[Web] Add mailbox group and identity provider translations

data/web/lang/lang.en-gb.json

@@ -11,6 +11,7 @@
         "extend_sender_acl": "Allow to extend sender ACL by external addresses",
         "filters": "Filters",
         "login_as": "Login as mailbox user",
+        "mailbox_groups": "Groups",
         "mailbox_relayhost": "Change relayhost for a mailbox",
         "prohibited": "Prohibited by ACL",
         "protocol_access": "Change protocol access",
@@ -146,6 +147,91 @@
         "ays": "Are you sure you want to proceed?",
         "ban_list_info": "See a list of banned IPs below: <b>network (remaining ban time) - [actions]</b>.<br />IPs queued to be unbanned will be removed from the active ban list within a few seconds.<br />Red labels indicate active permanent bans by denylisting.",
         "change_logo": "Change logo",
+        "iam_attribute_field_info": "Optional. LDAP attribute whose value selects the template in the mapping below.",
+        "iam_disabled_filter": "Disabled filter",
+        "iam_disabled_filter_info": "LDAP filter for disabled users. Active Directory accounts with ACCOUNTDISABLE in userAccountControl always count as disabled.",
+        "iam_encryption": "Encryption",
+        "iam_encryption_info": "StartTLS uses the normal port (389). SSL (LDAPS) uses port 636, port 389 is changed automatically.",
+        "iam_encryption_none": "None",
+        "iam_filter_info": "LDAP filter for the users that may log in and are synced, e.g. <code>(objectClass=person)</code>.",
+        "iam_group_autocreate": "Create groups",
+        "iam_group_autocreate_info": "Creates a mailbox group for every IdP group that has none yet. The group mail becomes its address if it is free.",
+        "iam_group_basedn": "Group Base DN",
+        "iam_group_default_domain": "Default group domain",
+        "iam_group_default_domain_info": "Domain of new groups whose mail is not in a mailcow domain.",
+        "iam_group_filter": "Group filter",
+        "iam_group_member_attribute": "Member attribute",
+        "iam_group_member_attribute_info": "Only for \"Member attribute of the groups\", e.g. member or uniqueMember.",
+        "iam_group_member_mode": "Memberships",
+        "iam_group_member_mode_ad_chain": "Active Directory incl. nested groups",
+        "iam_group_member_mode_member": "Member attribute of the groups",
+        "iam_group_member_mode_memberof": "memberOf of the users",
+        "iam_group_name_attribute": "Group name attribute",
+        "iam_group_paths": "Group paths",
+        "iam_group_paths_info": "Comma-separated Keycloak group paths: <code>/Sales</code> or <code>/mailcow/*</code> for all groups below /mailcow. The mailcow client needs the <code>query-groups</code> permission.",
+        "iam_group_sync": "Group sync",
+        "iam_group_sync_info": "Syncs the members of IdP groups to mailbox groups (Mailboxes → Groups). Members added in mailcow stay.",
+        "iam_id_attribute": "ID attribute",
+        "iam_id_attribute_info": "Stable user ID. Empty = objectGUID, entryUUID, nsUniqueId or ipaUniqueID. Changing it links all mailboxes again by email.",
+        "iam_import_users_info": "Creates mailboxes for all users of the IdP with a matching template, without waiting for their first login.",
+        "iam_login_provisioning_info": "Creates the mailbox at the first login of a user, with a matching or the default template.",
+        "iam_mapping_add": "Add mapping",
+        "iam_mapping_info": "The attribute value of a user selects the template (Keycloak and OIDC: <code>mailcow_template</code>). Templates of groups take precedence.",
+        "iam_offboarding": "Offboarding",
+        "iam_offboarding_info": "Users disabled in the IdP or missing in two complete sync runs cannot log in anymore. Their mailbox still receives mail. Only mailboxes disabled by the sync are enabled again.",
+        "iam_offboarding_limit": "Change limit (%)",
+        "iam_offboarding_limit_info": "Sync runs that would disable more mailboxes or remove more group memberships than this share (at least 5) are blocked.",
+        "iam_periodic_full_sync_info": "Updates name and template of existing mailboxes from the IdP.",
+        "iam_redirect_url_add": "Add redirect URL",
+        "iam_section_connection": "Connection",
+        "iam_section_groups": "Groups",
+        "iam_section_login": "Login",
+        "iam_section_sync": "Synchronization",
+        "iam_section_templates": "Mailbox templates",
+        "iam_section_users": "Users",
+        "iam_sync_accounts": "IdP mailboxes",
+        "iam_sync_changes": "Changes",
+        "iam_sync_count_conflicts": "Conflicts",
+        "iam_sync_count_creates": "Created",
+        "iam_sync_count_deactivate": "Login disabled",
+        "iam_sync_count_errors": "Errors",
+        "iam_sync_count_found": "Found again",
+        "iam_sync_count_group_creates": "Groups created",
+        "iam_sync_count_group_renames": "Groups renamed",
+        "iam_sync_count_links": "Linked",
+        "iam_sync_count_membership_removals": "Memberships removed",
+        "iam_sync_count_memberships": "Groups with new members",
+        "iam_sync_count_missing": "Missing",
+        "iam_sync_count_orphaned_groups": "Groups not in IdP",
+        "iam_sync_count_release": "Released",
+        "iam_sync_count_restore": "Login enabled",
+        "iam_sync_count_skipped": "Skipped",
+        "iam_sync_count_updates": "Updated",
+        "iam_sync_details": "Details",
+        "iam_sync_force": "Run without limit",
+        "iam_sync_force_confirm": "Run the sync without the change limit? Mailboxes may be disabled and group memberships removed.",
+        "iam_sync_idp_disabled": "Disabled by IdP",
+        "iam_sync_linked": "Linked",
+        "iam_sync_missing": "Missing in IdP",
+        "iam_sync_mode": "Mode",
+        "iam_sync_mode_force": "Without limit",
+        "iam_sync_mode_preview": "Preview",
+        "iam_sync_mode_run": "Run",
+        "iam_sync_no_changes": "No changes",
+        "iam_sync_none": "No sync runs yet.",
+        "iam_sync_off": "The sync is off. Enable import, periodic sync, offboarding or group sync.",
+        "iam_sync_preview": "Preview",
+        "iam_sync_result": "Result",
+        "iam_sync_run": "Run now",
+        "iam_sync_started": "Started",
+        "iam_sync_status": "Sync status",
+        "iam_sync_status_blocked": "Blocked",
+        "iam_sync_status_error": "Error",
+        "iam_sync_status_info": "Runs start within a minute. A preview shows the changes without applying them.",
+        "iam_sync_status_ok": "OK",
+        "iam_sync_status_pending": "Queued",
+        "iam_sync_status_running": "Running",
+        "iam_username_field_info": "Attribute with the email address, it becomes the mailbox name. Default: mail.",
         "logo_normal_label": "Normal",
         "logo_dark_label": "Inverted for dark mode",
         "configuration": "Configuration",
@@ -224,7 +310,7 @@
         "iam_default_template": "Default Template",
         "iam_default_template_description": "If no template is assigned to a user, the default template will be used for creating the mailbox, but not for updating the mailbox.",
         "iam_description": "Configure an external Provider for Authentication<br>User's mailboxes will be automatically created upon their first login, provided that an attribute mapping has been set.",
-        "iam_extra_permission": "For the following settings to work, the mailcow client in Keycloak needs a <code>Service account</code> and the permission to <code>view-users</code>.",
+        "iam_extra_permission": "For the following settings to work, the mailcow client in Keycloak needs a <code>Service account</code> and the permission to <code>view-users</code> (group sync: also <code>query-groups</code>).",
         "iam_host": "Host",
         "iam_host_info": "Enter one or more LDAP hosts, separated by commas.",
         "iam_import_users": "Import Users",
@@ -417,10 +503,21 @@
     },
     "danger": {
         "access_denied": "Access denied or invalid form data",
+        "alias_group_managed": "Alias %s belongs to a group and can only be changed there",
         "api_key_access_invalid": "Invalid API access type, allowed values are ro and rw",
         "api_key_description_invalid": "API key description must not exceed 255 characters",
         "api_key_network_invalid": "Invalid IP address or network: %s",
         "api_key_service_locked": "API key %s is defined in mailcow.conf and can only be changed there",
+        "group_address_invalid": "Group address %s is invalid or not in the domain of the group",
+        "group_description_invalid": "The group description must not exceed 255 characters",
+        "group_grant_invalid": "Invalid share for mailbox %s",
+        "group_member_idp": "%s is a member through the identity provider and can only be removed there",
+        "group_member_invalid": "%s is not a mailbox and cannot be a group member",
+        "group_name_invalid": "Group name is invalid (1-100 characters)",
+        "group_priority_invalid": "The priority must be a number",
+        "group_send_as_invalid": "Send-as address %s is invalid or unknown",
+        "iam_sync_mode_invalid": "Invalid sync mode",
+        "iam_sync_unavailable": "The identity provider cannot be synced (Keycloak and LDAP only)",
         "tfa_removal_blocked": "Two-factor authentication cannot be removed because it is required for your account.",
         "alias_domain_invalid": "Alias domain %s is invalid",
         "alias_empty": "Alias address must not be empty",
@@ -524,6 +621,7 @@
         "recipient_map_entry_exists": "A Recipient map entry \"%s\" exists",
         "recovery_email_failed": "Could not send a recovery email. Please contact your administrator.",
         "redis_error": "Redis error: %s",
+        "refresh_login_failed": "The session could not be refreshed. Please log in again.",
         "relayhost_invalid": "Map entry %s is invalid",
         "release_send_failed": "Message could not be released: %s",
         "required_data_missing": "Required data %s is missing",
@@ -720,6 +818,12 @@
         "generate": "generate",
         "grant_types": "Grant types",
         "hostname": "Hostname",
+        "iam_idp_disabled": "Login disabled by the IdP sync",
+        "iam_link": "IdP link",
+        "iam_link_info": "The mailbox is bound to this IdP user. Unlink it when the address was given to another IdP user; it is linked again by email.",
+        "iam_missing_since": "Missing in the IdP since",
+        "iam_not_linked": "Not linked yet",
+        "iam_unlink": "Unlink",
         "inactive": "Inactive",
         "internal": "Internal",
         "internal_info": "Internal aliases are only accessible from the own domain or alias domains.",
@@ -837,6 +941,57 @@
         "restart_now": "Restart now",
         "restarting_container": "Restarting container, this may take a while"
     },
+    "groups": {
+        "active": "Active",
+        "add": "Add group",
+        "address": "Group address",
+        "address_hint": "Optional. Mail to this address is delivered to all members.",
+        "description": "Description",
+        "domain": "Domain",
+        "effective_template": "Template from groups",
+        "grant_add": "Add",
+        "grant_folder": "Folder ID in SOGo, personal = default folder",
+        "grant_owner": "Mailbox",
+        "grant_state_applied": "Active",
+        "grant_state_failed": "Failed",
+        "grant_state_pending": "Pending",
+        "grant_subscribe": "Subscribe",
+        "grant_subscribe_imap_hint": "Subscribes the folders of the mailbox for every member within a minute, so mail clients show them. Once: a member who unsubscribes keeps it that way",
+        "grant_subscribe_sogo_hint": "Adds the folder to the SOGo of every member within a minute, once: a member who removes it keeps it removed",
+        "group": "Group",
+        "groups": "Groups",
+        "idp": "IdP",
+        "idp_member": "Synced from the identity provider, can only be changed there",
+        "idp_ref": "IdP group",
+        "imap_grants": "Mailbox access",
+        "imap_grants_hint": "Members open these mailboxes in their mail client (folder Shared/<mailbox>). Read: read and mark as read. Write: also file, move and delete mails. Full access: also delete folders. For team mailboxes without a login of their own, mark the mailbox as shared mailbox.",
+        "info": "Groups bundle mailboxes. A group can have its own address: an alias that delivers to all members automatically (in Exchange: distribution list). Members can send as other addresses, access shared mailboxes, calendars and address books and get a mailbox template. Members synced from the identity provider are marked IdP.",
+        "internal": "Only accept mail from senders of the domain",
+        "list_error": "Groups could not be loaded",
+        "managed_alias": "Managed by group %s",
+        "members": "Members",
+        "memberships": "Group memberships",
+        "name": "Name",
+        "no_memberships": "Not a member of any group",
+        "priority": "Priority",
+        "reapply_template": "Apply the template to all members again",
+        "rights_full": "Full access",
+        "rights_read": "Read",
+        "rights_write": "Write",
+        "send_as": "Send as",
+        "send_as_groups": "May send as (through groups)",
+        "send_as_hint": "Addresses (mailbox or alias) or @domain the members may send as, one per line.",
+        "sender_allowed": "Members may send as the group address",
+        "sogo_grants": "Calendars and address books",
+        "sogo_grants_hint": "Members get access to the SOGo folder of the mailbox. With \"Subscribe\" it appears in their SOGo automatically, otherwise they subscribe to it themselves. Pending: the mailbox has not opened SOGo yet.",
+        "sogo_visible": "Show the group address as identity in SOGo",
+        "template": "Mailbox template",
+        "template_hint": "Applied to all members. A mailbox in several groups gets the template of the group with the highest priority.",
+        "template_none": "No template",
+        "type_calendar": "Calendar",
+        "type_contacts": "Address book",
+        "view": "View"
+    },
     "header": {
         "administration": "Configuration & Details",
         "apps": "Apps",
@@ -1007,6 +1162,8 @@
         "sender": "Sender",
         "set_postfilter": "Mark as postfilter",
         "set_prefilter": "Mark as prefilter",
+        "shared_mailbox": "Shared mailbox",
+        "shared_mailbox_info": "No login of its own (IMAP, SMTP, SOGo, ActiveSync, app passwords, mailcow UI). It receives mail, members of groups open it through shares. No password needed.",
         "sieve_info": "You can store multiple filters per user, but only one prefilter and one postfilter can be active at the same time.<br>\r\nEach filter will be processed in the described order. Neither a failed script nor an issued \"keep;\" will stop processing of further scripts. Changes to global sieve scripts will trigger a restart of Dovecot.<br><br>Global sieve prefilter &#8226; Prefilter &#8226; User scripts &#8226; Postfilter &#8226; Global sieve postfilter",
         "sieve_preset_1": "Discard mail with probable dangerous file types",
         "sieve_preset_2": "Always mark the e-mail of a specific sender as seen",
@@ -1180,7 +1337,12 @@
         "forwarding_host_added": "Forwarding host %s has been added",
         "forwarding_host_removed": "Forwarding host %s has been removed",
         "global_filter_written": "Filter was successfully written to file",
+        "group_added": "Group %s has been added",
+        "group_modified": "Changes to group %s have been saved",
+        "group_removed": "Group %s has been removed",
         "hash_deleted": "Hash deleted",
+        "iam_link_removed": "IdP link of %s removed",
+        "iam_sync_requested": "Sync run queued, it starts within a minute",
         "iam_test_connection": "Connection successful",
         "ip_check_opt_in_modified": "IP check was saved successfully",
         "item_deleted": "Item %s successfully deleted",
@@ -1561,6 +1723,11 @@
         "domain_added_sogo_failed": "Added domain but failed to restart SOGo, please check your server logs.",
         "dovecot_restart_failed": "Dovecot failed to restart, please check the logs",
         "fuzzy_learn_error": "Fuzzy hash learn error: %s",
+        "group_imap_grant_failed": "Mailbox access to %s could not be set in Dovecot yet, it is retried every 15 minutes",
+        "group_sogo_init_failed": "The SOGo folders of %s could not be created yet, it is retried every 15 minutes",
+        "group_subscription_failed": "Subscription for %s failed, it is retried automatically",
+        "group_template_failed": "Template %s could not be applied to %s",
+        "group_too_many_members": "Group %s has more than %s members. Postfix delivers mail to an address to at most that many recipients.",
         "hash_not_found": "Hash not found or already deleted",
         "ip_invalid": "Skipped invalid IP: %s",
         "is_not_primary_alias": "Skipped non-primary alias %s",