it's not too bad."

  325. msgstr ""

  326. 

  327. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:76

  328. msgid ""

  329. "✅ Various clients ([Cinny](./configuring-playbook-client-cinny.md), "

  330. "[Element Web](./configuring-playbook-client-element-web.md), Element X, "

  331. "FluffyChat) will be able to use the **new SSO-based login flow** provided"

  332. " by Matrix Authentication Service"

  333. msgstr ""

  334. 

  335. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:78

  336. msgid ""

  337. "✅ The **old login flow** (called `m.login.password`) **will still "

  338. "continue to work**, so clients (old Element Web, etc.) and bridges/bots "

  339. "that don't support the new OIDC-based login flow will still work. Going "

  340. "through the old login flow does not require users to have a verified "

  341. "email address, as [is the case](https://github.com/element-hq/matrix-"

  342. "authentication-service/issues/1505) for the new SSO-based login flow."

  343. msgstr ""

  344. 

  345. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:80

  346. msgid ""

  347. "✅ [Registering users](./registering-users.md) via **the playbook's "

  348. "`register-user` tag remains unchanged**. The playbook automatically does "

  349. "the right thing regardless of homeserver implementation (Synapse, "

  350. "Dendrite, etc.) and whether MAS is enabled or not. When MAS is enabled, "

  351. "the playbook will forward user-registration requests to MAS. Registering "

  352. "users via the command-line is no longer done via the "

  353. "`/matrix/synapse/bin/register` script, but via `/matrix/matrix-"

  354. "authentication-service/bin/register-user`."

  355. msgstr ""

  356. 

  357. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:82

  358. msgid ""

  359. "✅ Users that are prepared by the playbook (for bots, bridges, etc.) will "

  360. "continue to be registered automatically as expected. The playbook "

  361. "automatically does the right thing regardless of homeserver "

  362. "implementation (Synapse, Dendrite, etc.) and whether MAS is enabled or "

  363. "not. When MAS is enabled, the playbook will forward user-registration "

  364. "requests to MAS."

  365. msgstr ""

  366. 

  367. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:84

  368. msgid "Installation flows"

  369. msgstr ""

  370. 

  371. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:86

  372. msgid "New homeserver"

  373. msgstr ""

  374. 

  375. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:88

  376. msgid ""

  377. "For new homeservers (which don't have any users in their Synapse database"

  378. " yet), follow the [Adjusting the playbook configuration](#adjusting-the-"

  379. "playbook-configuration) instructions and then proceed with "

  380. "[Installing](#installing)."

  381. msgstr ""

  382. 

  383. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:90

  384. msgid "Existing homeserver"

  385. msgstr ""

  386. 

  387. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:92

  388. msgid ""

  389. "Other homeserver implementations ([Dendrite](./configuring-playbook-"

  390. "dendrite.md), [Conduit](./configuring-playbook-conduit.md), etc.) do not "

  391. "support integrating wtih Matrix Authentication Service yet."

  392. msgstr ""

  393. 

  394. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:94

  395. msgid "For existing Synapse homeservers:"

  396. msgstr ""

  397. 

  398. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:96

  399. msgid ""

  400. "when following the [Adjusting the playbook configuration](#adjusting-the-"

  401. "playbook-configuration) instructions, make sure to **disable the "

  402. "integration between Synapse and MAS** by **uncommenting** the "

  403. "`matrix_authentication_service_migration_in_progress: true` line as "

  404. "described in the [Marking an existing homeserver for migration](#marking-"

  405. "an-existing-homeserver-for-migration) section below."

  406. msgstr ""

  407. 

  408. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:98

  409. msgid ""

  410. "then follow the [Migrating an existing Synapse homeserver to Matrix "

  411. "Authentication Service](#migrating-an-existing-synapse-homeserver-to-"

  412. "matrix-authentication-service) instructions to perform the installation "

  413. "and migration"

  414. msgstr ""

  415. 

  416. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:100

  417. msgid "Adjusting the playbook configuration"

  418. msgstr ""

  419. 

  420. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:102

  421. msgid ""

  422. "To enable Matrix Authentication Service, add the following configuration "

  423. "to your `inventory/host_vars/matrix.example.com/vars.yml` file:"

  424. msgstr ""

  425. 

  426. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:116

  427. msgid ""

  428. "In the sub-sections that follow, we'll cover some additional "

  429. "configuration options that you may wish to adjust."

  430. msgstr ""

  431. 

  432. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:118

  433. msgid ""

  434. "There are many other configuration options available. Consult the "

  435. "[`defaults/main.yml` file](../roles/custom/matrix-authentication-"

  436. "service/defaults/main.yml) in the [matrix-authentication-service "

  437. "role](../roles/custom/matrix-authentication-service/) to discover them."

  438. msgstr ""

  439. 

  440. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:120

  441. msgid "Adjusting the Matrix Authentication Service URL"

  442. msgstr ""

  443. 

  444. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:122

  445. msgid ""

  446. "By default, this playbook installs the Matrix Authentication Service on "

  447. "the `matrix.` subdomain, at the `/auth` path "

  448. "(https://matrix.example.com/auth). This makes it easy to install it, "

  449. "because it **doesn't require additional DNS records to be set up**. If "

  450. "that's okay, you can skip this section."

  451. msgstr ""

  452. 

  453. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:124

  454. msgid ""

  455. "By tweaking the `matrix_authentication_service_hostname` and "

  456. "`matrix_authentication_service_path_prefix` variables, you can easily "

  457. "make the service available at a **different hostname and/or path** than "

  458. "the default one."

  459. msgstr ""

  460. 

  461. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:126

  462. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:149

  463. msgid ""

  464. "Example additional configuration for your "

  465. "`inventory/host_vars/matrix.example.com/vars.yml` file:"

  466. msgstr ""

  467. 

  468. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:134

  469. msgid "Marking an existing homeserver for migration"

  470. msgstr ""

  471. 

  472. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:136

  473. msgid ""

  474. "The [configuration above](#adjusting-the-playbook-configuration) "

  475. "instructs existing users wishing to migrate to add "

  476. "`matrix_authentication_service_migration_in_progress: true` to their "

  477. "configuration."

  478. msgstr ""

  479. 

  480. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:138

  481. msgid ""

  482. "This is done temporarily. The migration steps are described in more "

  483. "detail in the [Migrating an existing Synapse homeserver to Matrix "

  484. "Authentication Service](#migrating-an-existing-synapse-homeserver-to-"

  485. "matrix-authentication-service) section below."

  486. msgstr ""

  487. 

  488. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:140

  489. msgid "Upstream OAuth2 configuration"

  490. msgstr ""

  491. 

  492. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:142

  493. msgid ""

  494. "To make Matrix Authentication Service delegate to an existing upstream "

  495. "OAuth 2.0/OIDC provider, you can use its [`upstream_oauth2.providers` "

  496. "setting](https://element-hq.github.io/matrix-authentication-"

  497. "service/reference/configuration.html#upstream_oauth2providers)."

  498. msgstr ""

  499. 

  500. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:144

  501. msgid ""

  502. "The playbook exposes a "

  503. "`matrix_authentication_service_config_upstream_oauth2_providers` variable"

  504. " for controlling this setting."

  505. msgstr ""

  506. 

  507. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:261

  508. msgid ""

  509. "💡 Refer to the [`upstream_oauth2.providers` setting](https://element-"

  510. "hq.github.io/matrix-authentication-"

  511. "service/reference/configuration.html#upstream_oauth2providers) for the "

  512. "most up-to-date schema and example for providers. The value shown above "

  513. "here may be out of date."

  514. msgstr ""

  515. 

  516. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:263

  517. msgid ""

  518. "⚠️ The syntax for existing [OIDC providers configured in Synapse"

  519. "](./configuring-playbook-synapse.md#synapse--openid-connect-for-single-"

  520. "sign-on) is slightly different, so you will need to adjust your "

  521. "configuration when switching from Synapse OIDC to MAS upstream OAuth2."

  522. msgstr ""

  523. 

  524. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:265

  525. msgid ""

  526. "⚠️ When [migrating an existing homeserver](#migrating-an-existing-"

  527. "synapse-homeserver-to-matrix-authentication-service) which contains OIDC-"

  528. "sourced users, you will need to:"

  529. msgstr ""

  530. 

  531. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:267

  532. msgid ""

  533. "[Configure upstream OIDC provider mapping for syn2mas](#configuring-"

  534. "upstream-oidc-provider-mapping-for-syn2mas)"

  535. msgstr ""

  536. 

  537. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:268

  538. msgid ""

  539. "go through the [migrating an existing homeserver](#migrating-an-existing-"

  540. "synapse-homeserver-to-matrix-authentication-service) process"

  541. msgstr ""

  542. 

  543. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:269

  544. msgid ""

  545. "remove all Synapse OIDC-related configuration (`matrix_synapse_oidc_*`) "

  546. "to prevent it being in conflict with the MAS OIDC configuration"

  547. msgstr ""

  548. 

  549. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:271

  550. msgid "Adjusting DNS records"

  551. msgstr ""

  552. 

  553. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:273

  554. msgid ""

  555. "If you've changed the default hostname, **you may need to adjust your "

  556. "DNS** records to point the Matrix Authentication Service domain to the "

  557. "Matrix server."

  558. msgstr ""

  559. 

  560. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:275

  561. msgid "See [Configuring DNS](configuring-dns.md) for details about DNS changes."

  562. msgstr ""

  563. 

  564. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:277

  565. msgid ""

  566. "If you've decided to use the default hostname, you won't need to do any "

  567. "extra DNS configuration."

  568. msgstr ""

  569. 

  570. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:279

  571. msgid "Installing"

  572. msgstr ""

  573. 

  574. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:281

  575. msgid ""

  576. "Now that you've [adjusted the playbook configuration](#adjusting-the-"

  577. "playbook-configuration) and [your DNS records](#adjusting-dns-records), "

  578. "you can run the playbook with [playbook tags](playbook-tags.md) as below:"

  579. msgstr ""

  580. 

  581. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:288

  582. msgid "**Notes**:"

  583. msgstr ""

  584. 

  585. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:290

  586. msgid ""

  587. "The shortcut commands with the [`just` program](just.md) are also "

  588. "available: `just install-all` or `just setup-all`"

  589. msgstr ""

  590. 

  591. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:292

  592. msgid ""

  593. "`just install-all` is useful for maintaining your setup quickly ([2x-5x "

  594. "faster](../CHANGELOG.md#2x-5x-performance-improvements-in-playbook-"

  595. "runtime) than `just setup-all`) when its components remain unchanged. If "

  596. "you adjust your `vars.yml` to remove other components, you'd need to run "

  597. "`just setup-all`, or these components will still remain installed. Note "

  598. "these shortcuts run the `ensure-matrix-users-created` tag too."

  599. msgstr ""

  600. 

  601. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:294

  602. msgid ""

  603. "If you're in the process of migrating an existing Synapse homeserver to "

  604. "MAS, you should now follow the rest of the steps in the [Migrating an "

  605. "existing Synapse homeserver to Matrix Authentication Service](#migrating-"

  606. "an-existing-synapse-homeserver-to-matrix-authentication-service) guide."

  607. msgstr ""

  608. 

  609. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:296

  610. msgid ""

  611. "💡 After installation, you should [verify that Matrix Authentication "

  612. "Service is installed correctly](#verify-that-matrix-authentication-"

  613. "service-is-installed-correctly)."

  614. msgstr ""

  615. 

  616. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:298

  617. msgid "Migrating an existing Synapse homeserver to Matrix Authentication Service"

  618. msgstr ""

  619. 

  620. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:300

  621. msgid ""

  622. "Our migration guide is loosely based on the upstream [Migrating an "

  623. "existing homeserver](https://element-hq.github.io/matrix-authentication-"

  624. "service/setup/migration.html) guide."

  625. msgstr ""

  626. 

  627. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:302

  628. msgid ""

  629. "Migration is done via a tool called `syn2mas`, which the playbook could "

  630. "run for you (in a container)."

  631. msgstr ""

  632. 

  633. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:304

  634. msgid "The installation + migration steps are like this:"

  635. msgstr ""

  636. 

  637. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:306

  638. msgid ""

  639. "[Adjust your configuration](#adjusting-the-playbook-configuration) to "

  640. "**disable the integration between the homeserver and MAS**. This is done "

  641. "by **uncommenting** the "

  642. "`matrix_authentication_service_migration_in_progress: true` line."

  643. msgstr ""

  644. 

  645. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:308

  646. msgid "Perform the initial [installation](#installing). At this point:"

  647. msgstr ""

  648. 

  649. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:310

  650. msgid ""

  651. "Matrix Authentication Service will be installed. Its database will be "

  652. "empty, so it cannot validate existing access tokens or authentication "

  653. "users yet."

  654. msgstr ""

  655. 

  656. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:312

  657. msgid ""

  658. "The homeserver will still continue to use its local database for "

  659. "validating existing access tokens."

  660. msgstr ""

  661. 

  662. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:314

  663. msgid ""

  664. "Various [compatibility layer URLs](https://element-hq.github.io/matrix-"

  665. "authentication-service/setup/homeserver.html#set-up-the-compatibility-"

  666. "layer) are not yet installed. New login sessions will still be forwarded "

  667. "to the homeserver, which is capable of completing them."

  668. msgstr ""

  669. 

  670. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:316

  671. msgid ""

  672. "The `matrix-user-creator` role would be suppressed, so that it doesn't "

  673. "automatically attempt to create users (for bots, etc.) in the MAS "

  674. "database. These user accounts likely already exist in Synapse's user "

  675. "database and could be migrated over (via syn2mas, as per the steps "

  676. "below), so creating them in the MAS database would have been unnecessary "

  677. "and potentially problematic (conflicts during the syn2mas migration)."

  678. msgstr ""

  679. 

  680. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:318

  681. msgid ""

  682. "Consider taking a full [backup of your Postgres database](./maintenance-"

  683. "postgres.md#backing-up-postgresql). This is done just in case. The "

  684. "**syn2mas migration tool does not delete any data**, so it should be "

  685. "possible to revert to your previous setup by merely disabling MAS and re-"

  686. "running the playbook (no need to restore a Postgres backup). However, do "

  687. "note that as users start logging in (creating new login sessions) via the"

  688. " new MAS setup, disabling MAS and reverting back to the Synapse user "

  689. "database will cause these new sessions to break."

  690. msgstr ""

  691. 

  692. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:320

  693. msgid ""

  694. "[Migrate your data from Synapse to Matrix Authentication Service using "

  695. "syn2mas](#migrate-your-data-from-synapse-to-matrix-authentication-"

  696. "service-using-syn2mas)"

  697. msgstr ""

  698. 

  699. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:322

  700. msgid ""

  701. "[Adjust your configuration](#adjusting-the-playbook-configuration) again,"

  702. " to:"

  703. msgstr ""

  704. 

  705. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:324

  706. msgid ""

  707. "remove the `matrix_authentication_service_migration_in_progress: false` "

  708. "line"

  709. msgstr ""

  710. 

  711. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:326

  712. msgid ""

  713. "if you had been using [OIDC providers configured in Synapse"

  714. "](./configuring-playbook-synapse.md#synapse--openid-connect-for-single-"

  715. "sign-on), remove all Synapse OIDC-related configuration "

  716. "(`matrix_synapse_oidc_*`) to prevent it being in conflict with the MAS "

  717. "OIDC configuration"

  718. msgstr ""

  719. 

  720. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:328

  721. msgid "Perform the [installation](#installing) again. At this point:"

  722. msgstr ""

  723. 

  724. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:330

  725. msgid "The homeserver will start delegating authentication to MAS."

  726. msgstr ""

  727. 

  728. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:332

  729. msgid ""

  730. "The compatibility layer URLs will be installed. New login sessions will "

  731. "be completed by MAS."

  732. msgstr ""

  733. 

  734. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:334

  735. msgid ""

  736. "[Verify that Matrix Authentication Service is installed correctly"

  737. "](#verify-that-matrix-authentication-service-is-installed-correctly)"

  738. msgstr ""

  739. 

  740. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:336

  741. msgid ""

  742. "Migrate your data from Synapse to Matrix Authentication Service using "

  743. "syn2mas"

  744. msgstr ""

  745. 

  746. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:338

  747. msgid ""

  748. "We **don't** ask you to [run the `syn2mas` migration advisor "

  749. "command](https://element-hq.github.io/matrix-authentication-"

  750. "service/setup/migration.html#run-the-migration-advisor), because it only "

  751. "gives you the green light if your Synapse configuration "

  752. "(`homeserver.yaml`) is configured in a way that's compatible with MAS "

  753. "(delegating authentication to MAS; disabling Synapse's password config; "

  754. "etc.). Until we migrate your data with the `syn2mas` tool, we "

  755. "intentionally avoid doing these changes to allow existing user sessions "

  756. "to work."

  757. msgstr ""

  758. 

  759. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:340

  760. msgid ""

  761. "You can invoke the `syn2mas` tool via the playbook by running the "

  762. "playbook's `matrix-authentication-service-syn2mas` tag. We recommend "

  763. "first doing a [dry-run](#performing-a-syn2mas-dry-run) and then a [real "

  764. "migration](#performing-a-real-syn2mas-migration)."

  765. msgstr ""

  766. 

  767. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:342

  768. msgid "Configuring syn2mas"

  769. msgstr ""

  770. 

  771. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:344

  772. msgid ""

  773. "If you're using [OIDC with Synapse](./configuring-playbook-"

  774. "synapse.md#synapse--openid-connect-for-single-sign-on), you will need to "

  775. "[Configuring upstream OIDC provider mapping for syn2mas](#configuring-"

  776. "upstream-oidc-provider-mapping-for-syn2mas)."

  777. msgstr ""

  778. 

  779. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:346

  780. msgid ""

  781. "If you only have local (non-OIDC) users in your Synapse database, you can"

  782. " likely run `syn2mas` as-is (without doing additional configuration "

  783. "changes)."

  784. msgstr ""

  785. 

  786. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:348

  787. msgid ""

  788. "When you're done with potentially configuring `syn2mas`, proceed to doing"

  789. " a [dry-run](#performing-a-syn2mas-dry-run) and then a [real "

  790. "migration](#performing-a-real-syn2mas-migration)."

  791. msgstr ""

  792. 

  793. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:350

  794. msgid "Configuring upstream OIDC provider mapping for syn2mas"

  795. msgstr ""

  796. 

  797. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:352

  798. msgid ""

  799. "If you have existing OIDC users in your Synapse user database (which will"

  800. " be the case if when using [OIDC with Synapse](./configuring-playbook-"

  801. "synapse.md#synapse--openid-connect-for-single-sign-on)), you may need to "

  802. "pass an additional `--upstreamProviderMapping` argument to the `syn2mas` "

  803. "tool to tell it which provider (on the Synapse side) maps to which other "

  804. "provider on the MAS side."

  805. msgstr ""

  806. 

  807. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:354

  808. msgid "If you don't do this, `syn2mas` would report errors like this one:"

  809. msgstr ""

  810. 

  811. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:356

  812. msgid ""

  813. "[FATAL] migrate - [Failed to import external id 4264b0f0-4f11-4ddd-aedb-"

  814. "b500e4d07c25 with oidc-keycloak for user @alice:example.com: Error: "

  815. "Unknown upstream provider oidc-keycloak]"

  816. msgstr ""

  817. 

  818. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:358

  819. msgid "Below is an example situation and a guide for how to solve it."

  820. msgstr ""

  821. 

  822. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:360

  823. msgid ""

  824. "If in `matrix_synapse_oidc_providers` your provider `idp_id` is (was) "

  825. "named `keycloak`, in the Synapse database users would be associated with "

  826. "the `oidc-keycloak` provider (note the `oidc-` prefix that was added "

  827. "automatically by Synapse to your `idp_id` value)."

  828. msgstr ""

  829. 

  830. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:362

  831. msgid ""

  832. "The same OIDC provider may have an `id` of `01HFVBY12TMNTYTBV8W921M5FA` "

  833. "on the MAS side, as defined in "

  834. "`matrix_authentication_service_config_upstream_oauth2_providers` (see the"

  835. " [Upstream OAuth2 configuration](#upstream-oauth2-configuration) section "

  836. "above)."

  837. msgstr ""

  838. 

  839. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:364

  840. msgid ""

  841. "To tell `syn2mas` how the Synapse-configured OIDC provider maps to the "

  842. "new MAS-configured OIDC provider, add this additional configuration to "

  843. "your `inventory/host_vars/matrix.example.com/vars.yml` file:"

  844. msgstr ""

  845. 

  846. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:373

  847. msgid "Performing a syn2mas dry-run"

  848. msgstr ""

  849. 

  850. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:375

  851. msgid ""

  852. "Having [configured syn2mas](#configuring-syn2mas), we recommend doing a "

  853. "[dry-run](https://en.wikipedia.org/wiki/Dry_run_(testing)) first to "

  854. "verify that everything will work out as expected."

  855. msgstr ""

  856. 

  857. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:377

  858. msgid "A dry-run would not cause downtime, because it avoids stopping Synapse."

  859. msgstr ""

  860. 

  861. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:379

  862. msgid "To perform a dry-run, run:"

  863. msgstr ""

  864. 

  865. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:385

  866. msgid ""

  867. "Observe the command output (especially the last line of the the syn2mas "

  868. "output). If you are confident that the migration will work out as "

  869. "expected, you can proceed with a [real migration](#performing-a-real-"

  870. "syn2mas-migration)."

  871. msgstr ""

  872. 

  873. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:387

  874. msgid "Performing a real syn2mas migration"

  875. msgstr ""

  876. 

  877. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:389

  878. msgid "Before performing a real migration make sure:"

  879. msgstr ""

  880. 

  881. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:391

  882. msgid "you've familiarized yourself with the [expectations](#expectations)"

  883. msgstr ""

  884. 

  885. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:393

  886. msgid "you've performed a Postgres backup, just in case"

  887. msgstr ""

  888. 

  889. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:395

  890. msgid ""

  891. "you're aware of the irreversibility of the migration process without "

  892. "disruption after users have created new login sessions via the new MAS "

  893. "setup"

  894. msgstr ""

  895. 

  896. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:397

  897. msgid ""

  898. "you've [configured syn2mas](#configuring-syn2mas), especially if you've "

  899. "used [OIDC with Synapse](./configuring-playbook-synapse.md#synapse"

  900. "--openid-connect-for-single-sign-on)"

  901. msgstr ""

  902. 

  903. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:399

  904. msgid ""

  905. "you've performed a [syn2mas dry-run](#performing-a-syn2mas-dry-run) and "

  906. "don't see any issues in its output"

  907. msgstr ""

  908. 

  909. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:401

  910. msgid ""

  911. "To perform a real migration, run the `matrix-authentication-service-"

  912. "syn2mas` tag **without** the "

  913. "`matrix_authentication_service_syn2mas_dry_run` variable:"

  914. msgstr ""

  915. 

  916. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:407

  917. msgid ""

  918. "Having performed a `syn2mas` migration once, trying to do it again will "

  919. "report errors for users that were already migrated (e.g. \"Error: Unknown"

  920. " upstream provider oauth-delegated\")."

  921. msgstr ""

  922. 

  923. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:409

  924. msgid "Verify that Matrix Authentication Service is installed correctly"

  925. msgstr ""

  926. 

  927. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:411

  928. msgid ""

  929. "After [installation](#installing), run the `doctor` subcommand of the "

  930. "[`mas-cli` command-line tool](https://element-hq.github.io/matrix-"

  931. "authentication-service/reference/cli/index.html) to verify that MAS is "

  932. "installed correctly."

  933. msgstr ""

  934. 

  935. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:413

  936. msgid "You can do it:"

  937. msgstr ""

  938. 

  939. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:415

  940. msgid ""

  941. "either via the Ansible playbook's `matrix-authentication-service-mas-cli-"

  942. "doctor` tag: `just run-tags matrix-authentication-service-mas-cli-doctor`"

  943. msgstr ""

  944. 

  945. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:417

  946. msgid ""

  947. "or by running the `mas-cli` script on the server (which invokes the `mas-"

  948. "cli` tool inside a container): `/matrix/matrix-authentication-service/bin"

  949. "/mas-cli doctor`"

  950. msgstr ""

  951. 

  952. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:419

  953. msgid "If successful, you should see some output that looks like this:"

  954. msgstr ""

  955. 

  956. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:431

  957. msgid "Management"

  958. msgstr ""

  959. 

  960. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:433

  961. msgid ""

  962. "You can use the [`mas-cli` command-line tool](https://element-"

  963. "hq.github.io/matrix-authentication-service/reference/cli/index.html) "

  964. "(exposed via the `/matrix/matrix-authentication-service/bin/mas-cli` "

  965. "script) to perform administrative tasks against MAS."

  966. msgstr ""

  967. 

  968. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:435

  969. msgid "This documentation page already mentions:"

  970. msgstr ""

  971. 

  972. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:437

  973. msgid ""

  974. "the `mas-cli doctor` sub-command in the [Verify that Matrix "

  975. "Authentication Service is installed correctly](#verify-that-matrix-"

  976. "authentication-service-is-installed-correctly) section, which you can run"

  977. " via the CLI and via the Ansible playbook's `matrix-authentication-"

  978. "service-mas-cli-doctor` tag"

  979. msgstr ""

  980. 

  981. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:439

  982. msgid ""

  983. "the `mas-cli manage register-user` sub-command in the [Registering users"

  984. "](./registering-users.md) documentation"

  985. msgstr ""

  986. 

  987. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:441

  988. msgid ""

  989. "There are other sub-commands available. Run `/matrix/matrix-"

  990. "authentication-service/bin/mas-cli` to get an overview."

  991. msgstr ""

  992. 

  993. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:443

  994. msgid "User registration"

  995. msgstr ""

  996. 

  997. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:445

  998. msgid ""

  999. "After Matrix Authentication Service is [installed](#installing), users "

  1000. "need to be managed there (unless you're managing them in an [upstream "

  1001. "OAuth2 provider](#upstream-oauth2-configuration))."

  1002. msgstr ""

  1003. 

  1004. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:447

  1005. msgid ""

  1006. "You can register users new users as described in the [Registering users"

  1007. "](./registering-users.md) documentation (via `mas-cli manage register-"

  1008. "user` or the Ansible playbook's `register-user` tag)."

  1009. msgstr ""

  1010. 

  1011. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:449

  1012. msgid "Working around email deliverability issues"

  1013. msgstr ""

  1014. 

  1015. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:451

  1016. msgid ""

  1017. "Because Matrix Authentication Service [still insists](https://github.com"

  1018. "/element-hq/matrix-authentication-service/issues/1505) on having a "

  1019. "verified email address for each user, you may need to work around email "

  1020. "deliverability issues if [your email-sending configuration"

  1021. "](./configuring-playbook-email.md) is not working."

  1022. msgstr ""

  1023. 

  1024. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:453

  1025. msgid ""

  1026. "Matrix Authentication Service attempts to verify email addresses by "

  1027. "sending a verification email to the address specified by the user "

  1028. "whenever they log in to an account without a verified email address."

  1029. msgstr ""

  1030. 

  1031. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:455

  1032. msgid ""

  1033. "If email delivery is not working, **you can retrieve the email "

  1034. "configuration code from the Matrix Authentication Service's logs** "

  1035. "(`journalctl -fu matrix-authentication-service`)."

  1036. msgstr ""

  1037. 

  1038. #: ../../../docs/configuring-playbook-matrix-authentication-service.md:457

  1039. msgid ""

  1040. "Alternatively, you can use the [`mas-cli` management tool](#management) "

  1041. "to manually verify email addresses for users. Example: `/matrix/matrix-"

  1042. "authentication-service/bin/mas-cli manage verify-email some.username "

  1043. "email@example.com`"

  1044. msgstr ""